# changelog

author: Augusto Caringi <acaringi@redhat.com> [5.14.0-584.el9]
changelog:
  - net: warn if NAPI instance wasn't shut down (Davide Caratti) [RHEL-77816]
  - net: hide the definition of dev_get_by_napi_id() (Davide Caratti) [RHEL-77816]
  - net: page_pool: don't try to stash the napi id (Davide Caratti) [RHEL-77816]
  - xsk: Bring back busy polling support (Davide Caratti) [RHEL-77816]
  - net: Make napi_hash_lock irq safe (Davide Caratti) [RHEL-77816]
  - netdev: prevent accessing NAPI instances from another namespace (Davide Caratti) [RHEL-77816] {CVE-2025-21659}
  - netdev-genl: Hold rcu_read_lock in napi_set (Davide Caratti) [RHEL-77816]
  - mlx4: Add support for persistent NAPI config to RX CQs (Davide Caratti) [RHEL-77816]
  - mlx5: Add support for persistent NAPI config (Davide Caratti) [RHEL-77816]
  - bnxt: Add support for persistent NAPI config (Davide Caratti) [RHEL-77816]
  - netdev-genl: Support setting per-NAPI config values (Davide Caratti) [RHEL-77816]
  - net: napi: Add napi_config (Davide Caratti) [RHEL-77816]
  - netdev-genl: Dump gro_flush_timeout (Davide Caratti) [RHEL-77816]
  - net: napi: Make gro_flush_timeout per-NAPI (Davide Caratti) [RHEL-77816]
  - netdev-genl: Dump napi_defer_hard_irqs (Davide Caratti) [RHEL-77816]
  - net: napi: Make napi_defer_hard_irqs per-NAPI (Davide Caratti) [RHEL-77816]
  - x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-88224]
  - x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-88224]
  - KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-88224]
  - x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-88224]
  - x86/bugs: Do not use UNTRAIN_RET with IBPB on entry (Waiman Long) [RHEL-88224]
  - x86/bugs: Skip RSB fill at VMEXIT (Waiman Long) [RHEL-88224]
  - x86/cpufeatures: Add a IBPB_NO_RET BUG flag (Waiman Long) [RHEL-88224]
  - x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET (Waiman Long) [RHEL-88224]
  - x86/bugs: Fix handling when SRSO mitigation is disabled (Waiman Long) [RHEL-88224]
  - x86/bugs: Add missing NO_SSB flag (Waiman Long) [RHEL-88224]
  - Documentation/srso: Document a method for checking safe RET operates properly (Waiman Long) [RHEL-88224]
  - redhat/configs: Add new CONFIG_MITIGATION_* kconfig files (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for GDS (Waiman Long) [RHEL-88224]
  - x86/bugs: Remove GDS Force Kconfig option (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for SSB (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for Spectre V2 (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for SRBDS (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for Spectre v1 (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for RETBLEED (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for L1TF (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for MMIO Stable Data (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for TAA (Waiman Long) [RHEL-88224]
  - x86/bugs: Add a separate config for MDS (Waiman Long) [RHEL-88224]
  - x86/cpufeatures: Flip the /proc/cpuinfo appearance logic (Waiman Long) [RHEL-88224]
  - x86/bugs: Add 'spectre_bhi=vmexit' cmdline option (Waiman Long) [RHEL-88224]
  - x86/bugs: Switch to new Intel CPU model defines (Waiman Long) [RHEL-88224]
  - x86/bugs: Switch to new Intel CPU model defines (Waiman Long) [RHEL-88224]
  - x86/cpu: Use EXPORT_PER_CPU_SYMBOL_GPL() for x86_spec_ctrl_current (Waiman Long) [RHEL-88224]
  - linux/dim: Fix divide by 0 in RDMA DIM (CKI Backport Bot) [RHEL-80826] {CVE-2022-49670}
  - scsi: megaraid_sas: Driver version update to 07.734.00.00-rc1 (Chandrakanth Patil) [RHEL-80700]
  - scsi: megaraid_sas: Block zero-length ATA VPD inquiry (Chandrakanth Patil) [RHEL-80700]
  - scsi: megaraid_sas: Make most module parameters static (Chandrakanth Patil) [RHEL-80700]
  - powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-88421]
  - ibmvnic: Don't reference skb after sending to VIOS (Mamatha Inamdar) [RHEL-83359] {CVE-2025-21855}
  - netfilter: nft_tunnel: fix geneve_opt type confusion addition (CKI Backport Bot) [RHEL-88783] {CVE-2025-22056}
  - iommu/amd: Fix header file (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Fix possible circular locking dependency (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Add the document for Intel IOMMU debugfs (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Preserve default DTE fields when updating Host Page Table Root (Jerry Snitselaar) [RHEL-78704]
  - drm/tegra: Fix NULL vs IS_ERR() check in probe() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Make intel_iommu_drain_pasid_prq() cover faults for RID (Jerry Snitselaar) [RHEL-78704]
  - iommu: Fix a spelling error (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Expicitly enable CNTRL.EPHEn bit in resume path (Jerry Snitselaar) [RHEL-78704]
  - iommu: Fix potential memory leak in iopf_queue_remove_device() (Jerry Snitselaar) [RHEL-78704]
  - iommu/hyper-v: Don't assume cpu_possible_mask is dense (Jerry Snitselaar) [RHEL-78704]
  - iommufd: Keep OBJ/IOCTL lists in an alphabetical order (Jerry Snitselaar) [RHEL-78705]
  - iommufd: Deal with IOMMU_HWPT_FAULT_ID_VALID in iommufd core (Jerry Snitselaar) [RHEL-78708]
  - iommufd/selftest: Remove domain_alloc_paging() (Jerry Snitselaar) [RHEL-78708]
  - iommu/amd: Fully decode all combinations of alloc_paging_flags (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Move the nid to pdom_setup_pgtable() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Change amd_iommu_pgtable to use enum protection_domain_mode (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove type argument from do_iommu_domain_alloc() and related (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove dev == NULL checks (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove unused amd_iommu_domain_update() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: remove return value of amd_iommu_detect (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove amd_iommu_apply_erratum_63() (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Lock DTE before updating the entry with WRITE_ONCE() (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Modify clear_dte_entry() to avoid in-place update (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Introduce helper function get_dte256() (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Modify set_dte_entry() to use 256-bit DTE helpers (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Introduce helper function to update 256-bit DTE (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Introduce struct ivhd_dte_flags to store persistent DTE flags (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Disable AMD IOMMU if CMPXCHG16B feature is not supported (Jerry Snitselaar) [RHEL-75906]
  - iommu/amd: Misc ACPI IVRS debug info clean up (Jerry Snitselaar) [RHEL-75906]
  - iommu/vt-d: Link cache tags of same iommu unit together (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Draining PRQ in sva unbind path when FPD bit set (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove iommu cap audit (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove domain_alloc_paging() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE (Jerry Snitselaar) [RHEL-78704]
  - iommu: Use str_enable_disable-like helpers (Jerry Snitselaar) [RHEL-78704]
  - lib/string_choices: Add some comments to make more clear for string choices helpers. (Jerry Snitselaar) [RHEL-78705]
  - lib/string_choices: Introduce several opposite string choice helpers (Jerry Snitselaar) [RHEL-78705]
  - lib/string_choices: Add str_true_false()/str_false_true() helper (Jerry Snitselaar) [RHEL-78705]
  - string_choices: Add wrapper for str_down_up() (Jerry Snitselaar) [RHEL-78705]
  - lib/string_choices: Add str_up_down() helper (Jerry Snitselaar) [RHEL-78705]
  - iommu: Remove the remove_dev_pasid op (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Make the blocked domain support PASID (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Make the blocked domain support PASID (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu-v3: Make the blocked domain support PASID (Jerry Snitselaar) [RHEL-78705]
  - iommu: Detaching pasid by attaching to the blocked_domain (Jerry Snitselaar) [RHEL-78704]
  - iommu: Consolidate the ops->remove_dev_pasid usage into a helper (Jerry Snitselaar) [RHEL-78704]
  - iommu: Prevent pasid attach if no ops->remove_dev_pasid (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu-v3: Add missing #include of linux/string_choices.h (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Use str_read_write helper w/ logs (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Add way to debug pgtable walk (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Re-use the pgtable walk for iova_to_phys (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Make pgtable walker more generic (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Add ACTLR data and support for qcom_smmu_500 (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Introduce ACTLR custom prefetcher settings (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Add support for PRR bit setup (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Refactor qcom_smmu structure to include single pointer (Jerry Snitselaar) [RHEL-78705]
  - redhat/configs: enable ARM_SMMU_MMU_500_CPRE_ERRATA (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Re-enable context caching in smmu reset operation (Jerry Snitselaar) [RHEL-78705]
  - iommu/tegra241-cmdqv: Read SMMU IDR1.CMDQS instead of hardcoding (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Fix cfg reading in arm_lpae_concat_mandatory() (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Add coverage for different OAS in selftest (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Fix stage-2 concatenation with 16K (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Remove domain_alloc_paging() (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Make domain_alloc_paging_flags() directly determine the S1/S2 (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Remove arm_smmu_domain_finalise() during attach (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Document SVA interaction with new pagetable features (Jerry Snitselaar) [RHEL-78705]
  - arm64: add stubs for system_supports_poe and system_supports_gcs (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmuv3: Update comments about ATS and bypass (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Log better event records (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Introduce struct arm_smmu_event (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-qcom: add sdm670 adreno iommu compatible (Jerry Snitselaar) [RHEL-78705]
  - powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Avoid draining PRQ in sva mm release path (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Add lockdep asserts for domain->dev_list (Jerry Snitselaar) [RHEL-78704]
  - scatterlist: fix incorrect func name in kernel-doc (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu-v3: Improve uAPI comment for IOMMU_HW_INFO_TYPE_ARM_SMMUV3 (Jerry Snitselaar) [RHEL-78705]
  - iommufd/selftest: Cover IOMMU_FAULT_QUEUE_ALLOC in iommufd_fail_nth (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Fix typos in kernel-doc comments (Jerry Snitselaar) [RHEL-78708]
  - iommu: Rename ops->domain_alloc_user() to domain_alloc_paging_flags() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Add ops->domain_alloc_nested() (Jerry Snitselaar) [RHEL-78704]
  - scatterlist: fix a typo (Jerry Snitselaar) [RHEL-78704]
  - kmemleak: iommu/iova: fix transient kmemleak false positive (Jerry Snitselaar) [RHEL-78704]
  - iommu: Make set_dev_pasid op support domain replacement (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu-v3: Make set_dev_pasid() op support replace (Jerry Snitselaar) [RHEL-78705]
  - iommu/vt-d: Add set_dev_pasid callback for nested domain (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Make identity_domain_set_dev_pasid() to handle domain replacement (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Make intel_svm_set_dev_pasid() support domain replacement (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Limit intel_iommu_set_dev_pasid() for paging domain (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Make intel_iommu_set_dev_pasid() to handle domain replacement (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Add iommu_domain_did() to get did (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Consolidate the struct dev_pasid_info add/remove (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Add pasid replace helpers (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Refactor the pasid setup helpers (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Add a helper to flush cache for updating present pasid entry (Jerry Snitselaar) [RHEL-78704]
  - iommu: Pass old domain to set_dev_pasid op (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Drain PRQs when domain removed from RID (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Drop pasid requirement for prq initialization (Jerry Snitselaar) [RHEL-78704]
  - iommufd: Enable PRI when doing the iommufd_hwpt_alloc (Jerry Snitselaar) [RHEL-78708]
  - iommu/vt-d: Move IOMMU_IOPF into INTEL_IOMMU (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove the pasid present check in prq_event_thread (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Separate page request queue from SVM (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Drop s1_pgtbl from dmar_domain (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove unused dmar_msi_read (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Increase buffer size for device name (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Use PCI_DEVID() macro (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Refine intel_iommu_domain_alloc_user() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Refactor first_level_by_default() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove domain_update_iommu_superpage() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove domain_update_iommu_cap() (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Enhance compatibility check for paging domain attach (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Remove unused domain_alloc callback (Jerry Snitselaar) [RHEL-78704]
  - iommu/vt-d: Add domain_alloc_paging support (Jerry Snitselaar) [RHEL-78704]
  - iommu/iova: Fix typo 'adderss' (Jerry Snitselaar) [RHEL-78704]
  - iommu: Create __iommu_alloc_identity_domain() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Put domain allocation in __iommu_group_alloc_blocking_domain() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Put list_add/del(dev_data) back under the domain->lock (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Improve amd_iommu_release_device() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Add ops->release_domain (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Reorder attach device code (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Convert dev_data lock from spinlock to mutex (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Rearrange attach device code (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Reduce domain lock scope in attach device path (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Do not detach devices in domain free path (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove unused amd_iommus variable (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: xarray to track protection_domain->iommu list (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Remove protection_domain.dev_cnt variable (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Use ida interface to manage protection domain ID (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Fix corruption when mapping large pages from 0 (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Do not try copy old DTE resume path (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Use atomic64_inc_return() in iommu.c (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Implement global identity domain (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Enhance amd_iommu_domain_alloc_user() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Pass page table type as param to pdom_setup_pgtable() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Separate page table setup from domain allocation (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Move V2 page table support check to early_amd_iommu_init() (Jerry Snitselaar) [RHEL-78704]
  - iommu/amd: Add helper function to check GIOSUP/GTSUP (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu-v3: Enhance domain_alloc_user() to allocate PASID capable domain (Jerry Snitselaar) [RHEL-78705]
  - iommu: Add new flag to explictly request PASID capable domain (Jerry Snitselaar) [RHEL-78704]
  - iommu: Fix prototype of iommu_paging_domain_alloc_flags() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Introduce iommu_paging_domain_alloc_flags() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Refactor __iommu_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Remove iommu_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - remoteproc: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - drm/nouveau/tegra: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - gpu: host1x: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - drm/tegra: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Restore iommu_flush_iotlb_all() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Remove useless flush from iommu_create_device_direct_mappings() (Jerry Snitselaar) [RHEL-78704]
  - iommu/sysfs: constify the class struct (Jerry Snitselaar) [RHEL-78704]
  - iommu: Remove iommu_present() (Jerry Snitselaar) [RHEL-78704]
  - iommu: Reorganize kerneldoc parameter names (Jerry Snitselaar) [RHEL-78704]
  - iommu: Make bus_iommu_probe() static (Jerry Snitselaar) [RHEL-78704]
  - iommu: Add a kdoc to iommu_unmap() (Jerry Snitselaar) [RHEL-78704]
  - iommu/io-pgtable-arm: Remove split on unmap behavior (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Add self test for the last page in the IAS (Jerry Snitselaar) [RHEL-78705]
  - iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Import IOMMUFD module namespace (Jerry Snitselaar) [RHEL-55204]
  - iommufd: IOMMU_IOAS_CHANGE_PROCESS selftest (Jerry Snitselaar) [RHEL-78708]
  - selftests: iommu: Use installed kernel headers search path (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Add IOMMU_IOAS_CHANGE_PROCESS (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Lock all IOAS objects (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Export do_update_pinned (Jerry Snitselaar) [RHEL-78708]
  - iommu/arm-smmu-v3: Support IOMMU_HWPT_INVALIDATE using a VIOMMU object (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Allow ATS for IOMMU_DOMAIN_NESTED (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Use S2FWB for NESTED domains (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Support IOMMU_DOMAIN_NESTED (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Support IOMMU_VIOMMU_ALLOC (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Expose the arm_smmu_attach interface (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Implement IOMMU_HWPT_ALLOC_NEST_PARENT (Jerry Snitselaar) [RHEL-55204]
  - redhat/configs: Enable CONFIG_ARM_SMMU_V3_IOMMUFD (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Support IOMMU_GET_HW_INFO via struct arm_smmu_hw_info (Jerry Snitselaar) [RHEL-55204]
  - iommu/arm-smmu-v3: Report IOMMU_CAP_ENFORCE_CACHE_COHERENCY for CANWBS (Jerry Snitselaar) [RHEL-55204]
  - ACPI/IORT: Support CANWBS memory access flag (Jerry Snitselaar) [RHEL-55204]
  - ACPICA: IORT: Update for revision E.f (Jerry Snitselaar) [RHEL-55204]
  - vfio: Remove VFIO_TYPE1_NESTING_IOMMU (Jerry Snitselaar) [RHEL-78708]
  - Documentation: userspace-api: iommufd: Update vDEVICE (Jerry Snitselaar) [RHEL-73590]
  - iommufd/selftest: Add vIOMMU coverage for IOMMU_HWPT_INVALIDATE ioctl (Jerry Snitselaar) [RHEL-73590]
  - iommufd/selftest: Add IOMMU_TEST_OP_DEV_CHECK_CACHE test command (Jerry Snitselaar) [RHEL-73590]
  - iommufd/selftest: Add mock_viommu_cache_invalidate (Jerry Snitselaar) [RHEL-73590]
  - iommufd/viommu: Add iommufd_viommu_find_dev helper (Jerry Snitselaar) [RHEL-73590]
  - iommu: Add iommu_copy_struct_from_full_user_array helper (Jerry Snitselaar) [RHEL-73590]
  - iommufd: Allow hwpt_id to carry viommu_id for IOMMU_HWPT_INVALIDATE (Jerry Snitselaar) [RHEL-73590]
  - iommu/viommu: Add cache_invalidate to iommufd_viommu_ops (Jerry Snitselaar) [RHEL-73590]
  - iommufd/selftest: Add IOMMU_VDEVICE_ALLOC test coverage (Jerry Snitselaar) [RHEL-73590]
  - iommufd/viommu: Add IOMMUFD_OBJ_VDEVICE and IOMMU_VDEVICE_ALLOC ioctl (Jerry Snitselaar) [RHEL-73590]
  - Documentation: userspace-api: iommufd: Update vIOMMU (Jerry Snitselaar) [RHEL-55217]
  - iommufd/selftest: Add IOMMU_VIOMMU_ALLOC test coverage (Jerry Snitselaar) [RHEL-55217]
  - iommufd/selftest: Add IOMMU_VIOMMU_TYPE_SELFTEST (Jerry Snitselaar) [RHEL-55217]
  - iommufd/selftest: Add refcount to mock_iommu_device (Jerry Snitselaar) [RHEL-55217]
  - iommufd/selftest: Prepare for mock_viommu_alloc_domain_nested() (Jerry Snitselaar) [RHEL-55217]
  - iommufd/selftest: Add container_of helpers (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Allow pt_id to carry viommu_id for IOMMU_HWPT_ALLOC (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Add alloc_domain_nested op to iommufd_viommu_ops (Jerry Snitselaar) [RHEL-55217]
  - iommufd/viommu: Add IOMMU_VIOMMU_ALLOC ioctl (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Verify object in iommufd_object_finalize/abort() (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Introduce IOMMUFD_OBJ_VIOMMU and its related struct (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Move _iommufd_object_alloc helper to a sharable file (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Move struct iommufd_object to public iommufd header (Jerry Snitselaar) [RHEL-55217]
  - iommufd: Allow fault reporting for non-PRI PCI devices (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Selftest coverage for IOMMU_IOAS_MAP_FILE (Jerry Snitselaar) [RHEL-78708]
  - iommufd: File mappings for mdev (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Add IOMMU_IOAS_MAP_FILE (Jerry Snitselaar) [RHEL-78708]
  - iommufd: pfn_reader for file mappings (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Folio subroutines (Jerry Snitselaar) [RHEL-78708]
  - iommufd: pfn_reader local variables (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Generalize iopt_pages address (Jerry Snitselaar) [RHEL-78708]
  - iommufd: Rename uptr in iopt_alloc_iova() (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: Add folio_add_pins() (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: handle NULL pages in unpin_user_pages() (Jerry Snitselaar) [RHEL-78708] {CVE-2024-56612}
  - mm/gup: avoid an unnecessary allocation call for FOLL_LONGTERM cases (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: stop leaking pinned pages in low memory conditions (Jerry Snitselaar) [RHEL-78708]
  - mm/hugetlb: simplify refs in memfd_alloc_folio (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: fix memfd_pin_folios alloc race panic (Jerry Snitselaar) [RHEL-78708] {CVE-2024-49872}
  - mm/gup: fix memfd_pin_folios hugetlb page allocation (Jerry Snitselaar) [RHEL-78708]
  - mm/hugetlb: fix memfd_pin_folios resv_huge_pages leak (Jerry Snitselaar) [RHEL-78708]
  - mm/hugetlb: fix memfd_pin_folios free_huge_pages leak (Jerry Snitselaar) [RHEL-78708] {CVE-2024-49964}
  - mm/filemap: fix filemap_get_folios_contig THP panic (Jerry Snitselaar) [RHEL-78708] {CVE-2024-49873}
  - mm/gup: introduce memfd_pin_folios() for pinning memfd folios (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: introduce check_and_migrate_movable_folios() (Jerry Snitselaar) [RHEL-78708]
  - mm/gup: introduce unpin_folio/unpin_folios helpers (Jerry Snitselaar) [RHEL-78708]
  - Documentation: userspace-api: iommufd: Update HWPT_PAGING and HWPT_NESTED (Jerry Snitselaar) [RHEL-78708]
  - dma-mapping: fix swapped dir/flags arguments to trace_dma_alloc_sgt_err (Jerry Snitselaar) [RHEL-78704]
  - dma-mapping: drop unneeded includes from dma-mapping.h (Jerry Snitselaar) [RHEL-78704]
  - dma-mapping: trace more error paths (Jerry Snitselaar) [RHEL-78704]
  - dma-mapping: use trace_dma_alloc for dma_alloc* instead of using trace_dma_map (Jerry Snitselaar) [RHEL-78704]
  - dma-mapping: trace dma_alloc/free direction (Jerry Snitselaar) [RHEL-78704]
  - dma-mapping: use macros to define events in a class (Jerry Snitselaar) [RHEL-78704]
  - redhat/configs: Remove CONFIG_DMA_API_DEBUG_SG (Jerry Snitselaar) [RHEL-78704]
  - dma-debug: remove DMA_API_DEBUG_SG (Jerry Snitselaar) [RHEL-78704]
  - dma-debug: fix physical address calculation for struct dma_debug_entry (Jerry Snitselaar) [RHEL-78708]
  - dma-debug: store a phys_addr_t in struct dma_debug_entry (Jerry Snitselaar) [RHEL-78704]
  - dma-debug: fix a possible deadlock on radix_lock (Jerry Snitselaar) [RHEL-78704] {CVE-2024-47143}
  - docs/core-api: swiotlb: fix typos (Jerry Snitselaar) [RHEL-78704]
  - iommu/arm-smmu: Clarify MMU-500 CPRE workaround (Jerry Snitselaar) [RHEL-78705]
  - iommu/vt-d: Cleanup apic_printk() (Jerry Snitselaar) [RHEL-78704]
  - x86/apic: Provide apic_printk() helpers (Jerry Snitselaar) [RHEL-78704]
  - iommu: Manage driver probe deferral better (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu-v3: Clean up more on probe failure (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Retire probe deferral workaround (Jerry Snitselaar) [RHEL-78705]
  - iommu/arm-smmu: Make instance lookup robust (Jerry Snitselaar) [RHEL-78705]
  - kselftest/arm64: signal: drop now redundant GNU_SOURCE definition (Jerry Snitselaar) [RHEL-78704]
  - selftests: mptcp: extend CFLAGS to keep options from environment (Jerry Snitselaar) [RHEL-78704]
  - selftests: centralize -D_GNU_SOURCE= to CFLAGS in lib.mk (Jerry Snitselaar) [RHEL-78704]
  - of: address: always use dma_default_coherent for default coherency (Jerry Snitselaar) [RHEL-78704]
  - of: also handle dma-noncoherent in of_dma_is_coherent() (Jerry Snitselaar) [RHEL-78704]
  - virtio/vsock: Fix accept_queue memory leak (Jon Maloy) [RHEL-69713] {CVE-2024-53119}
  - sched: sch_cake: add bounds checks to host bulk flow fairness counts (Xin Long) [RHEL-77314] {CVE-2025-21647}
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (CKI Backport Bot) [RHEL-86841] {CVE-2025-21993}
  - page_pool: Track DMA-mapped pages and unmap them when destroying the pool (Toke Høiland-Jørgensen) [RHEL-76845]
  - page_pool: Move pp_magic check into helper functions (Toke Høiland-Jørgensen) [RHEL-76845]
  - media: v4l2-mediabus: Drop V4L2_MBUS_CSI2_CONTINUOUS_CLOCK flag (Kate Hsuan) [RHEL-85049]
  - media: v4l2-mediabus: Drop legacy V4L2_MBUS_CSI2_CHANNEL_* flags (Kate Hsuan) [RHEL-85049]
  - media: v4l2-mediabus: Use structures to describe bus configuration (Kate Hsuan) [RHEL-85049]
  - media: v4l2-fwnode: Move bus config structure to v4l2_mediabus.h (Kate Hsuan) [RHEL-85049]
  - mm/gup: Refuse VM_PFNMAP in follow_page() (Donald Dutile) [RHEL-87404]
  - net: tun: unlink NAPI from device on destruction (CKI Backport Bot) [RHEL-80840] {CVE-2022-49672}
  - ata: libata-scsi: Improve CDL control (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Fix ata_msense_control_ata_feature() (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type (Tomas Henzl) [RHEL-72596]
  - ata: libata-sata: Save all fields from sense data descriptor (Tomas Henzl) [RHEL-72596]
  - ata: libata: Fix NCQ Non-Data log not supported print (Tomas Henzl) [RHEL-72596]
  - ata: libata: Improve return value of atapi_check_dma() (Tomas Henzl) [RHEL-72596]
  - ahci: add PCI ID for Marvell 88SE9215 SATA Controller (Tomas Henzl) [RHEL-72596]
  - ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode (Tomas Henzl) [RHEL-72596]
  - ata: sata_gemini: Remove unused gemini_sata_reset_bridge() (Tomas Henzl) [RHEL-72596]
  - ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys() (Tomas Henzl) [RHEL-72596]
  - ata: Constify struct pci_device_id (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Document all VPD page inquiry actors (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Refactor ata_scsiop_maint_in() (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Refactor ata_scsi_simulate() (Tomas Henzl) [RHEL-72596]
  - ata: libata-scsi: Refactor scsi_6_lba_len() with use of get_unaligned_be24() (Tomas Henzl) [RHEL-72596]
  - ata: Fix typos in the comment (Tomas Henzl) [RHEL-72596]
  - net: fib_rules: Fix iif / oif matching on L3 master device (Antoine Tenart) [RHEL-84584]
  - net: fib_rules: annotate data-races around rule->[io]ifindex (Antoine Tenart) [RHEL-84584]
  - net: Remove likely from l3mdev_master_ifindex_by_index (Antoine Tenart) [RHEL-84584]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-585.el9]
changelog:
  - dmaengine: amd: qdma: Remove using the private get and set dma_ops APIs (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: Revert "dmaengine: qcom: bam_dma: Avoid writing unavailable register" (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Enable Function Level Reset (FLR) for halt (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Refactor halt handler (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Add idxd_device_config_save() and idxd_device_config_restore() helpers (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Binding and unbinding IDXD device and driver (Jerry Snitselaar) [RHEL-78706]
  - bitmap: Define a cleanup function for bitmaps (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Add idxd_pci_probe_alloc() helper (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: qcom: gpi: Add GPI immediate DMA support for SPI protocol (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: bcm2835-dma: Prevent suspend if DMA channel is busy (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: ti: k3-udma: Add support for J722S CSI BCDMA (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: ti: edma: fix OF node reference leaks in edma_driver (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: ti: edma: make the loop condition simpler in edma_probe() (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: qcom: bam_dma: Avoid writing unavailable register (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Remove unused idxd_(un)register_bus_type (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Add a new IAA device ID on Panther Lake family platforms (Jerry Snitselaar) [RHEL-47414]
  - dmaengine: sh: rcar-dmac: add comment for r8a779a0 compatible (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: Move AMD PTDMA driver to amd directory (Jerry Snitselaar) [RHEL-78706]
  - redhat/configs: Add CONFIG_AMD_QDMA (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: amd: qdma: Add AMD QDMA driver (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Remove a useless mutex (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: fix typo in the comment (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: idxd: Move DSA/IAA device IDs to IDXD driver (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: acpi: Clean up headers (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: acpi: Simplify devm_acpi_dma_controller_register() (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: acpi: Drop unused devm_acpi_dma_controller_free() (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: sh: rz-dmac: add r7s72100 support (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: sh: Kconfig: Make RZ_DMAC depend on ARCH_RZG2L (Jerry Snitselaar) [RHEL-78706]
  - dmaengine: sh: Kconfig: Add ARCH_R9A07G054 dependency for RZ_DMAC config option (Jerry Snitselaar) [RHEL-78706]
  - nvme: print firmware bug note for non-unique identifiers (Bryan Gurney) [RHEL-89350]
  - nvme-pci: add BOGUS_NID quirk for Samsung PM1733 (Bryan Gurney) [RHEL-89350]
  - vsock: Orphan socket after transport release (Jon Maloy) [RHEL-81484] {CVE-2025-21756}
  - vsock: Keep the binding until socket destruction (Jon Maloy) [RHEL-81484] {CVE-2025-21756}
  - bpf, vsock: Invoke proto::close on close() (Jon Maloy) [RHEL-81484] {CVE-2025-21756}
  - RDMA/rxe: Fix the qp flush warnings in req (CKI Backport Bot) [RHEL-72373] {CVE-2024-53229}
  - net: ppp: Add bound checking for skb data on ppp_sync_txmung (Guillaume Nault) [RHEL-89647] {CVE-2025-37749}
  - cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode (David Arcari) [RHEL-81770]
  - ext4: fix OOB read when checking dotdot dir (CKI Backport Bot) [RHEL-87984] {CVE-2025-37785}
  - ionic: add module eeprom channel data to ionic_if and ethtool (Mohammad Heib) [RHEL-88150]
  - ionic: support ethtool get_module_eeprom_by_page (Mohammad Heib) [RHEL-88150]
  - ionic: extend the QSFP module sprom for more pages (Mohammad Heib) [RHEL-88150]
  - ionic: use ee->offset when returning sprom data (Mohammad Heib) [RHEL-88150]
  - ionic: no double destroy workqueue (Mohammad Heib) [RHEL-88150]
  - ionic: Fix netdev notifier unregister on failure (Mohammad Heib) [RHEL-88150]
  - ionic: remove the unused nb_work (Mohammad Heib) [RHEL-88150]
  - ionic: add support for QSFP_PLUS_CMIS (Mohammad Heib) [RHEL-88150]
  - ionic: add speed defines for 200G and 400G (Mohammad Heib) [RHEL-88150]
  - ionic: Translate IONIC_RC_ENOSUPP to EOPNOTSUPP (Mohammad Heib) [RHEL-88150]
  - ionic: Use VLAN_ETH_HLEN when possible (Mohammad Heib) [RHEL-88150]
  - ionic: add asic codes to firmware interface file (Mohammad Heib) [RHEL-88150]
  - hugetlbfs: support idmapped mounts (CKI Backport Bot) [RHEL-35573]
  - redhat: create 'systemd-volatile-overlay' addon for UKI (Emanuele Giuseppe Esposito) [RHEL-86487]
  - efi: Fix building of efi-pstore when CONFIG_EFI_VARS_PSTORE=m (Lenny Szubowicz) [RHEL-90260]
  - ACPI: processor idle: Revert "avoid call to raw_local_irq_disable() from acpi_safe_halt()" (Waiman Long) [RHEL-22238]
  - ACPI/HMAT: Move HMAT messages to pr_debug() (Steve Dunnagan) [RHEL-70321]
  - cpufreq: Reference count policy in cpufreq_update_limits() (David Arcari) [RHEL-67849]
  - cpufreq/amd-pstate: Use scope based cleanup for cpufreq_policy refs [partial] (David Arcari) [RHEL-67849]
  - platform/x86/amd: amd_3d_vcache: Add sysfs ABI documentation (David Arcari) [RHEL-67849]
  - platform/x86/amd: amd_3d_vcache: Add AMD 3D V-Cache optimizer driver (David Arcari) [RHEL-67849]
  - redhat/configs: enable CONFIG_AMD_3D_VCACHE for x86 on RHEL (David Arcari) [RHEL-67849]
  - enic: get max rq & wq entries supported by hw, 16K queues (Nelson Escobar) [RHEL-84862]
  - enic: cleanup of enic wq request completion path (Nelson Escobar) [RHEL-84862]
  - enic: added enic_wq.c and enic_wq.h (Nelson Escobar) [RHEL-84862]
  - enic: remove unused function cq_enet_wq_desc_dec (Nelson Escobar) [RHEL-84862]
  - enic: enable rq extended cq support (Nelson Escobar) [RHEL-84862]
  - enic: enic rq extended cq defines (Nelson Escobar) [RHEL-84862]
  - enic: enic rq code reorg (Nelson Escobar) [RHEL-84862]
  - enic: Move function from header file to c file (Nelson Escobar) [RHEL-84862]
  - enic: add dependency on Page Pool (Nelson Escobar) [RHEL-84862]
  - enic: remove copybreak tunable (Nelson Escobar) [RHEL-84862]
  - enic: Use the Page Pool API for RX (Nelson Escobar) [RHEL-84862]
  - enic: Simplify RX handler function (Nelson Escobar) [RHEL-84862]
  - enic: Move RX functions to their own file (Nelson Escobar) [RHEL-84862]
  - enic: Fix typo in comment in table indexed by link speed (Nelson Escobar) [RHEL-84862]
  - enic: Obtain the Link speed only after the link comes up (Nelson Escobar) [RHEL-84862]
  - enic: Move RX coalescing set function (Nelson Escobar) [RHEL-84862]
  - enic: Move kdump check into enic_adjust_resources() (Nelson Escobar) [RHEL-84862]
  - enic: Move enic resource adjustments to separate function (Nelson Escobar) [RHEL-84862]
  - enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (Nelson Escobar) [RHEL-84862]
  - enic: Allocate arrays in enic struct based on VIC config (Nelson Escobar) [RHEL-84862]
  - enic: Save resource counts we read from HW (Nelson Escobar) [RHEL-84862]
  - enic: Make MSI-X I/O interrupts come after the other required ones (Nelson Escobar) [RHEL-84862]
  - enic: Create enic_wq/rq structures to bundle per wq/rq data (Nelson Escobar) [RHEL-84862]
  - enic: Report some per queue statistics in ethtool (Nelson Escobar) [RHEL-84862]
  - enic: Report per queue statistics in netdev qstats (Nelson Escobar) [RHEL-84862]
  - enic: Collect per queue statistics (Nelson Escobar) [RHEL-84862]
  - enic: Use macro instead of static const variables for array sizes (Nelson Escobar) [RHEL-84862]
  - enic: add ethtool get_channel support (Nelson Escobar) [RHEL-84862]
  - enic: Validate length of nl attributes in enic_set_vf_port (Nelson Escobar) [RHEL-84862]
  - enic: Replace hardcoded values for vnic descriptor by defines (Nelson Escobar) [RHEL-84862]
  - enic: Avoid false positive under FORTIFY_SOURCE (Nelson Escobar) [RHEL-84862]
  - smb: client: Add check for next_buffer in receive_encrypted_standard() (CKI Backport Bot) [RHEL-83243] {CVE-2025-21844}


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-586.el9]
changelog:
  - net: introduce per netns packet chains (Paolo Abeni) [RHEL-88921]
  - nvme: enable CONFIG_NVME_KEYRING (Maurizio Lombardi) [RHEL-72531]
  - nvmet-auth: always free derived key data (Maurizio Lombardi) [RHEL-72531]
  - nvmet: fix out-of-bounds access in nvmet_enable_port (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: cleanup link state management (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: clear CC and CSTS when disabling the controller (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: always fully initialize completion entries (Maurizio Lombardi) [RHEL-72531]
  - nvmet: auth: use NULL to clear a pointer in nvmet_auth_sq_free() (Maurizio Lombardi) [RHEL-72531]
  - nvme-multipath: sysfs links may not be created for devices (Maurizio Lombardi) [RHEL-72531]
  - nvme: fixup scan failure for non-ANA multipath controllers (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: put ref when assoc->del_work is already scheduled (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: take tgtport reference only once (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: update tgtport ref per assoc (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: inline nvmet_fc_free_hostport (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: inline nvmet_fc_delete_assoc (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fcloop: add ref counting to lport (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fcloop: replace kref with refcount (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fcloop: swap list_add_tail arguments (Maurizio Lombardi) [RHEL-72531]
  - nvme: multipath: fix return value of nvme_available_path (Maurizio Lombardi) [RHEL-72531]
  - nvme: re-read ANA log page after ns scan completes (Maurizio Lombardi) [RHEL-72531]
  - nvme: requeue namespace scan on missed AENs (Maurizio Lombardi) [RHEL-72531]
  - nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-72531]
  - crypto,fs: Separate out hkdf_extract() and hkdf_expand() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: disable the target pci-epf module (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: skip nvme_write_sq_db on empty rqlist (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Keep completion queues mapped (Maurizio Lombardi) [RHEL-72531]
  - objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: replace max(a, min(b, c)) by clamp(val, lo, hi) (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Always configure BAR0 as 64-bit (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Remove duplicate uuid_copy (Maurizio Lombardi) [RHEL-72531]
  - nvme: zns: Simplify nvme_zone_parse_entry() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Remove redundant 'flush_workqueue()' calls (Maurizio Lombardi) [RHEL-72531]
  - nvmet-fc: Remove unused functions (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: remove stale comment (Maurizio Lombardi) [RHEL-72531]
  - nvme-fc: Utilise min3() to simplify queue count calculation (Maurizio Lombardi) [RHEL-72531]
  - nvme-multipath: Add visibility for queue-depth io-policy (Maurizio Lombardi) [RHEL-72531]
  - nvme-multipath: Add visibility for numa io-policy (Maurizio Lombardi) [RHEL-72531]
  - nvme-multipath: Add visibility for round-robin io-policy (Maurizio Lombardi) [RHEL-72531]
  - nvmet: add tls_concat and tls_key debugfs entries (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvmet-tcp: support secure channel concatenation (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvmet: Add 'sq' argument to alloc_ctrl_args (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme-fabrics: reset admin connection for secure concatenation (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme-tcp: request secure channel concatenation (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme-keyring: add nvme_tls_psk_refresh() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: add nvme_auth_derive_tls_psk() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: add nvme_auth_generate_digest() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: add nvme_auth_generate_psk() (Maurizio Lombardi) [RHEL-59967 RHEL-72531]
  - nvme: map uring_cmd data even if address is 0 (Maurizio Lombardi) [RHEL-72531]
  - io_uring/nvme: pass issue_flags to io_uring_cmd_import_fixed() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Do not add an IRQ vector if not needed (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Set NVMET_PCI_EPF_Q_LIVE when a queue is fully created (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: fix stuck reset on concurrent DPC and HP (Maurizio Lombardi) [RHEL-72531]
  - nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (Maurizio Lombardi) [RHEL-72531 RHEL-86914] {CVE-2025-21927}
  - nvme-tcp: Fix a C2HTermReq error message (Maurizio Lombardi) [RHEL-72531]
  - nvmet: remove old function prototype (Maurizio Lombardi) [RHEL-72531]
  - nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: skip CMB blocks incompatible with PCI P2P DMA (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: clean up CMBMSC when registering CMB fails (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: fix possible UAF in nvme_tcp_poll (Maurizio Lombardi) [RHEL-72531]
  - nvme: only allow entering LIVE from CONNECTING state (Maurizio Lombardi) [RHEL-72531]
  - nvme-fc: rely on state transitions to handle connectivity loss (Maurizio Lombardi) [RHEL-72531]
  - apple-nvme: Support coprocessors left idle (Maurizio Lombardi) [RHEL-72531]
  - apple-nvme: Release power domains when probe fails (Maurizio Lombardi) [RHEL-72531]
  - nvme/ioctl: add missing space in err message (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Avoid RCU stalls under heavy workload (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Do not uselessly write the CSTS register (Maurizio Lombardi) [RHEL-72531]
  - nvmet: pci-epf: Correctly initialize CSTS when enabling the controller (Maurizio Lombardi) [RHEL-72531]
  - nvmet-rdma: recheck queue state is LIVE in state lock in recv done (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Fix crash when a namespace is disabled (Maurizio Lombardi) [RHEL-72531 RHEL-73614 RHEL-85327] {CVE-2025-21850}
  - nvme-tcp: add basic support for the C2HTermReq PDU (Maurizio Lombardi) [RHEL-72531]
  - nvme: make nvme_tls_attrs_group static (Maurizio Lombardi) [RHEL-72531]
  - nvmet: add a missing endianess conversion in nvmet_execute_admin_connect (Maurizio Lombardi) [RHEL-72531]
  - nvmet: the result field in nvmet_alloc_ctrl_args is little endian (Maurizio Lombardi) [RHEL-72531]
  - nvmet: fix a memory leak in controller identify (Maurizio Lombardi) [RHEL-72531]
  - nvme-fc: do not ignore connectivity loss during connecting (Maurizio Lombardi) [RHEL-72531]
  - nvme: handle connectivity loss in nvme_set_queue_count (Maurizio Lombardi) [RHEL-72531]
  - nvme-fc: go straight to connecting state when initializing (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: remove redundant dma frees in hmb (Maurizio Lombardi) [RHEL-72531]
  - nvmet: fix rw control endian access (Maurizio Lombardi) [RHEL-72531]
  - nvme: fix bogus kzalloc() return check in nvme_init_effects_log() (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: use correct size to free the hmb buffer (Maurizio Lombardi) [RHEL-72531]
  - nvme: Add error path for xa_store in nvme_init_effects (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: fix comment typo (Maurizio Lombardi) [RHEL-72531]
  - nvmet: New NVMe PCI endpoint function target driver (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Implement arbitration feature support (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Implement interrupt config feature support (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Implement interrupt coalescing feature support (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Implement host identifier set feature support (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Introduce get/set_feature controller operations (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Do not require SGL for PCI target controller commands (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Add support for I/O queue management admin commands (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Introduce nvmet_sq_create() and nvmet_cq_create() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Introduce nvmet_req_transfer_len() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Improve nvmet_alloc_ctrl() interface and implementation (Maurizio Lombardi) [RHEL-72531]
  - nvme: Add PCI transport type (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Add drvdata field to struct nvmet_ctrl (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Introduce nvmet_get_cmd_effects_admin() (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Export nvmet_update_cc() and nvmet_cc_xxx() helpers (Maurizio Lombardi) [RHEL-72531]
  - nvmet: Add vendor_id and subsys_vendor_id subsystem attributes (Maurizio Lombardi) [RHEL-72531]
  - nvme: Move opcode string helper functions declarations (Maurizio Lombardi) [RHEL-72531]
  - nvme: change return type of nvme_poll_cq() to bool (Maurizio Lombardi) [RHEL-72531]
  - nvme: Add error check for xa_store in nvme_get_effects_log (Maurizio Lombardi) [RHEL-72531]
  - nvmet: handle rw's limited retry flag (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: remove nvme_tcp_destroy_io_queues() (Maurizio Lombardi) [RHEL-72531]
  - nvmet-loop: avoid using mutex in IO hotpath (Maurizio Lombardi) [RHEL-72531]
  - nvmet: propagate npwg topology (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: 512 byte aligned dma pool segment quirk (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: simplify nvme_tcp_teardown_io_queues() (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: no need to quiesce admin_q in nvme_tcp_teardown_io_queues() (Maurizio Lombardi) [RHEL-72531]
  - nvme-tcp: fix the memleak while create new ctrl failed (Maurizio Lombardi) [RHEL-72531] {CVE-2024-56632}
  - nvme-pci: don't use dma_alloc_noncontiguous with 0 merge boundary (Maurizio Lombardi) [RHEL-72531]
  - nvmet: replace kmalloc + memset with kzalloc for data allocation (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: remove two deallocate zeroes quirks (Maurizio Lombardi) [RHEL-72531]
  - nvme: don't apply NVME_QUIRK_DEALLOCATE_ZEROES when DSM is not supported (Maurizio Lombardi) [RHEL-72531]
  - nvmet: use kzalloc instead of ZERO_PAGE in nvme_execute_identify_ns_nvm() (Maurizio Lombardi) [RHEL-72531]
  - nvme: tuning pr code by using defined structs and macros (Maurizio Lombardi) [RHEL-72531]
  - nvme: introduce change ptpl and iekey definition (Maurizio Lombardi) [RHEL-72531]
  - nvmet: add tracing of reservation commands (Maurizio Lombardi) [RHEL-72531]
  - nvme: parse reservation commands's action and rtype to string (Maurizio Lombardi) [RHEL-72531]
  - nvmet: report ns's vwc not present (Maurizio Lombardi) [RHEL-72531]
  - nvme: check ns's volatile write cache not present (Maurizio Lombardi) [RHEL-72531]
  - nvme: add rotational support (Maurizio Lombardi) [RHEL-72531]
  - nvme: use command set independent id ns if available (Maurizio Lombardi) [RHEL-72531]
  - nvmet: support for csi identify ns (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement rotational media information log (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement endurance groups (Maurizio Lombardi) [RHEL-72531]
  - nvmet: declare 2.1 version compliance (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement crto property (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement supported features log (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement supported log pages (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement active command set ns list (Maurizio Lombardi) [RHEL-72531]
  - nvmet: implement id ns for nvm command set (Maurizio Lombardi) [RHEL-72531]
  - nvmet: support reservation feature (Maurizio Lombardi) [RHEL-72531]
  - nvme-core: remove repeated wq flags (Maurizio Lombardi) [RHEL-72531]
  - nvmet: make nvmet_wq visible in sysfs (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: use dma_alloc_noncontigous if possible (Maurizio Lombardi) [RHEL-72531]
  - nvme-pci: fix freeing of the HMB descriptor table (Maurizio Lombardi) [RHEL-72531] {CVE-2024-56756}
  - nvme: re-fix error-handling for io_uring nvme-passthrough (Maurizio Lombardi) [RHEL-72531]
  - nvme: module parameter to disable pi with offsets (Maurizio Lombardi) [RHEL-72531]
  - nvme: enhance cns version checking (Maurizio Lombardi) [RHEL-72531]
  - vfs: fix race between evice_inodes() and find_inode()&iput() (CKI Backport Bot) [RHEL-63193] {CVE-2024-47679}
  - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-86831]
  - proc: fix UAF in proc_get_inode() (Ian Kent) [RHEL-86809] {CVE-2025-21999}
  - Bluetooth: L2CAP: Fix corrupted list in hci_chan_del (David Marlin) [RHEL-87889] {CVE-2025-21969}
  - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (CKI Backport Bot) [RHEL-87889] {CVE-2025-21969}
  - scsi: mpi3mr: Event processing debug improvement (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Add level check to control event logging (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Reset the pending interrupt flag (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Fix pending I/O counter (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Task Abort EH Support (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Mark device strings as nonstring (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Update driver version to 8.13.0.5.50 (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Check admin reply queue from Watchdog (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Update timestamp only for supervisor IOCs (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Update MPI Headers to revision 35 (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Fix locking in an error path (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Fix spelling mistake "skiping" -> "skipping" (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Update driver version to 8.12.1.0.50 (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: Support for Segmented Hardware Trace buffer (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: struct mpi3_sas_io_unit_page1: Replace 1-element array with flexible array (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: struct mpi3_sas_io_unit_page0: Replace 1-element array with flexible array (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: struct mpi3_event_data_pcie_topology_change_list: Replace 1-element array with flexible array (Chandrakanth Patil) [RHEL-80698]
  - scsi: mpi3mr: struct mpi3_event_data_sas_topology_change_list: Replace 1-element array with flexible array (Chandrakanth Patil) [RHEL-80698]
  - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (CKI Backport Bot) [RHEL-79805]
  - PCI: Use downstream bridges for distributing resources (Myron Stowe) [RHEL-73396]
  - KVM: arm64: Eagerly switch ZCR_EL{1,2} (Gavin Shan) [RHEL-87960]
  - s390/qdio: Move memory alloc/pointer arithmetic for slib and sl into one place (Mete Durlu) [RHEL-73492]
  - s390/qdio: Rename feature flag aif_osa to aif_qdio (Mete Durlu) [RHEL-73492]
  - scsi: zfcp: Clarify zfcp_port refcount ownership during "link" test (Mete Durlu) [RHEL-73492]
  - scsi: zfcp: Correct kdoc parameter description for sending ELS and CT (Mete Durlu) [RHEL-73492]
  - scsi: zfcp: Switch over to sysfs_emit() (Mete Durlu) [RHEL-73492]
  - s390: Add z17 elf platform (Mete Durlu) [RHEL-89726]
  - ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-89579]
  - ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-89579]
  - ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-89579]
  - ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-89579]
  - ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-89579]
  - ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-89579]
  - ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-89579]
  - ice: Add in/out PTP pin delays (Petr Oros) [RHEL-89579]
  - ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-89579]
  - mptcp: fix spurious wake-up on under memory pressure (Davide Caratti) [RHEL-84571]
  - mptcp: fix NULL pointer in can_accept_new_subflow (Davide Caratti) [RHEL-84571] {CVE-2025-23145}
  - mptcp: Fix data stream corruption in the address announcement (Davide Caratti) [RHEL-84571]
  - mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (Davide Caratti) [RHEL-84571] {CVE-2025-21938}
  - mptcp: always handle address removal under msk socket lock (Davide Caratti) [RHEL-84571] {CVE-2025-21875}
  - mptcp: handle fastopen disconnect correctly (Davide Caratti) [RHEL-84571] {CVE-2025-21705}
  - mptcp: consolidate suboption status (Davide Caratti) [RHEL-84571] {CVE-2025-21707}
  - mptcp: be sure to send ack when mptcp-level window re-opens (Davide Caratti) [RHEL-84571]
  - mptcp: pm: only set fullmesh for subflow endp (Davide Caratti) [RHEL-84571] {CVE-2025-21706}
  - mptcp: hold pm lock when deleting entry (Davide Caratti) [RHEL-84571]
  - mptcp: prevent MPC handshake on port-based signal endpoints (Davide Caratti) [RHEL-84571]
  - ndisc: use RCU protection in ndisc_alloc_skb() (Xin Long) [RHEL-81397] {CVE-2025-21764}
  - serial: 8250_dma: terminate correct DMA in tx_dma_flush() (Derek Barbosa) [RHEL-89346]
  - serial: 8250: Fix fifo underflow on flush (Derek Barbosa) [RHEL-89346]
  - serial: 8250: Adjust the timeout for FIFO mode (Derek Barbosa) [RHEL-89346]
  - tty: serial: 8250: Fix another runtime PM usage counter underflow (Derek Barbosa) [RHEL-89346]
  - Flush console log from kernel_power_off() (Derek Barbosa) [RHEL-89346]
  - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX (Derek Barbosa) [RHEL-89346]
  - dev_printk: Add and use dev_no_printk() (Derek Barbosa) [RHEL-89346]
  - printk: Let no_printk() use _printk() (Derek Barbosa) [RHEL-89346]
  - printk: index: Add indexing support to dev_printk (Derek Barbosa) [RHEL-89346]
  - rtc: ab-eoz9: don't fail temperature reads on undervoltage notification (Waiman Long) [RHEL-72448]
  - rtc: rzn1: fix BCD to rtc_time conversion errors (Waiman Long) [RHEL-72448]
  - rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (Waiman Long) [RHEL-72448] {CVE-2024-56739}
  - rtc: abx80x: Fix WDT bit position of the status register (Waiman Long) [RHEL-72448]
  - rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq() (Waiman Long) [RHEL-72448]
  - rtc: at91sam9: fix OF node leak in probe() error path (Waiman Long) [RHEL-72448]
  - rtc: interface: Add RTC offset to alarm after fix-up (Waiman Long) [RHEL-72448]
  - rtc: abx80x: Fix return value of nvmem callback on read (Waiman Long) [RHEL-72448]
  - rtc: cmos: Fix return value of nvmem callbacks (Waiman Long) [RHEL-72448]
  - rtc: isl1208: Fix return value of nvmem callbacks (Waiman Long) [RHEL-72448]
  - rtc: mt6397: select IRQ_DOMAIN instead of depending on it (Waiman Long) [RHEL-72448]
  - rtc: Extend timeout for waiting for UIP to clear to 1s (Waiman Long) [RHEL-72448]
  - rtc: Add support for configuring the UIP timeout for RTC reads (Waiman Long) [RHEL-72448]
  - rtc: Adjust failure return code for cmos_set_alarm() (Waiman Long) [RHEL-72448]
  - rtc: mc146818-lib: Adjust failure return code for mc146818_get_time() (Waiman Long) [RHEL-72448]
  - rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call (Waiman Long) [RHEL-72448]
  - rtc: efi: fixed typo in efi_procfs() (Waiman Long) [RHEL-72448]
  - rtc: brcmstb-waketimer: support level alarm_irq (Waiman Long) [RHEL-72448]
  - rtc: stop warning for invalid alarms when the alarm is disabled (Waiman Long) [RHEL-72448]
  - rtc: pcf85363: Allow to wake up system without IRQ (Waiman Long) [RHEL-72448]
  - rtc: rv8803: fix Wvoid-pointer-to-enum-cast warning (Waiman Long) [RHEL-72448]
  - rtc: st-lpc: Simplify clk handling in st_rtc_probe() (Waiman Long) [RHEL-72448]
  - rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (Waiman Long) [RHEL-72448]
  - rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (Waiman Long) [RHEL-72448]
  - arp: switch to dev_getbyhwaddr() in arp_req_set_public() (Guillaume Nault) [RHEL-84572]
  - net: Add non-RCU dev_getbyhwaddr() helper (Guillaume Nault) [RHEL-84572]
  - ipv4: use RCU protection in inet_select_addr() (Guillaume Nault) [RHEL-84572]
  - ipv4: use RCU protection in rt_is_expired() (Guillaume Nault) [RHEL-84572]
  - ipv4: add RCU protection to ip4_dst_hoplimit() (Guillaume Nault) [RHEL-84572]
  - ipmr: do not call mr_mfc_uses_dev() for unres entries (Guillaume Nault) [RHEL-84572]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-587.el9]
changelog:
  - af_unix: Set sk->sk_state under unix_state_lock() for truly disconencted peer. (Davide Caratti) [RHEL-84598]
  - net/af_packet: check len when min_header_len equals to 0 (Davide Caratti) [RHEL-84598]
  - af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK (Davide Caratti) [RHEL-84598] {CVE-2024-57901}
  - af_packet: fix vlan_get_tci() vs MSG_PEEK (Davide Caratti) [RHEL-84598] {CVE-2024-57902}
  - af_packet: Handle outgoing VLAN packets without hardware offloading (Davide Caratti) [RHEL-84598]
  - perf trace: Add missing perf_tool__init() (Anubhav Shelat) [RHEL-83634]
  - scsi: iscsi: Fix missing scsi_host_put() in error path (Chris Leech) [RHEL-90552]
  - scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request (Chris Leech) [RHEL-90552]
  - scsi: iscsi: Remove unused iscsi_create_session() (Chris Leech) [RHEL-90552]
  - scsi: qedi: Use kthread_create_on_cpu() (Chris Leech) [RHEL-90552]
  - scsi: bnx2i: Use kthread_create_on_cpu() (Chris Leech) [RHEL-90552]
  - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb() (Chris Leech) [RHEL-90552]
  - Revert "mm: kmemleak: alloc gray object for reserved region with direct map" (Luiz Capitulino) [RHEL-75156]
  - cifs: Fix integer overflow while processing closetimeo mount option (CKI Backport Bot) [RHEL-87899] {CVE-2025-21962}
  - cifs: Fix integer overflow while processing acregmax mount option (CKI Backport Bot) [RHEL-87920] {CVE-2025-21964}
  - net: fix geneve_opt length integer overflow (CKI Backport Bot) [RHEL-87973] {CVE-2025-22055}
  - RDMA/core: Silence oversized kvmalloc() warning (Kamal Heib) [RHEL-75591]
  - RDMA/cma: Fix workqueue crash in cma_netevent_work_handler (Kamal Heib) [RHEL-75591]
  - RDMA/ucaps: Avoid format-security warning (Kamal Heib) [RHEL-75591]
  - IB/mad: Check available slots before posting receive WRs (Kamal Heib) [RHEL-75591]
  - RDMA/core: Pass port to counter bind/unbind operations (Kamal Heib) [RHEL-75591]
  - RDMA/core: Add support to optional-counters binding configuration (Kamal Heib) [RHEL-75591]
  - RDMA/core: Create and destroy rdma_counter using rdma_zalloc_drv_obj() (Kamal Heib) [RHEL-75591]
  - RDMA/core: Fix use-after-free when rename device name (Kamal Heib) [RHEL-75591]
  - RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject() (Kamal Heib) [RHEL-75591]
  - docs: infiniband: document the UCAP API (Kamal Heib) [RHEL-75591]
  - RDMA/uverbs: Add support for UCAPs in context creation (Kamal Heib) [RHEL-75591]
  - RDMA/uverbs: Introduce UCAP (User CAPabilities) API (Kamal Heib) [RHEL-75591]
  - RDMA/core: Fixes infiniband sysctl bounds (Kamal Heib) [RHEL-75591]
  - RDMA/core: Don't expose hw_counters outside of init net namespace (Kamal Heib) [RHEL-75591]
  - RDMA/core: Fix best page size finding when it can cross SG entries (Kamal Heib) [RHEL-75591]
  - IB/iser: fix typos in iscsi_iser.c comments (Kamal Heib) [RHEL-75591]
  - RDMA/core: Use ib_port_state_to_str() for IB state sysfs (Kamal Heib) [RHEL-75591]
  - IB/cache: Add log messages for IB device state changes (Kamal Heib) [RHEL-75591]
  - ext4: avoid writing unitialized memory to disk in EA inodes (Brian Foster) [RHEL-86510]
  - ext4: don't track ranges in fast_commit if inode has inlined data (Brian Foster) [RHEL-86510]
  - ext4: fix possible tid_t sequence overflows (Brian Foster) [RHEL-86510]
  - ext4: use ext4_update_inode_fsync_trans() helper in inode creation (Brian Foster) [RHEL-86510]
  - ext4: use memtostr_pad() for s_volume_name (Brian Foster) [RHEL-86510]
  - ext4: warn if delalloc counters are not zero on inactive (Brian Foster) [RHEL-86510]
  - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-86510]
  - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-86510]
  - ext4: correct the hole length returned by ext4_map_blocks() (Brian Foster) [RHEL-86510]
  - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-86510]
  - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-86510]
  - ext4: propagate errors from ext4_sb_bread() in ext4_xattr_block_cache_find() (Brian Foster) [RHEL-86510]
  - jbd2: remove redundant assignement to variable err (Brian Foster) [RHEL-86510]
  - ext4: remove the redundant folio_wait_stable() (Brian Foster) [RHEL-86510]
  - ext4: fix potential unnitialized variable (Brian Foster) [RHEL-86510]
  - ext4: remove block_device_ejected() (Brian Foster) [RHEL-86510]
  - ext4: keep "prefetch_grp" and "nr" consistent (Brian Foster) [RHEL-86510]
  - ext4: replace deprecated strncpy with alternatives (Brian Foster) [RHEL-86510]
  - ext4: clean up s_mb_rb_lock to fix build warnings with C=1 (Brian Foster) [RHEL-86510]
  - ext4: set the type of max_zeroout to unsigned int to avoid overflow (Brian Foster) [RHEL-86510]
  - ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow (Brian Foster) [RHEL-86510]
  - ext4: refactor out ext4_generic_attr_show() (Brian Foster) [RHEL-86510]
  - ext4: refactor out ext4_generic_attr_store() (Brian Foster) [RHEL-86510]
  - ext4: avoid overflow when setting values via sysfs (Brian Foster) [RHEL-86510]
  - ext4: avoid excessive credit estimate in ext4_tmpfile() (Brian Foster) [RHEL-86510]
  - ext4: remove unneeded if checks before kfree (Brian Foster) [RHEL-86510]
  - ext4: set FMODE_CAN_ODIRECT instead of a dummy direct_IO method (Brian Foster) [RHEL-86510]
  - security/keys: fix slab-out-of-bounds in key_task_permission (CKI Backport Bot) [RHEL-83380] {CVE-2024-50301}
  - tracing/histograms: Fix memory leak problem (CKI Backport Bot) [RHEL-81008] {CVE-2022-49648}
  - iommu/arm-smmu-v3: Fix pgsize_bit for sva domains (Marcin Juszkiewicz) [RHEL-92493]
  - redhat: add test_klp_kprobe to mod-internal.list (Denis Aleksandrov) [RHEL-90828]
  - vfio/pci: Align huge faults to order (Alex Williamson) [RHEL-89689]
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (David Arcari) [RHEL-87253] {CVE-2022-3424}
  - x86/uaccess: Improve performance by aligning writes to 8 bytes in copy_user_generic(), on non-FSRM/ERMS CPUs (Herton R. Krzesinski) [RHEL-74389]
  - x86: bring back rep movsq for user access on CPUs without ERMS (Herton R. Krzesinski) [RHEL-74389]
  - io_uring: prevent opcode speculation (CKI Backport Bot) [RHEL-83230] {CVE-2025-21863}


author: Tao Liu <ltao@redhat.com> - 2.0.27-7
changelog:
  - Explain the auto_reset_crashkernel option in more details
  - Use the same /etc/resolve.conf in kdump initrd if it's managed manually


author: Tao Liu <ltao@redhat.com> - 2.0.27-10
changelog:
  - mkdumprd: Fix makedumpfile parameter check.
  - Install the driver of physical device for a SR-IOV virtual device
  - Try to install PHY and MDIO bus drivers explicitly


author: Tao Liu <ltao@redhat.com> - 2.0.27-13
changelog:
  - kdump-lib: Drop 'file' dependency in is_uki
  - kdumpctl.8: Add description to reset-crashkernel --reboot
  - kdumpctl: Fix misleading message and erratic reboot in reset_crashkernel
  - kdumpctl: Drop default kexec '-d' option


author: Tao Liu <ltao@redhat.com> - 2.0.29-2
changelog:
  - Re-introduce vmcore creation notification to kdump
  - Revert "Introduce vmcore creation notification to kdump"
  - Add kdump dracut config
  - kdump-lib-initramfs: Improve mount point retrieval logic


author: Tao Liu <ltao@redhat.com> - 2.0.29-3
changelog:
  - fadump: fix passing additional parameters for capture kernel
  - fadump: pass additional parameters for capture kernel


author: Tao Liu <ltao@redhat.com> - 2.0.29-6
changelog:
  - 99-kdump.conf: Omit rdma module
  - Fallback to get NIC driver by /sys/class/net/NIC/device/driver/module
  - Note user-specified crashkernel value will be overwritten by default value


author: Tao Liu <ltao@redhat.com> - 2.0.29-7
changelog:
  - 99-kdump.conf: Omit clevis related dracut modules
  - kdump-lib.sh: rounded up the total_mem to 128M in get_system_size
  - kdump-lib.sh: Adjust default crashkernel reservation for x86_64 and s390x
  - doc/kdump.conf: correctly align the options


author: - Chung Chung <cchung@redhat.com> - 8.2.5.2-155.el9
changelog:
  - TEMPORARY FIX to correct build failures regarding blk_limits_io_{min,opt} error
  - Related: RHEL-61201


author: - Chung Chung <cchung@redhat.com> - 8.2.5.2-147.el9
changelog:
  - Fixed discards to use correct size limit.
  - Removed spurious metadata assertion.
  - Resolves: RHEL-66271


author: Julien Rische <jrische@redhat.com> - 1.19.1-21
changelog:
  - Fix libkrad client cleanup
  - Allow use of larger RADIUS attributes in krad library
  - Resolves: rhbz#2100351


author: Julien Rische <jrische@redhat.com> - 1.19.1-22
changelog:
  - Restore "supportedCMSTypes" attribute in PKINIT preauth requests
  - Set SHA-512 or SHA-256 with RSA as preferred CMS signature algorithms
  - Resolves: rhbz#2068935


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
  - Resolves: rhbz#2151513
  - Remove invalid password expiry warning
  - Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
  - Resolves: rhbz#2063838
  - New upstream version (1.20.1)
  - Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
  - Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
  - Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
  - Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
    Resolves: rhbz#2151513
  - Remove invalid password expiry warning
    Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
    Resolves: rhbz#2063838
  - New upstream version (1.20.1)
    Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
    Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Steve Dickson <steved@redhat.com> 0.10-0
changelog:
  - Initial package
  - Upstream contributions by:
      - Chuck Lever <chuck.lever@oracle.com>
      - Hannes Reinecke <hare@suse.de>
      - Jeff Layton <jlayton@kernel.org>
      - Benjamin Coddington <bcodding@redhat.com>
      - David Härdeman <david@hardeman.nu>
      - Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
      - Moritz "WanzenBug" Wanzenböck <moritz.wanzenboeck@linbit.com>


author: Jan Macku <jamacku@redhat.com> - 0.95-1
changelog:
  - clean up spec based on RHEL 8.4.0 spec
  - remove -Werror=format-truncation=1 from configure
  - update to 0.95 (#1880599)


author: Honza Horak <hhorak@redhat.com> - 590-1
changelog:
  - Update to the version 590
  - Also solves the "message overlay" in the terminal
    Resolves: #2062188


author: David Malcolm <dmalcolm@redhat.com> - 11.2.1-10
changelog:
  - update from releases/gcc-11-branch (#2063255)
    - PRs ada/98724, ada/104258, ada/104767, ada/104861, c++/58646, c++/59950,
  	c++/61611, c++/95036, c++/100468, c++/101030, c++/101095, c++/101371,
  	c++/101515, c++/101767, c++/102045, c++/102123, c++/102538,
  	c++/102740, c++/102990, c++/103057, c++/103186, c++/103291,
  	c++/103299, c++/103337, c++/103711, c++/103769, c++/103968,
  	c++/104107, c++/104108, c++/104284, c++/104410, c++/104472,
  	c++/104513, c++/104568, c++/104667, c++/104806, c++/104847,
  	c++/104944, c++/104994, c++/105035, c++/105061, c/82283, c/84685,
  	c/104510, c/104711, d/104659, d/105004, debug/104337, debug/104517,
  	debug/104557, fortran/66193, fortran/99585, fortran/100337,
  	fortran/103790, fortran/104211, fortran/104311, fortran/104331,
  	fortran/104430, fortran/104619, fortran/104811, go/100537,
  	libgomp/104385, libstdc++/101231, libstdc++/102358, libstdc++/103904,
  	libstdc++/104442, lto/104237, lto/104333, lto/104617,
  	middle-end/95115, middle-end/99578, middle-end/100464,
  	middle-end/100680, middle-end/100775, middle-end/100786,
  	middle-end/104307, middle-end/104402, middle-end/104446,
  	middle-end/104786, middle-end/104971, middle-end/105032,
  	preprocessor/104147, rtl-optimization/104544, rtl-optimization/104589,
  	rtl-optimization/104777, rtl-optimization/104814, sanitizer/102656,
  	sanitizer/104449, sanitizer/105093, target/79754, target/87496,
  	target/99708, target/99754, target/100784, target/101324,
  	target/102140, target/102952, target/102957, target/103307,
  	target/103627, target/103925, target/104090, target/104208,
  	target/104219, target/104253, target/104362, target/104448,
  	target/104451, target/104453, target/104458, target/104462,
  	target/104469, target/104502, target/104674, target/104681,
  	target/104688, target/104775, target/104890, target/104910,
  	target/104923, target/104963, target/104998, target/105000,
  	target/105052, target/105058, target/105068, testsuite/103556,
  	testsuite/103586, testsuite/104730, testsuite/104759,
  	testsuite/105055, tree-optimization/45178, tree-optimization/100834,
  	tree-optimization/101636, tree-optimization/102819,
  	tree-optimization/102893, tree-optimization/103169,
  	tree-optimization/103361, tree-optimization/103489,
  	tree-optimization/103544, tree-optimization/103596,
  	tree-optimization/103641, tree-optimization/103864,
  	tree-optimization/104263, tree-optimization/104288,
  	tree-optimization/104511, tree-optimization/104601,
  	tree-optimization/104675, tree-optimization/104782,
  	tree-optimization/104931, tree-optimization/105094
  - fix x86 vector initialization expansion fallback (PR target/105123)
  - drop patch 22 (gcc11-libsanitizer-pthread.patch;
    upstreamed as r11-9607-ga8dd74bfb921ed)


author: Jakub Jelinek <jakub@redhat.com> 11.3.1-2
changelog:
  - update from releases/gcc-11-branch (#2077536)
    - GCC 11.3 release
    - PRs c++/98249, c++/99893, c++/100608, c++/101051, c++/101532, c++/101677,
  	c++/101717, c++/101894, c++/102869, c++/103105, c++/103328,
  	c++/103341, c++/103455, c++/103706, c++/103885, c++/103943,
  	c++/104008, c++/104079, c++/104225, c++/104507, c++/104565,
  	c++/105003, c++/105064, c++/105143, c++/105186, c++/105256, c/101585,
  	debug/105203, fortran/102992, fortran/104210, fortran/104228,
  	fortran/104570, fortran/105138, gcov-profile/105282, ipa/103083,
  	ipa/103432, jit/100613, libstdc++/90943, libstdc++/100516,
  	libstdc++/103630, libstdc++/103638, libstdc++/103650,
  	libstdc++/103955, libstdc++/104098, libstdc++/104301,
  	libstdc++/104542, libstdc++/104859, libstdc++/105021,
  	libstdc++/105027, middle-end/104497, middle-end/105165,
  	rtl-optimization/104985, rtl-optimization/105028,
  	rtl-optimization/105211, target/80556, target/100106, target/104117,
  	target/104474, target/104853, target/104894, target/105214,
  	target/105257, tree-optimization/99121, tree-optimization/104880,
  	tree-optimization/105053, tree-optimization/105070,
  	tree-optimization/105189, tree-optimization/105198,
  	tree-optimization/105226, tree-optimization/105232,
  	tree-optimization/105235
  - fix bogus -Wuninitialized warning on va_arg with complex types on x86_64
    (PR target/105331)
  - remove bogus assertion in std::from_chars (PR libstdc++/105324)


author: Marek Polacek <polacek@redhat.com> 11.3.1-4
changelog:
  - update from releases/gcc-11-branch (#2117632)
    - PRs analyzer/105252, analyzer/105365, analyzer/105366, c++/65211,
  	c++/82980, c++/86193, c++/90107, c++/97296, c++/101442, c++/101698,
  	c++/102071, c++/102177, c++/102300, c++/102307, c++/102479,
  	c++/102629, c++/104066, c++/104142, c++/104646, c++/104669,
  	c++/105245, c++/105265, c++/105289, c++/105304, c++/105321,
  	c++/105386, c++/105398, c++/105725, c++/105761, c++/105774,
  	c++/105795, c++/105852, c++/105925, c++/106024, c++/106361,
  	c++/107358, c/41041, c/106016, c/106981, c/107001, d/106139,
  	d/106638, debug/106261, fortran/82868, fortran/100029, fortran/100040,
  	fortran/100097, fortran/100098, fortran/100132, fortran/100136,
  	fortran/100245, fortran/103413, fortran/103504, fortran/103693,
  	fortran/103694, fortran/104313, fortran/104849, fortran/105012,
  	fortran/105230, fortran/105243, fortran/105310, fortran/105633,
  	fortran/105691, fortran/105813, fortran/105954, fortran/106121,
  	fortran/106817, fortran/106857, fortran/106985, fortran/106986,
  	fortran/107054, ipa/100413, ipa/105600, ipa/105739, libgomp/106045,
  	libstdc++/65018, libstdc++/84110, libstdc++/93602, libstdc++/96592,
  	libstdc++/99290, libstdc++/100823, libstdc++/101709, libstdc++/102447,
  	libstdc++/103664, libstdc++/103848, libstdc++/103853,
  	libstdc++/103911, libstdc++/103992, libstdc++/104217,
  	libstdc++/104443, libstdc++/104602, libstdc++/104731,
  	libstdc++/105128, libstdc++/105284, libstdc++/105375,
  	libstdc++/105502, libstdc++/105671, libstdc++/105915,
  	libstdc++/106162, libstdc++/106248, libstdc++/106320,
  	libstdc++/106607, libstdc++/106695, lto/106334, lto/106540,
  	middle-end/103193, middle-end/104869, middle-end/104966,
  	middle-end/105140, middle-end/105998, middle-end/106027,
  	middle-end/106030, middle-end/106144, middle-end/106331,
  	middle-end/106492, preprocessor/97498, preprocessor/105732,
  	rtl-optimization/104637, rtl-optimization/105041,
  	rtl-optimization/105333, rtl-optimization/105559,
  	rtl-optimization/106032, rtl-optimization/106187, sanitizer/105396,
  	sanitizer/105729, target/96072, target/99184, target/99685,
  	target/101322, target/101891, target/102059, target/102146,
  	target/103197, target/103353, target/104257, target/104829,
  	target/105147, target/105162, target/105209, target/105292,
  	target/105339, target/105349, target/105463, target/105472,
  	target/105854, target/105879, target/105970, target/105981,
  	target/106017, target/106091, target/106355, target/106491,
  	target/106721, target/107061, target/107064, target/107183,
  	target/107248, target/107304, target/107364, target/107748,
  	testsuite/105095, testsuite/105266, testsuite/105433,
  	testsuite/106345, tree-optimization/103116, tree-optimization/105148,
  	tree-optimization/105163, tree-optimization/105173,
  	tree-optimization/105250, tree-optimization/105263,
  	tree-optimization/105312, tree-optimization/105368,
  	tree-optimization/105431, tree-optimization/105437,
  	tree-optimization/105528, tree-optimization/105618,
  	tree-optimization/105726, tree-optimization/105860,
  	tree-optimization/106112, tree-optimization/106131,
  	tree-optimization/106189, tree-optimization/106513,
  	tree-optimization/106892, tree-optimization/106934
  - fix the detection of Sapphire Rapids in host_detect_local_cpu
  - fix -Wmismatched-dealloc documentation (#2116635)


author: Marek Polacek <polacek@redhat.com> 11.4.1-2
changelog:
  - update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release
    - PRs bootstrap/90543, c++/53932, c++/69410, c++/92752, c++/98056,
  	c++/98821, c++/100295, c++/100474, c++/101118, c++/101869,
  	c++/102780, c++/103871, c++/104527, c++/105406, c++/105996,
  	c++/106188, c++/106675, c++/106713, c++/106740, c++/107065,
  	c++/107163, c++/107179, c++/107558, c++/107579, c++/107864,
  	c++/108138, c++/108180, c++/108365, c++/108468, c++/108474,
  	c++/108607, c++/108975, c++/108998, c++/109096, c++/109164, c/107127,
  	c/107465, c/109151, d/107592, d/108050, d/108877, d/109108,
  	debug/106719, debug/108573, debug/108716, debug/108967, driver/106624,
  	fortran/85877, fortran/95107, fortran/96024, fortran/96025,
  	fortran/99036, fortran/103259, fortran/104332, fortran/106209,
  	fortran/106945, fortran/107576, fortran/107872, fortran/108131,
  	fortran/108349, fortran/108420, fortran/108421, fortran/108451,
  	fortran/108453, fortran/108501, fortran/108502, fortran/108527,
  	fortran/108529, fortran/108609, fortran/108937, fortran/109186,
  	fortran/109511, fortran/109846, ipa/105685, ipa/106124, ipa/107944,
  	libquadmath/87204, libquadmath/94756, libstdc++/91456,
  	libstdc++/103934, libstdc++/104866, libstdc++/104875,
  	libstdc++/105844, libstdc++/106183, libstdc++/107801,
  	libstdc++/107814, libstdc++/108030, libstdc++/108118,
  	libstdc++/108265, libstdc++/108636, libstdc++/108856,
  	libstdc++/108952, libstdc++/109064, libstdc++/109261,
  	libstdc++/109949, lto/109263, middle-end/104450, middle-end/104464,
  	middle-end/106190, middle-end/107317, middle-end/108237,
  	middle-end/108264, middle-end/108435, middle-end/108459,
  	middle-end/108546, middle-end/108625, middle-end/108685,
  	middle-end/108854, other/108560, other/109306,
  	rtl-optimization/106751, rtl-optimization/107482,
  	rtl-optimization/108193, rtl-optimization/108596,
  	rtl-optimization/109585, target/70243, target/90458, target/96373,
  	target/98776, target/100758, target/104871, target/104921,
  	target/105554, target/105599, target/106736, target/106875,
  	target/107568, target/107714, target/107863, target/108272,
  	target/108348, target/108589, target/108699, target/108807,
  	target/108812, target/108881, target/109067, target/109140,
  	target/109276, testsuite/47334, testsuite/103823, testsuite/108151,
  	testsuite/108973, testsuite/108985, tree-optimization/105484,
  	tree-optimization/106809, tree-optimization/107107,
  	tree-optimization/107212, tree-optimization/107254,
  	tree-optimization/107323, tree-optimization/107451,
  	tree-optimization/107554, tree-optimization/107898,
  	tree-optimization/107997, tree-optimization/108068,
  	tree-optimization/108076, tree-optimization/108095,
  	tree-optimization/108199, tree-optimization/108498,
  	tree-optimization/108688, tree-optimization/108692,
  	tree-optimization/108821, tree-optimization/108950,
  	tree-optimization/109176, tree-optimization/109410,
  	tree-optimization/109473, tree-optimization/109491,
  	tree-optimization/109502, tree-optimization/109573,
  	tree-optimization/109724, tree-optimization/109778
    - PRs fortran/100607, libstdc++/109822, target/109954,
  	tree-optimization/109505


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Marek Polacek <polacek@redhat.com> 11.5.0-1
changelog:
  - update from releases/gcc-11 branch (RHEL-35635)
    - GCC 11.5 release
    - PRs ada/113893, ada/113979, analyzer/104042, c/113262, c/114007, c/114493,
  	c++/89224, c++/92145, c++/92407, c++/97990, c++/99710, c++/100667,
  	c++/100772, c++/101765, c++/103185, c++/104051, c++/111485,
  	c++/111529, c++/113598, c++/113674, c++/114537, c++/114561,
  	c++/114562, c++/114572, c++/114634, c++/114691, d/113125, d/113758,
  	d/114171, debug/111080, debug/112718, driver/115440, fortran/50410,
  	fortran/103715, fortran/104908, fortran/107426, fortran/114474,
  	fortran/114825, gcov-profile/114115, libfortran/110651,
  	libgomp/113192, libquadmath/114533, libstdc++/104259,
  	libstdc++/104606, libstdc++/105417, libstdc++/110054,
  	libstdc++/113250, libstdc++/114147, libstdc++/114401,
  	libstdc++/114750, libstdc++/114803, libstdc++/115269,
  	libstdc++/115454, libstdc++/115575, middle-end/90348,
  	middle-end/95351, middle-end/107385, middle-end/108789,
  	middle-end/110027, middle-end/110115, middle-end/110176,
  	middle-end/111422, middle-end/111632, middle-end/112732,
  	middle-end/113907, middle-end/113921, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/115527,
  	middle-end/115836, objc/101666, objc/101718, preprocessor/105608,
  	rtl-optimization/100303, rtl-optimization/108086,
  	rtl-optimization/110079, rtl-optimization/114768,
  	rtl-optimization/114902, rtl-optimization/115092, sanitizer/97696,
  	sanitizer/111736, sanitizer/114956, sanitizer/115172, target/88309,
  	target/101737, target/101865, target/105522, target/108120,
  	target/108743, target/110411, target/111610, target/111677,
  	target/112397, target/113122, target/113281, target/114049,
  	target/114098, target/114130, target/114184, target/114310,
  	target/114837, target/114846, target/115253, target/115297,
  	target/115360, target/115457, target/115475, target/115611,
  	target/115691, testsuite/113175, testsuite/114034, testsuite/114036,
  	tree-optimization/110386, tree-optimization/110422,
  	tree-optimization/111039, tree-optimization/111070,
  	tree-optimization/111331, tree-optimization/111407,
  	tree-optimization/111445, tree-optimization/111736,
  	tree-optimization/112495, tree-optimization/112505,
  	tree-optimization/112793, tree-optimization/113372,
  	tree-optimization/113552, tree-optimization/113603,
  	tree-optimization/114027, tree-optimization/114115,
  	tree-optimization/114566, tree-optimization/114876,
  	tree-optimization/115192, tree-optimization/115337,
  	tree-optimization/115843
  - fix FLUSH IOSTAT value (PR libfortran/101255, RHEL-32536)
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960)


author: Marek Polacek <polacek@redhat.com> 11.5.0-2
changelog:
  - fix TARGET_CPU_DEFAULT (PR target/105157, RHEL-50037)
  - libstdc++: Workaround kernel-headers on s390x-linux (RHEL-50054)
  - fix wrong code with memcpy from _Complex (PR tree-optimization/116034)


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Lukas Hrazky <lhrazky@redhat.com> - 0.69.0-1
changelog:
  - Update to 0.69.0
  - Expose librepo max_downloads_per_mirror configuration
  - Fix listing a repository without cpeid (RhBug:2066334)
  - Gracefully handle failure to open repo primary file
  - context: Fix doc dnf_context_install/remove/update/distrosync
  - context: dnf_context_remove accepts `<package-spec>` as dnf, unify code
  - dnf-context: Disconnect signal handler before dropping file monitor ref


author: Jaroslav Rohel <jrohel@redhat.com> - 0.69.0-7
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-12123)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279, RHEL-6304)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-12124)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-9
changelog:
  - Grow memory if applying a query after increasing a number of available
    packages (RHEL-27657)
  - Fix a memory leak in get_best_solution() (RHEL-26226)
  - Fix destructing libdnf::TransactionItem from a base class (RHEL-26240)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-11
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-1454)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.67.0-2
changelog:
  - Add obsoletes to filtering for advisory candidates
  - advisory upgrade: filter out advPkgs with different arch


author: Pino Toscano <ptoscano@redhat.com> 1.29.29-1
changelog:
  - Translated using Weblate (Japanese) (suanand@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - ENT-5215: Handle all exceptions caused by network problems
    (mhorky@redhat.com)
  - ENT-5215: Handle errors raised in DNF plugin (mhorky@redhat.com)
  - Make TestProfileManager subclass of SubManFixture (mhorky@redhat.com)
  - ENT-5054: Drop singleton implementation in rhsmlib/utils.py
    (mhorky@redhat.com)
  - Rename test file for rhsm/utils.py (mhorky@redhat.com)
  - ENT-5054: Create singleton decorators in rhsm/utils.py (mhorky@redhat.com)
  - zypper: drop dead python-dmidecode usage (ptoscano@redhat.com)
  - facts: drop DmiFirmwareInfoCollector (ptoscano@redhat.com)
  - facts: switch to DmidecodeFactCollector for DMI facts (ptoscano@redhat.com)
  - facts: add dmidecode parser and facts collector (ptoscano@redhat.com)
  - cloud-what: switch MiniHostCollector to dmidecode(1) (ptoscano@redhat.com)
  - 2096446: Make 'rhsm-debug' autocomplete --no-progress-messages
    (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - 2092014: Do not use injections in rhsm (mhorky@redhat.com)
  - ci: run rpmlint as part of stylish (ptoscano@redhat.com)
  - build: switch rpmlint check to rpmlint 2.x (ptoscano@redhat.com)
  - ci: drop stylish job from Jenkins (ptoscano@redhat.com)
  - ci: add black & flake8 check using GitHub Actions (ptoscano@redhat.com)
  - build: install files without exec permissions (ptoscano@redhat.com)
  - 2092014: Disable progress messages when sub-man RPM is not installed
    (mhorky@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.30-1
changelog:
  - Fix issue, when connection is not shared (jhnidek@redhat.com)
  - Unit tests: Add stub class for SyspurposeComplianceStatusCache
    (jhnidek@redhat.com)
  - ENT-4664: Ensure tests clean up after themselves (mhorky@redhat.com)
  - Refactoring of cloud-what unit tests (jhnidek@redhat.com)
  - 2111035: Do not allow reusing TCP connection for rhsm.service
    (jhnidek@redhat.com)
  - spec: remove redundant License from python3-cloud-what (ptoscano@redhat.com)
  - Ensure tests don't fail when run under root (mhorky@redhat.com)
  - Fix issue with unit tests (jhnidek@redhat.com)
  - 2111757: Make parsing of HTTP headers more reliable (jhnidek@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - Update translation files (noreply@weblate.org)
  - ENT-5286: Unify environment variable evaluation (mhorky@redhat.com)
  - Use dmidecode on aarch64 (jhnidek@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Increase security level for zypper repos managed by sub-man (suttner@atix.de)
  - ENT-5271: Fix spelling of Candlepin API endpoint description
    (mhorky@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.31-1
changelog:
  - warning: refname 'subscription-manager-1.29.30-1' is ambiguous.
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - tests: fix typos in test method names (ptoscano@redhat.com)
  - 2125227: Fixed incorrect registration warning with yum/dnf
    (jajerome@redhat.com)
  - 2094942: Fixed expected message for manual attach case (jajerome@redhat.com)
  - ENT-5102: Type-hint rhsmlib/facts (mhorky@redhat.com)
  - 2094942: Improve warning message (auto-attach in SCA mode)
    (jhnidek@redhat.com)
  - Update INSTALL.md (mhorky@redhat.com)
  - Remove unused classes of DBus tests (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Unregister objects (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Register objects (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Products object (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of AllFacts object (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Entitlement object (mhorky@redhat.com)
  - Fix typo in method name of EntitlementService (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Consumer object (mhorky@redhat.com)
  - ENT-5317: Update DBus tests of Attach object (mhorky@redhat.com)
  - Fix possible parsing issues of dmidecode output (mhorky@redhat.com)
  - ENT-5317: New way to test DBus methods, starting with Config
    (mhorky@redhat.com)
  - cockpit: disable the reference branch for sub-man-cockpit
    (ptoscano@redhat.com)
  - TESTING.md: Remove mention of pytest-xdist (mhorky@redhat.com)
  - INSTALL.md: Update list of packages to be installed (mhorky@redhat.com)
  - Stop calling pytest with --failed-first (mhorky@redhat.com)
  - GCP: Better computing of cached token TTL (jhnidek@redhat.com)
  - 2101510: Fix D-Bus Register() and update entitlement certs
    (jhnidek@redhat.com)
  - 2120744: Close keycloak connection properly (jhnidek@redhat.com)
  - 2094942: [RFE] Improve the message, when  SCA is enabled (jhnidek@redhat.com)
  - Replaced list[] with List[] and dict[] with Dict[]. (jhnidek@redhat.com)
  - Update TESTING.md (mhorky@redhat.com)
  - Update README.md (mhorky@redhat.com)
  - Add INSTALL.md (mhorky@redhat.com)
  - Added type hints to package rhsmlib.service (jhnidek@redhat.com)
  - Added some missing imports. (jhnidek@redhat.com)
  - Reformated using black. (jhnidek@redhat.com)
  - Added one FIXME to redeem.py (jhnidek@redhat.com)
  - Added type hints and FIXMEs to rhsm package. (jhnidek@redhat.com)
  - [wip] ENT-5100: Type hint rhsm (mhorky@redhat.com)
  - Added type hints to syspurpose package (jhnidek@redhat.com)
  - Drop libnotify-devel usage (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.32-1
changelog:
  - Translated using Weblate (French) (ljanda@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - utils: import pkg_resources only when needed (ptoscano@redhat.com)
  - ENT-5536: Fix FileMonitor tests (mhorky@redhat.com)
  - Alter import of rhsm.config functions (mhorky@redhat.com)
  - Handle tests in containers better (mhorky@redhat.com)
  - Call parent methods in DBusServerStubProvider (mhorky@redhat.com)
  - Base D-Bus tests on SubManFixture (mhorky@redhat.com)
  - ENT-5532: Call rhsm-package-profile-uploader with --force-upload
    (jhnidek@redhat.com)
  - 2108549: do not detect containers in OCP as such (ptoscano@redhat.com)
  - tests: extend InContainerTests for path checks (ptoscano@redhat.com)
  - Resolved issues in PR feedback (jajerome@redhat.com)
  - Updated request handling in connection.py (jajerome@redhat.com)
  - Resolve issues from PR review (jajerome@redhat.com)
  - Removed fixme since activateMachine() is still used (jajerome@redhat.com)
  - Black/flake8 fixes (jajerome@redhat.com)
  - FIXME: renamed default argument to not shadow inbuilt type
    (jajerome@redhat.com)
  - FIXME: removed Restlib and using only BaseRestLib (jajerome@redhat.com)
  - FIXME: updated unregisterConsumer() to return True if status code is 204
    (jajerome@redhat.com)
  - FIXME: changed unbindBySerial/unbindByPoolId to return bool
    (jajerome@redhat.com)
  - FIXME: changed default value of facts in updateConsumerFacts()
    (jajerome@redhat.com)
  - FIXME: sanitized email/lang variables in activateMachine()
    (jajerome@redhat.com)
  - FIXME: made email argument required in activatemachine()
    (jajerome@redhat.com)
  - FIXME: changed default value of serials argument to None
    (jajerome@redhat.com)
  - FIXME: removed unused username/password arguments (jajerome@redhat.com)
  - FIXME: raise exceptions where sanitizing guest Id returns None
    (jajerome@redhat.com)
  - FIXME: renamed response argument to result in validateResponse()
    (jajerome@redhat.com)
  - FIXME: rename info argument to params in _request() (jajerome@redhat.com)
  - FIXME: added error message when redeeming subscription fails
    (jajerome@redhat.com)
  - FIXME: removed unused UEPConnection class methods (jajerome@redhat.com)
  - Fixed profile tests setting Package release numbers as int instead of str
    (jajerome@redhat.com)
  - FIXME: changed epoch data type to str in Package class (jajerome@redhat.com)
  - FIXME: added null-checks for stdout/stderr wrapper (jajerome@redhat.com)
  - FIXME: re-iterated a fix is not needed for urlparse (jajerome@redhat.com)
  - FIXME: added exception messages to parse_url() (jajerome@redhat.com)
  - FIXME: changed  lists to tuples in StatusSpinnerStyle class
    (jajerome@redhat.com)
  - FIXME: fixed type hints for _normalize_string() (jajerome@redhat.com)
  - FIXME: use super() instead of class name (jajerome@redhat.com)
  - FIXME: fixed strings not being translated in is_log_level_valid()
    (jajerome@redhat.com)
  - FIXME: resolved improper use of tempfile in save() (jajerome@redhat.com)
  - FIXME: fixed config_file argument not being used in save()
    (jajerome@redhat.com)
  - FIXME: updated default value for files_name argument in read()
    (jajerome@redhat.com)
  - FIXME: fixed minor typo in bogus() (jajerome@redhat.com)
  - FIXME: changed read() to return self instead of None (jajerome@redhat.com)
  - FIXME: set default argument 'facts' to None in registerConsumer()
    (jajerome@redhat.com)
  - FIXME: renamed argument 'type' to 'consumer_type' in registerConsumer()
    (jajerome@redhat.com)
  - FIXME: ping() resolved in rhsm/connection.py (jajerome@redhat.com)
  - Remove test dependency 'mock' (mhorky@redhat.com)
  - Fix failures of D-Bus' Register tests (mhorky@redhat.com)
  - Mark D-Bus tests (mhorky@redhat.com)
  - 2131789: Outsource uploading DNF profile to rhsmcertd (jhnidek@redhat.com)
  - Catch generic OSError during HTTPSConnection.connect() (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (French) (vincent.lefebvre59@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Fix formatting of proxy errors w/o errno (ptoscano@redhat.com)
  - Catch also CertificateLoadingError for identity cert loading
    (ptoscano@redhat.com)
  - ENT-4286: Additional fix for exception handling (jajerome@redhat.com)
  - Remove D-Bus env vars from container and CI files (mhorky@redhat.com)
  - 2121350: Implement "force" register option in rhsm dbus python binding
    (jajerome@redhat.com)
  - Show locals in pytest output (mhorky@redhat.com)
  - Improve formatting of CertificateLoadingError (ptoscano@redhat.com)
  - Raise a new CertificateLoadingError on X.509 loading failures
    (ptoscano@redhat.com)
  - Improve formatting of UnknownContentException (ptoscano@redhat.com)
  - connection: improve the internal UnknownContentException
    (ptoscano@redhat.com)
  - utils: add terminal_printable_content (ptoscano@redhat.com)
  - connection: rename NetworkException to UnknownContentException
    (ptoscano@redhat.com)
  - Improve formatting of ProxyException (ptoscano@redhat.com)
  - connection: improve the internal ProxyException (ptoscano@redhat.com)
  - Improve formatting of socket.gaierror (ptoscano@redhat.com)
  - Improve formatting of ConnectionError (ptoscano@redhat.com)
  - Improve formatting of BadCertificateException (ptoscano@redhat.com)
  - connection: extend BadCertificateException w/ SSL exception
    (ptoscano@redhat.com)
  - connection: drop dead code (ptoscano@redhat.com)
  - ENT-4286: Simplify exception reporting with system_exit()
    (jajerome@redhat.com)
  - 2136694: Clear progress messages properly (mhorky@redhat.com)
  - rhsmcertd reads default_log_level from rhsm.conf (jhnidek@redhat.com)
  - 2097679: Additional fix for non-interactive parameters (jajerome@redhat.com)
  - 2097679: Fixed script hang in non-interactive execution (jajerome@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.33-1
changelog:
  - Translated using Weblate (French) (ljanda@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Japanese) (suanand@redhat.com)
  - Translated using Weblate (Japanese) (ljanda@redhat.com)
  - Translated using Weblate (French) (suanand@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - Translated using Weblate (Korean) (jsefler@redhat.com)
  - ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
  - Test libdnf plugin using GitHub Actions (mhorky@redhat.com)
  - libdnf: fix return value of findProductId() (ptoscano@redhat.com)
  - ENT-5541: Publish PR coverage (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Kannada) (jsefler@redhat.com)
  - Translated using Weblate (Spanish) (ptoscano@redhat.com)
  - Simplify test setup for D-Bus fact collection (mhorky@redhat.com)
  - ENT-3759: Test on GitHub Actions (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.34-1
changelog:
  - Update TESTING.md (mhorky@redhat.com)
  - Improved debug print of http traffic, when proxy is used (jhnidek@redhat.com)
  - ENT-5544: Remove Jenkins jobs, Containers (mhorky@redhat.com)
  - ENT-5549: Remove unused code from entcertlib (mhorky@redhat.com)
  - ENT-5549: Fix issues found when type-hinting (mhorky@redhat.com)
  - ENT-5549: Fix return code handling of CLI (mhorky@redhat.com)
  - ENT-5549: Fix found type hint issues (mhorky@redhat.com)
  - ENT-5549: Fix object instantiation in EntitlementDirectory
    (mhorky@redhat.com)
  - ENT-5549: Refactor ProductDirectory (mhorky@redhat.com)
  - ENT-5549: Change internal implementation for some Cache methods
    (mhorky@redhat.com)
  - ENT-5549: Clean up _sync_with_server arguments of cache objects
    (mhorky@redhat.com)
  - ENT-5549: Remove 'autoheal' argument from Action clients (mhorky@redhat.com)
  - Refactored code a little bit (jhnidek@redhat.com)
  - 2093291: Make locking more reliable (jhnidek@redhat.com)
  - test: add simple test for 2178610 (ptoscano@redhat.com)
  - Small improvement of debugging of http traffic (jhnidek@redhat.com)
  - 2093883: Fix issue with race condition in rhsm.service (jhnidek@redhat.com)
  - 2178610: do not collect unentitled products in SCA mode (ptoscano@redhat.com)
  - 2174297: register: do a simple strip() on environment(s) input
    (ptoscano@redhat.com)
  - Stop subclassing 'object' (ptoscano@redhat.com)
  - Remove pytest arguments for CentOS 9 Stream image (mhorky@redhat.com)
  - tests: Install dnf-plugins-core every time (mhorky@redhat.com)
  - 2169251: connection: restore UEPConnection.getJob() (ptoscano@redhat.com)
  - ENT-5106: Type-hint subscription_manager/ files (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.35-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Clean up tests using Cloud What detectors properly (mhorky@redhat.com)
  - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Typo fixes (ptoscano@redhat.com)
  - Avoid string puzzle (ptoscano@redhat.com)
  - Properly use ungettext for plural forms (ptoscano@redhat.com)
  - 2189664: cache: fix SyspurposeComplianceStatusCache on failed load
    (ptoscano@redhat.com)
  - dbus: don't catch exceptions in DomainSocketServer.run()
    (ptoscano@redhat.com)
  - cli: directly exit on InvalidCLIOptionError (ptoscano@redhat.com)
  - Revert "ENT-5549: Fix return code handling of CLI" (ptoscano@redhat.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - Update .git-blame-ignore-revs (mhorky@redhat.com)
  - Format code with black==23.3.0 (mhorky@redhat.com)
  - ENT-5535: Update black to version 23.3.0 (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.36-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ENT-5581: Update messaging around the "container mode" (mhorky@redhat.com)
  - Remove 'dbus' marker for pytest (mhorky@redhat.com)
  - Rewrite D-Bus tests to be testable without pytest-forked (mhorky@redhat.com)
  - Drop further ethtool dependency mentions (mhorky@redhat.com)
  - tests: fix test_file_monitor without pyinotify (ptoscano@redhat.com)
  - tests: switch from imp to importlib (ptoscano@redhat.com)
  - Fix the order of user env var checking for translations.
    (tkuratom@redhat.com)
  - 2215974: Collect network facts using 'ip' (mhorky@redhat.com)
  - ENT-5582: Remove container detection envvar overwrite (mhorky@redhat.com)
  - ENT-5603: Explicitly check for provided entitlement certificates
    (mhorky@redhat.com)
  - fix test case (chambrid@redhat.com)
  - Collect GCP Project information as cloud facts (chambrid@redhat.com)
  - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com)
  - ENT-5580: Disable the proper container detection (mhorky@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - 2093291: Make reading of cache file more reliable (jhnidek@redhat.com)
  - 2093291: Make code of DNF plugins testable (jhnidek@redhat.com)
  - spec: change subscription-manager dnf dep (ptoscano@redhat.com)
  - spec: update libdnf-plugin-subscription-manager deps (ptoscano@redhat.com)
  - tests: repair attach cases in SCA mode (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.37-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - 2225446: Hotfix of D-Bus policy (jhnidek@redhat.com)
  - TESTING: Update testing requirements (mhorky@redhat.com)
  - Use Fedora registry to pull container images (mhorky@redhat.com)
  - 2232316: dbus: check "force" again from the registration option
    (ptoscano@redhat.com)
  - dbus: run EntCertActionInvoker on PoolAttach (ptoscano@redhat.com)
  - ENT-5624: Properly translate error strings (mhorky@redhat.com)
  - Mock IOError for Insights fact collection tests (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.38-1
changelog:
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ENT-5603: Fix a typo in a comment (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.39-1
changelog:
  - tito: drop bz requirement (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)
  - RHEL-7206: Small change of message printed by dnf plugin (jhnidek@redhat.com)
  - CCT-118: Fix flake8 error E721 (mhorky@redhat.com)
  - Fix type hint in rhsm (mhorky@redhat.com)
  - Simplify autoregistration test setup (mhorky@redhat.com)
  - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com)
  - Fixed inappropriate logical expression (ataf@openrefactory.com)
  - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com)
  - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com)
  - RPM: Avoid needless runtime requirement on python3-setuptools
    (miro@hroncok.cz)
  - cli: normalize hostname in error message (ptoscano@redhat.com)
  - connection: normalize hostname in ConnectionOSErrorException
    (ptoscano@redhat.com)
  - Improved printing of addresses and URLs (jhnidek@redhat.com)
  - Use username and password from --proxy=URL (jhnidek@redhat.com)
  - Use parse_url() from utils.py for parsing URL, when --proxy is used.
    (jhnidek@redhat.com)
  - 2225403: Parse URL properly (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.40-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
    (mariocanfly@hotmail.com)
  - spec: Add missing GLib dependency when building without DNF
    (debarshir@gnome.org)
  - Remove deprecated `locale.*()` functions (mhorky@redhat.com)
  - Remove version constraint of pytest (mhorky@redhat.com)
  - RHEL-15110: RegisterServer is stopped, when not needed (jhnidek@redhat.com)
  - RHEL-15110: Fix issue with registration using gsd-subman (jhnidek@redhat.com)
  - Fix an error in debug logging of cloud-what (mhorky@redhat.com)
  - ci: bump actions/upload-artifact from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Improve debug logging to make it faster to understand (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.41-1
changelog:
  - feat: update man page with deprecation notices (jajerome@redhat.com)
  - feat: Disable anonymous cloud registration temporarily (mhorky@redhat.com)
  - feat: Deprecate 'syspurpose addons' (mhorky@redhat.com)
  - fix: make SyspurposeComplianceStatusCache.get_overall_status() always usable
    (ptoscano@redhat.com)
  - fix: Change order of checks (jhnidek@redhat.com)
  - fix: Cache shouldn't try to get data from server without UUID
    (jhnidek@redhat.com)
  - feat: Deprecate import command (zpetrace@redhat.com)
  - fix: 1.29 modify section about remove command in man page
    (jhnidek@redhat.com)
  - feat: 1.29 Deprecate redeem sub-command (jhnidek@redhat.com)
  - fix: Reformated man page of subscription-manager (jhnidek@redhat.com)
  - fix: [1.29] Remove command should not be primary command (jhnidek@redhat.com)
  - feat: deprecate autosubscribe/auto-attach register options
    (jajerome@redhat.com)
  - feat: deprecate attach/auto-attach modules (jajerome@redhat.com)
  - docs: deprecate attach/auto-attach in man page (jajerome@redhat.com)
  - fix: Hide subscription management "errors" in container mode
    (mhorky@redhat.com)
  - feat: 1.29 Deprecate remove sub-command (jhnidek@redhat.com)
  - fix: 1.29 Do not try to test this branch for Fedora latest
    (jhnidek@redhat.com)
  - fix: 1.29 Do not try to test this branch for Fedora rawhide
    (jhnidek@redhat.com)
  - fix(test): Properly stop method mock (mhorky@redhat.com)
  - feat: Azure: added extended location and type of location fact
    (jhnidek@redhat.com)
  - fix: Update version of Azure metadata (jhnidek@redhat.com)
  - feat: Added Azure location to facts (jhnidek@redhat.com)
  - feat: Added zone GCP fact (jhnidek@redhat.com)
  - feat: Added more AWS cloud facts (jhnidek@redhat.com)
  - fix: Change type hint according returned value. (jhnidek@redhat.com)
  - feat: Add warning message about release version to dnf plugin
    (jhnidek@redhat.com)
  - Bump black from 23.3.0 to 24.3.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Format code with black==24.3.0 (ptoscano@redhat.com)
  - Fix memory leaks in test-productdb.c (jhnidek@redhat.com)
  - Fix memory leaks in productdb.c (jhnidek@redhat.com)
  - fix: Function prototype without declaration is deprecated
    (jhnidek@redhat.com)
  - Removed unused includes of .h files (jhnidek@redhat.com)
  - libdnf: switch from g_error_free() to g_clear_error() in tests
    (ptoscano@redhat.com)
  - libdnf: do not build test code in plugin (ptoscano@redhat.com)
  - Change handling of deprecated `datetime.datetime.utcnow()`
    (mhorky@redhat.com)
  - CCT-66: Update identity reporting in DNF plugin during autoregistration
    (mhorky@redhat.com)
  - Remove automatic registration delay for rhsmcertd (mhorky@redhat.com)
  - Remove API endpoint for automatic cloud registration v1 (mhorky@redhat.com)
  - CCT-67: Use automatic registration v2 (mhorky@redhat.com)
  - IdentityUpdateAction: Improve logging for updating identity certificates
    (mhorky@redhat.com)
  - Identity: Add method to extract current owner (mhorky@redhat.com)
  - rhsmcertd: Define exit codes (mhorky@redhat.com)
  - rhsmcertd: Use module-level logger (mhorky@redhat.com)
  - Add AnonymousCertificateManager (mhorky@redhat.com)
  - Add CloudTokenCache for Candlepin JWT (mhorky@redhat.com)
  - Implement API endpoints for Automatic registration v2 (mhorky@redhat.com)
  - Update documentation for one API call in connection.py (mhorky@redhat.com)
  - Fix type hint of RegisterService.register() (mhorky@redhat.com)
  - rhsmcertd: Drop D-Bus loop code (mhorky@redhat.com)
  - rhsmcertd: Add type hints (mhorky@redhat.com)
  - rhsmcertd: Remove forgotten old comment (mhorky@redhat.com)
  - Stop logging full lscpu output (mhorky@redhat.com)
  - Prevent double-logging of syspurpose cache log statement (mhorky@redhat.com)
  - Update the log message containing response time statistics
    (mhorky@redhat.com)
  - CCT-266: Update TLS flags (mhorky@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.43-1
changelog:
  - [1.29] feat/cct-868: Subset of list command options marked as deprecated *
    Options --available, --all, --ondate, --servicelevel --no-overlap --match-
    install, --pool-only, --afterdate were marked as deprecated in ListCommand
    definition of their help string. (mgrunwal@redhat.com)
  - fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
  - feat: Better automatic registration logging (mhorky@redhat.com)
  - fix: perform autoreg waiting when performing standard autoreg
    (ptoscano@redhat.com)
  - chore: move autoreg waiting code in own function (ptoscano@redhat.com)
  - docs: update proxy details in man page (jvlcek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.44-1
changelog:
  - Revert "feat: Disable anonymous cloud registration temporarily"
    (ptoscano@redhat.com)
  - Revert "feat: forcefully switch automatic cloud registration to v1"
    (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.45-1
changelog:
  - fix: Do not upload profile from DNF, when it is disabled in conf
    (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - feat: Enable register with environment names and environment types
    (jhnidek@redhat.com)
  - feat: support registering specifying environments with activation keys
    (ryanverdile@gmail.com)
  - chore: Remove auto-assign CI job (mhorky@redhat.com)
  - feat: [1.29] Added basic configuration for Packit (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.46-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Italian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (mhorky@redhat.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Update translation files (noreply@weblate.org)
  - fix: Handle improperly closed connections (mhorky@redhat.com)
  - ci: use the right distro for coverage reporting (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - tests: fix mocking of get_terminal_width() in TestColumnize
    (ptoscano@redhat.com)
  - feat: print compliance errors & syspurpose status only in entitlement mode
    (ptoscano@redhat.com)
  - feat: print "registered" as status when using SCA (ptoscano@redhat.com)
  - feat: print "not registered" on status when not registered
    (ptoscano@redhat.com)
  - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
  - refactor: move determination of content access mode in own method
    (ptoscano@redhat.com)
  - tests: move StubIdentity to stubs (ptoscano@redhat.com)
  - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
  - chore: move banner printing to its own function (ptoscano@redhat.com)
  - fix: Append two additional facts to the graylist (pkoprda@redhat.com)
  - refactor: Use class constant instead of variable graylist
    (pkoprda@redhat.com)


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Richard Hughes <richard@hughsie.com> 0.3.2-1
changelog:
  - New upstream version
  - Do not use deprecated libusb API
  - Use a 1ms timeout in the Windows event thread


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.3-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-14427 - Expected cn in RDN, got uid
  - Resolves: RHEL-12229 - HANA validation on RHEL 9.2 issue possibly related to libc/nss_sss behaviour
  - Resolves: RHEL-3925 - SSSD goes offline when, while reading a single user, misses a required attribute (i.e. SID)
  - Resolves: RHEL-2319 - Passkey authentication for centrally managed users
  - Resolves: RHEL-4146 - Incorrect handling of reverse IPv6 update results in update failure
  - Resolves: RHEL-4971 - sssd-kcm does not appear to expire Kerberos tickets (RFE: sssd_kcm should have the option to automatically delete the expired tickets)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-18395 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users
  - Resolves: RHEL-17498 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') [rhel-9]
  - Resolves: RHEL-21079 - SSSD GPO lacks group resolution on hosts [rhel-9]
  - Resolves: RHEL-19211 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-2
changelog:
  - Resolves: RHEL-12503 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. 
  - Resolves: RHEL-22288 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd
  - Resolves: RHEL-22194 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-6
changelog:
  - Resolves: RHEL-27209 - Race condition during authorization leads to GPO policies functioning inconsistently [rhel-9.4.0]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-1
changelog:
  - Resolves: RHEL-36586 - Rebase SSSD for RHEL 9.5
  - Resolves: RHEL-27716 - SSSD fails to process AD groups with 'Global Scope' correctly causing incomplete group-membership on RHEL if cache is empty
  - Resolves: RHEL-17659 - [RfE] SSSD Failover Enhancements
  - Resolves: RHEL-35781 - Passkey errors when handling multiple altSecurityIdentities values
  - Resolves: RHEL-30142 - sssd_pac is crashing
  - Resolves: RHEL-22206 - Errors in krb5_child.log every time a user authenticates - Pre-authentication failed: No pkinit_anchors supplied
  - Resolves: RHEL-32595 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest
  - Resolves: RHEL-28666 - sssctl config-check is reporting false positive error msg
  - Resolves: RHEL-29454 - NULL dereference in inotify handling
  - Resolves: RHEL-1654 - Improve documentation for allowing e-mail address as username


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-2
changelog:
  - Resolves: RHEL-40742 - passkey_child with wrong owner
  - Resolves: RHEL-41047 - sssd is skipping GPO evaluation with auto_private_groups
  - Resolves: RHEL-40570 - GPO access the wrong memory location


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4
changelog:
  - Resolves: RHEL-49711 - SYSDB: remove index on dataExpireTimestamp
  - Resolves: RHEL-49811 - 2FA is being enforced after upgrading 2.9.1->2.9.4


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4.1
changelog:
  - Resolves: RHEL-59876 - EL9/CentOS Stream 9 lost offline smart card authentication
  - Resolves: RHEL-50912 - possible regression of rhbz#2196521


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.6-1
changelog:
  - Resolves: RHEL-70189 - Rebase SSSD for RHEL 9.6
  - Resolves: RHEL-67670 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-9]
  - Resolves: RHEL-68369 - sssd backend process segfaults when krb5.conf is invalid
  - Resolves: RHEL-66266 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-9]


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Sahana Prasad <sahana@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream version 1.2.1
  - Remove patch fix MSG_MORE uasge as it is added upstream
  - Remove cppcheck dependency for rhel bz#1931518
  - Add a patch to fix fuzz tests


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5367
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2405
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15112
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15298


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15298
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2405


author: Wen Liang <wenliang@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved from the main package
    to the utils sub package causing a file conflict on multilib systems between the
    old 32 bit main package and the new 64 bit utils sub package.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Hangbin Liu <haliu@redhat.com> - 1.8-1
changelog:
  - 1.8 release (rhbz#1958933)
  - libndp,ndptool: use poll() instead of select()
  - libndp: avoid static buffer for debug string in ndp_sock_recv()
  - ndptool: avoid static buffer for string in ndptool
  - libndp: use thread local variables for static return arguments
  - ndptool: don't use static variable for local context in msgrcv_handler_func()
  - ndptool: fix printing dnssl lifetime in ndptool
  - ndptool: fix potential memory leak caused by strdup
  - ndptool: add -D dest support
  - libndp: fix nd_msg typo when setting target address
  - libndp: close sockfd after using to avoid handle leak
  - ndptool: fix target parameter typo
  - ndptool: add -T target support


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.5-100
changelog:
  - resolves: rhbz#2222895 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: Andreas Schneider <asn@redhat.com> - 4.18.6-100
changelog:
  - related: rhbz#2190415 - Update to version 4.18.6
  - resolves: rhbz#2211617 - Fix the rpcclient dfsgetinfo command


author: Andreas Schneider <asn@redhat.com> - 4.19.3-100
changelog:
  - resolves: RHEL-16476 - Update to version 4.19.3
  - resolves: RHEL-11362 - Fix security issues:
    CVE-2023-4091 CVE-2023-42669
  - resolves: RHEL-18030 - Logging Format Enhancement
  - resolves: RHEL-1960 - Fix smbget issues with DFS shares
  - resolves: RHEL-2118 - Fix force user/group issues with 'allow trusted domains = yes'
  - resolves: RHEL-16875 - Fix memory corruption in libnss_winbind
  - resolves: RHEL-19243 - Fix smbget password interactive authentication


author: Andreas Schneider <asn@redhat.com> - 4.19.4-100
changelog:
  - related: RHEL-16476 - Update to version 4.19.4
  - resolves: RHEL-2109 - Add support for certificate auto enrollment
  - resolves: RHEL-20761 - Add missing requirements for samba-gpupdate
  - resolves: RHEL-19566 - Fix smbget interactive authentication
  - resolves: RHEL-21001 - Fix samba-gpupdate paths for RHEL


author: Andreas Schneider <asn@redhat.com> - 4.19.4-102
changelog:
  - resolves: RHEL-22157 - Don't require NDES for samba-gpupdate
  - resolves: RHEL-20897 - Fix site name fetching for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.0-102
changelog:
  - resolves: RHEL-2109  - Support Certificate Auto Enrollment in Samba
  - resolves: RHEL-22157 - Fix root cert import for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.1-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.1
  - resolves: RHEL-26337 - Fix site lookup for samba-gpupdate
  - resolves: RHEL-5846 - Fix warning messages while upgrading libwbclient


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.2-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.2
  - resolves: RHEL-45841 - Fix KDC IP address lookup in case of trusted domain
  - resolves: RHEL-23814 - Fix smbclient to enumerate the printers


author: Phil Sutter <psutter@redhat.com> - 1.0.9-1
changelog:
  - expect/conntrack: Avoid spurious covscan overrun warning
  - conntrack: fix build with kernel 5.15 and musl
  - New version 1.0.9


author: Steve Dickson <steved@redhat.com> 2.5.4-15
changelog:
  - Fix uninstall warnings (bz 2048023)
  - rpc-statd.service: Stop rpcbind and rpc.stat in an exit race (bz 2112941)


author: Steve Dickson <steved@redhat.com> 2.5.4-16
changelog:
  - nfsd.man: Explain that setting nfsv4=n turns off all v4 versions (bz 2042362)
  - mount.nfs: fix NULL pointer derefernce in nfs_parse_square_bracket (bz 2136807)


author: Steve Dickson <steved@redhat.com> 2.5.4-19
changelog:
  - Don't allow junction tests to trigger automounts (bz 2148353)
  - Fix typo in man page nfs.conf.man (bz 2203092)


author: Steve Dickson <steved@redhat.com> 2.5.4-21
changelog:
  - gssd: fix handling DNS lookup failure (RHEL-15035)
  - gssd: handle KRB5_AP_ERR_BAD_INTEGRITY errors (RHEL-15034)


author: Steve Dickson <steved@redhat.com> 2.5.4-22
changelog:
  - nfsmount.conf: Fix typo of the attribute name (RHEL-7904)
  - Update to support for the NFS RPC-with-TLS (RHEL-14754)


author: Steve Dickson <steved@redhat.com> 2.5.4-23
changelog:
  - Typos and documentation fixes (RHEL-22654)
  - blkmapd: fix coredump in bl_add_disk (RHEL-7941)
  - rpcdebug: avoid buffer underflow (RHEL-7931)


author: Steve Dickson <steved@redhat.com> 2.5.4-28
changelog:
  -  Makefile.am: allow mount.nfs to be writeable by owner (RHEL-68701)
  -  mount.nfs: retry NFSv3 mount after NFSv4 failure in auto negotiation (RHEL-68574)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-30
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-72823)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-64340)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-31
changelog:
  - nfsdcld: prevent from accessing /var/lib/nfs/nfsdcld in read-only file system during boot (RHEL-78177)
  - Replace functional gating tests with the ones from RHEL10 (RHEL-78110)
  - Add explicit version requirement for libnfsidmap (RHEL-78107)
  - Add --disable-sbin-override for when /sbin is a symlink (RHEL-69771)
  - Move remaining binaries from /sbin to /usr/sbin (RHEL-69771)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Steve Dickson <steved@redhat.com> 2.5.4-35
changelog:
  - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
  - nfsd: allow more than 64 backlogged connections (RHEL-87752)


author: Steve Dickson <steved@redhat.com> 2.5.4-37
changelog:
  - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
  - gssd: do not use krb5_cc_initialize (RHEL-85412)


author: Phil Sutter <psutter@redhat.com> [1.2.6-1.el9]
changelog:
  - set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
  - Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]


author: Phil Sutter <psutter@redhat.com> [1.2.6-3.el9]
changelog:
  - tests: Fix objref test case (Phil Sutter) [RHEL-28515]
  - expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
  - obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
  - obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
  - obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - obj: Return value on setters (Phil Sutter) [RHEL-28515]
  - object: getters take const struct (Phil Sutter) [RHEL-28515]
  - utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
  - obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
  - obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
  - set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
  - obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
  - flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
  - chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
  - expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
  - expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
  - expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
  - expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
  - obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
  - set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
  - set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
  - expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Nicola Sella <nsella@redhat.com> - 1.13.0-1
changelog:
  - Update to 1.13.0
  - Add support for working with certificates used with proxy
  - Drop Python 2 support
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for pkcs11 certificate and key for repository authorization
  - Fix default value for LRO_SSLVERIFYSTATUS
  - Don't use max_ranges to determine if we expect zchunk callback
  - Prefer HTTP over FTP mirrors when zchunk is enabled
  - Fixed mem leaks and typos


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Return "calculated" checksum if requested w/caching
  - Fixed memory leaks and segfault


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.5-1
changelog:
  - Update to 1.14.5
  - Detailed error message when using non-existing TMPDIR (RhBug:2019993)
  - Make error messages about repodata and rpm mismatch more user friendly


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-8
changelog:
  - Correct a License tag to LGPLv2+ (RHEL-16103)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Norbert pocs <npocs@redhat.com> - 0.10.4-1
changelog:
  - Rebase to version 0.10.4
  - Add pkcs11 support
  - Disallow ssh-rsa key in FIPS mode
  - Fix openssl KDF check at build
  - ChangeLog was renamed to CHANGELOG
  - Resolves: rhbz#2068475, rhbz#2026449, rhbz#2004021,
              rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-3
changelog:
  - Enable pkcs11 support
  - Fix broken libsofthsm path on i686
  - Add missing bugzilla references from the rebase commit
  - Related: rhbz#2026449
  - Resolves: rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Jiri Pirko <jiri@resnulli.us> - 1.31-1
changelog:
  1.31 release
  utils/bond2team: remove TYPE in ifcfg file
  utils/bond2team: keep delivering config to file if stdout not supplied
  teamd/lacp: silence ignore none LACP frames
  teamd: fix ctx->hwaddr value assignment
  Send LACP PDU right after the Actor state has been changed
  Skip setting the same hwaddr to a lag port if not needed
  Make all netlink socket RCVBUF sizes configurable
  Don't return an error when timerfd socket return 0
  Fix ifinfo_link_with_port race condition with newlink
  teamd: fix possible race in master ifname callback


author: Hangbin Liu <haliu@redhat.com> - 1.31-8
changelog:
  - Build util team2bond in teamd rpm [1986788]
  - Add some cautions to util team2bond [1986788]
  - Add team2bond man doc [1986788]


author: Long Xin <lxin@redhat.com> - 1.31-16
changelog:
  - fix the Requires package name for teamd-devel
  - teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Tomas Halman <thalman@redhat.com> - 0.63-5
changelog:
  - Enable audit library in the build
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Tomas Halman <thalman@redhat.com>
changelog:
  - Renaming python package according to the standard
  - Resolves: rhbz#1951968

  =======
  >>>>>>> 96fbb4a91a8471e931d872e7b696d176fc351605


author: Tomas Halman <thalman@redhat.com>
changelog:
  - Enable audit library in the build 
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Victor Stinner <vstinner@python.org> - 2.9.10-9
changelog:
  - Build the Python extension with the PY_SSIZE_T_CLEAN macro to make it
    compatible with Python 3.10.
  - Fixes: rhbz#1890878.


author: David King <dking@redhat.com> - 2.9.10-12
changelog:
  - Fix CVE-2021-3516 (#1956969)
  - Fix CVE-2021-3517 (#1957002)
  - Fix CVE-2021-3518 (#1957029)
  - Fix CVE-2021-3537 (#1957285)


author: Richard Hughes <richard@hughsie.com> 0.1.14-1
changelog:
  - New upstream release
  - Do not use libuuid
  - Ignore adaptors added with xb_builder_source_add_converter()


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream release
  - Add xb_builder_source_add_simple_adapter()
  - Allow reversing the query results


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release which breaks API and ABI
  - Add the missing TEXT:INTE XPath support
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag
  - Allow specifying the node cache behaviour for the query
  - Avoid recursion when setting flags if possible
  - Avoid using weak pointers when building the silo
  - Do not allocate opcodes individually
  - Do not show a critical warning for invalid XML
  - Do not unconditionally create GTimer objects
  - Do not use the node cache when building indexes
  - Lazy load more arrays to reduce RSS usage


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Do not assume g_content_type_guess() always returns valid results
  - Fix getting translated results in gnome-software
  - Update the header location to reflect the new API


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Vit Mojzis <vmojzis@redhat.com> - 1.0.18-3
changelog:
  - Added a patch to fix netinet/sctp.h not to be installed.
  - Added some fixes for kernel feature detection.
  - Updated to 1.0.18. [1568622]


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-1.gitf1dd9eb
changelog:
  - Rebase to 1.1.1
  - Fix program segfaults after entering the quit command (RHEL-5814)
  - Fix setting interface status not survive reboot (RHEL-5824)
  - Fix some other bugs


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-3.gitf1dd9eb
changelog:
  - Rebase to latest upstream code
  - Remove interface configure if the interface deleted (RHEL-13242)
  - Fix strdup is not freed (RHEL-37524)
  - Fix using uninitialized value (RHEL-37548)
  - Fix copy past error (RHEL-37679)
  - Fix resource leak (RHEL-37685)


author: Kamil Dudka <kdudka@redhat.com> - 3.18.0-4
changelog:
  - make `renamecopy` and `copytruncate` override each other (#1934601)
  - unify documentation of copy/copytruncate/renamecopy (#1934629)
  - fix resource leaks reported by Coverity


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: DJ Delorie <dj@redhat.com> - 1:4.3-5
changelog:
  - Allow users to build with or without guile support as desired.
  - Allow derivative downstreams to default to disabling guile support.


author: Xiao Ni <xni@redhat.com> - 4.2-7
changelog:
  - Update to latest upstream and keep udev rule close to upstream
  - Resolves rhbz#2107147, rhbz#2129087, rhbz#2126428


author: Xiao Ni <xni@redhat.com> - 4.2-8
changelog:
  - Update to latest upstream
  - Resolves rhbz#2127101, rhbz#2139789, rhbz#2149292, rhbz#2151209, rhbz#2148945


author: Xiao Ni <xni@redhat.com> - 4.2-9
changelog:
  - Update to latest upstream and fix mdcheck service bug
  - Resolves rhbz#2159923, rhbz#2150865, rhbz#2124071, rhbz#2203859


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210216-1
changelog:
  - Update Intel CPU microcode to microcode-20210216 release (#1902884):
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
      to 0x2006a0a;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
      up to 0x4003006;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003003 up to 0x5003006.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210525-1
changelog:
  - Update Intel CPU microcode to microcode-20210525 release, addresses
    CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
    (#1962664, #1962714, #1962734, #1962680):
    - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
    - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
    - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
    - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
    - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
      at revision 0xb00000f;
    - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
      at revision 0xb00000f;
    - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
    - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
    - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
    - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
    - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
    - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
    - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
      intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
      to 0xb00003e;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
      to 0x2006b06;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
      to 0xea;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
      to 0xea;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
      to 0xea;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
      to 0xea;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xde up to 0xea;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
      to 0xea;
    - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
      from revision 0x44 up to 0x46;
    - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
      to 0x19;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
      up to 0x100015b;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
      up to 0x4003102;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003006 up to 0x5003102;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
      up to 0x7002302;
    - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
      0x7000019 up to 0x700001b;
    - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
      up to 0xf000019;
    - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
      0xe00000f up to 0xe000012;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
      to 0x44;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
      to 0x20;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
      to 0x34;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
      to 0x36;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
      to 0x1a;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
      up to 0xa6;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
      to 0x2a;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
      to 0xea;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
      up to 0xea;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
      up to 0xec;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
      up to 0xe8;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
      0xe0 up to 0xea.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210525-2
changelog:
  - Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
    intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
    and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
  - Enable 06-8c-01 microcode update by default (#1970611).
  - Enable 06-5e-03 microcode update by default (#1897673).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210608-1
changelog:
  - Update Intel CPU microcode to microcode-20210608 release (#1921773):
    - Fixes in releasenote.md file.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20220207-1
changelog:
  - Update Intel CPU microcode to microcode-20220207 release, addresses
    CVE-2021-0127, CVE-2021-0145, and CVE-2021-33120 (#2053253):
    - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
    - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
      at revision 0xb00000f;
    - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
      at revision 0xb00000f;
    - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
    - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
      intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
      to 0xb000040;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
      to 0x2006c0a;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xea up
      to 0xec;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xea up
      to 0xec;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xea up
      to 0xec;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xea up
      to 0xec;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xea up to 0xec;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xea up
      to 0xec;
    - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
      from revision 0x46 up to 0x49;
    - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
      to 0x1a;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
      up to 0x100015c;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
      up to 0x400320a;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003102 up to 0x500320a;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
      up to 0x7002402;
    - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
      0x700001b up to 0x700001c;
    - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
      up to 0xf00001a;
    - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
      0xe000012 up to 0xe000014;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
      to 0x46;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
      to 0x24;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
      to 0x36;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
      up to 0xd000331;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
      to 0x1c;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
      up to 0xa8;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
      to 0x2d;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
      to 0x22;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
      to 0x3c;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
      to 0x15;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
      to 0x2400001f;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
      to 0xec;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
      up to 0xec;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
      up to 0xee;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
      up to 0xea;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xea up to 0xec;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
      to 0x50.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20220510-1
changelog:
  - Update Intel CPU microcode to microcode-20220510 release, addresses
    CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090248,
      - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      at revision 0x1f;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-97-05) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      at revision 0x1f;
    - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
      revision 0x41c;
    - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) at revision 0x41c;
    - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) at revision 0x41c;
    - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-bf-02) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
      at revision 0x1f;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-bf-05) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
      to 0x2006d05;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xec up to 0xf0;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
      to 0xf0;
    - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
      to 0x90d;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
      up to 0x100015d;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
      up to 0x4003302;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x500320a up to 0x5003302;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
      up to 0x7002501;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
      to 0x48;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
      to 0x28;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
      up to 0xd000363;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
      to 0x3a;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
      to 0x1e;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
      up to 0xb0;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
      to 0x31;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
      to 0x26;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
      to 0x3e;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
      to 0x16;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
      up to 0x24000023;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
      to 0xf0;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
      up to 0xf0;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
      up to 0xf0;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
      up to 0xf0;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xec up to 0xf0;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
      to 0x53.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20220809-1
changelog:
  - Update Intel CPU microcode to microcode-20220510 release, addresses
    CVE-2022-21233 (#2115663):
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
      to 0x2006e05;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
      up to 0x100015e;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
      up to 0xd000375;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
      to 0x3c;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
      to 0x20;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
      up to 0xb2;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
      to 0x28;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
      to 0x40;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
      0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x1f up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x1f up to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x1f up to 0x22;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
      up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x1f up to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x1f up to 0x22;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x41c up to 0x421;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
      up to 0x421;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
      to 0x54;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
      to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x1f up to 0x22;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x1f up to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
      to 0x22.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230214-1
changelog:
  - Update Intel CPU microcode to microcode-20230214 release, addresses
    CVE-2022-21216, CVE-2022-33196, CVE-2022-33972, CVE-2022-38090 (#2171237,
      - Addition of 06-6c-01/0x10 (ICL-D B0) microcode at revision 0x1000211;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
      0x2b000181;
    - Addition of 06-8f-04/0x10 microcode at revision 0x2c000170;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b000181;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000170;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b000181;
    - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
      revision 0x2c000170;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b000181;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000170;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000181;
    - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) at
      revision 0x2c000170;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode at revision
      0x2b000181;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode at revision
      0x2c000170;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000181;
    - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) at
      revision 0x2c000170;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000181;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2c000170;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000181;
    - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) at
      revision 0x2c000170;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000181;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) at revision 0x2c000170;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode at revision
      0x2b000181;
    - Addition of 06-8f-06/0x10 microcode at revision 0x2c000170;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000181;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) at revision 0x2c000170;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) at revision 0x2b000181;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) at revision 0x2b000181;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) at revision 0x2b000181;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode at revision
      0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) at revision 0x2b000181;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) at revision 0x2b000181;
    - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) at
      revision 0x2c000170;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) at revision 0x2b000181;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) at revision 0x2c000170;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) at revision 0x2b000181;
    - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) at
      revision 0x2c000170;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) at revision 0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode at revision
      0x2b000181;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode at revision
      0x2c000170;
    - Addition of 06-b7-01/0x32 (RPL-S S0) microcode at revision 0x112;
    - Addition of 06-ba-02/0xc0 microcode at revision 0x410e;
    - Addition of 06-ba-03/0xc0 microcode (in intel-ucode/06-ba-02) at
      revision 0x410e;
    - Addition of 06-ba-02/0xc0 microcode (in intel-ucode/06-ba-03) at
      revision 0x410e;
    - Addition of 06-ba-03/0xc0 microcode at revision 0x410e;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa4 up to 0xa6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf0 up to 0xf4;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf0 up
      to 0xf4;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015e
      up to 0x1000161;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003302
      up to 0x4003303;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003302 up to 0x5003303;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002501
      up to 0x7002503;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000375
      up to 0xd000389;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3c up
      to 0x3e;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x20 up
      to 0x22;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb2
      up to 0xb8;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x31 up
      to 0x32;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x40 up
      to 0x42;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x16 up
      to 0x17;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x22
      up to 0x2c (old pf 0x3);
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x421 up to 0x429;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x421 up to 0x429;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x421 up to 0x429;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x421
      up to 0x429;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000023
      up to 0x24000024;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf0 up
      to 0xf4;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf0
      up to 0xf4;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf0
      up to 0xf4;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf0
      up to 0xf4;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf0 up to 0xf4;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x54 up
      to 0x57;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x22 up to
      0x2c (old pf 0x3);
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x22 up to
      0x2c (old pf 0x3).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230516-1
changelog:
  - Update Intel CPU microcode to microcode-20230516 release (#2213124):
    - Addition of 06-be-00/0x01 (ADL-N A0) microcode at revision 0x10;
    - Addition of 06-9a-04/0x40 (AZB A0) microcode at revision 0x4;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006e05 up
      to 0x2006f05;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa6 up to 0xaa;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf4 up to 0xf6;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf4 up
      to 0xf8;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000161
      up to 0x1000171;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003303
      up to 0x4003501;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003303 up to 0x5003501;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002503
      up to 0x7002601;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000389
      up to 0xd000390;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000211
      up to 0x1000230;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb8
      up to 0xba;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x32 up
      to 0x33;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x28 up
      to 0x2a;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x42 up
      to 0x44;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c000170 up to
      0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000181
      up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000170 up to
      0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000181
      up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x429 up to 0x42a;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x429 up to 0x42a;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x429 up to 0x42a;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x429
      up to 0x42a;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf4 up
      to 0xf6;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf4 up to 0xf6;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x57 up
      to 0x58;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x112 up
      to 0x113;
    - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x410e up to 0x4112;
    - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x410e up to 0x4112;
    - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x410e up to 0x4112;
    - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode from revision 0x410e
      up to 0x4112.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230808-1
changelog:
  - Update Intel CPU microcode to microcode-20230808 release, addresses
    CVE-2022-40982, CVE-2022-41804, CVE-2023-23908 (#2213124, #2223992, #2230677,
      - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006f05 up
      to 0x2007006;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xaa up to 0xac;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf6 up to 0xf8;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf8 up
      to 0xfa;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000171
      up to 0x1000181;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003501
      up to 0x4003604;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003501 up to 0x5003604;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002601
      up to 0x7002703;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000390
      up to 0xd0003a5;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xba
      up to 0xbc;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2a up
      to 0x2c;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x44 up
      to 0x46;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c0001d1 up to
      0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000461
      up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c0001d1 up to
      0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000461
      up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2c
      up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x42a up to 0x42c;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x42a up to 0x42c;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x42a up to 0x42c;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42a
      up to 0x42c;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf6 up
      to 0xf8;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf6 up to 0xf8;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x58 up
      to 0x59;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x113 up
      to 0x119;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2c up
      to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2c up
      to 0x2e;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4112
      up to 0x4119 (old pf 0xc0);
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x10 up
      to 0x11 (old pf 0x1).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230808-2
changelog:
  - Add support for the new, more correct, variant of dracut's default
    $fw_dir path in dracut_99microcode_ctl-fw_dir_override_module_init.sh.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20231009-1
changelog:
  - Update Intel CPU microcode to microcode-20231009 release, addresses
    CVE-2023-23583:
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xac up to 0xb4;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003a5
      up to 0xd0003b9;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000230
      up to 0x1000268;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xbc
      up to 0xc2;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2c up
      to 0x34;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x46 up
      to 0x4e;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2e
      up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2e up to 0x32;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x42c up to 0x430;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x42c up to 0x430;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x42c up to 0x430;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42c
      up to 0x430;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x4 up
      to 0x5;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x59 up
      to 0x5d;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x119 up
      to 0x11d;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4119
      up to 0x411c;
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x11 up
      to 0x12;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2e up
      to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2e up
      to 0x32.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20240531-1
changelog:
  - Update Intel CPU microcode to microcode-20240531 release, addresses
    CVE-2023-22655, CVE-2023-23583. CVE-2023-28746, CVE-2023-38575,
    CVE-2023-39368, CVE-2023-42667, CVE-2023-43490, CVE-2023-45733,
    CVE-2023-46103, CVE-2023-49141 (RHEL-30861, RHEL-30864, RHEL-30867,
    RHEL-30870, RHEL-30873, RHEL-41094, RHEL-41109):
    - Addition of 06-aa-04/0xe6 (MTL-H/U C0) microcode at revision 0x1c;
    - Addition of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) at
      revision 0x4121;
    - Addition of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) at
      revision 0x4121;
    - Addition of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) at revision 0x4121;
    - Addition of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) at revision 0x4121;
    - Addition of 06-ba-08/0xe0 microcode at revision 0x4121;
    - Addition of 06-cf-01/0x87 (EMR-SP A0) microcode at revision
      0x21000230;
    - Addition of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) at revision 0x21000230;
    - Addition of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) at revision 0x21000230;
    - Addition of 06-cf-02/0x87 (EMR-SP A1) microcode at revision
      0x21000230;
    - Removal of 06-8f-04/0x10 microcode at revision 0x2c000290;
    - Removal of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
      0x2b0004d0;
    - Removal of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000290;
    - Removal of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Removal of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
      revision 0x2c000290;
    - Removal of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Removal of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000290;
    - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xb4 up to 0xb6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf8 up to 0xfa;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf4 up
      to 0xf8;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf4 up
      to 0xf6;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf4 up
      to 0xf6;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xfa up
      to 0xfc;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000181
      up to 0x1000191;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003604
      up to 0x4003605;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003604 up to 0x5003605;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002703
      up to 0x7002802;
    - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
      0xe000014 up to 0xe000015;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x38 up
      to 0x3e;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003b9
      up to 0xd0003d1;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000268
      up to 0x1000290;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3e up
      to 0x42;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x22 up
      to 0x24;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc2
      up to 0xc4;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x34 up
      to 0x36;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x4e up
      to 0x50;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000290 up to 0x2c000390;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004d0
      up to 0x2b0005c0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000290 up to
      0x2c000390;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004d0
      up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000290 up to 0x2c000390;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x17 up
      to 0x19;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x32 up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x32 up to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x32 up to 0x35;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x32
      up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x32 up to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x32 up to 0x35;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x430 up to 0x433;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x430 up to 0x433;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x430 up to 0x433;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x430
      up to 0x433;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x5 up
      to 0x7;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000024
      up to 0x24000026;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf8 up
      to 0xfa;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf8
      up to 0xfa;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf8
      up to 0xfa;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf8
      up to 0xfa;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf8 up to 0xfa;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5d up
      to 0x5e;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x11d up
      to 0x123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x411c up to 0x4121;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x411c up to 0x4121;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x411c up to 0x4121;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x411c
      up to 0x4121;
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x12 up
      to 0x17;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x32 up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x32 up
      to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x32 up to 0x35;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x32 up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x32 up to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x32 up
      to 0x35.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20240910-1
changelog:
  - Update Intel CPU microcode to microcode-20240910 release, addresses
  - Addresses CVE-2024-23984, CVE-2024-24853, CVE-2024-24968, CVE-2024-24980,
    CVE-2024-25939 (RHEL-58057):
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xb6 up to 0xb8;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xfa up to 0xfc;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf6 up
      to 0xf8;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf4 up
      to 0xf6;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf6 up
      to 0xf8;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xfc up
      to 0x100;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003605 up to 0x5003707;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002802
      up to 0x7002904;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003d1
      up to 0xd0003e7;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000290
      up to 0x10002b0;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc4
      up to 0xc6;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x50 up
      to 0x52;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x19 up
      to 0x1a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x35
      up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x433 up to 0x434;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x433
      up to 0x434;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfa up
      to 0xfc;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfa
      up to 0xfe;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xfa up to 0xfc;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5e up
      to 0x62;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1c
      up to 0x1f;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x123 up
      to 0x129;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4121
      up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4121 up to 0x4122;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x17 up
      to 0x1a (old pf 0x11).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20240910-1
changelog:
  - Update Intel CPU microcode to microcode-20240910 release, addresses
    CVE-2024-23984, CVE-2024-24853, CVE-2024-24968, CVE-2024-24980,
    CVE-2024-25939 (RHEL-58057):
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xb6 up to 0xb8;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xfa up to 0xfc;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf6 up
      to 0xf8;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf4 up
      to 0xf6;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf6 up
      to 0xf8;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xfc up
      to 0x100;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003605 up to 0x5003707;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002802
      up to 0x7002904;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003d1
      up to 0xd0003e7;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000290
      up to 0x10002b0;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc4
      up to 0xc6;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x50 up
      to 0x52;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x19 up
      to 0x1a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x35
      up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x433 up to 0x434;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x433
      up to 0x434;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfa up
      to 0xfc;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfa
      up to 0xfe;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xfa up to 0xfc;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5e up
      to 0x62;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1c
      up to 0x1f;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x123 up
      to 0x129;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4121
      up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4121 up to 0x4122;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x17 up
      to 0x1a (old pf 0x11).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20241112-1
changelog:
  - Update Intel CPU microcode to microcode-20241112 release, addresses
    CVE-2024-21820, CVE-2024-21853, CVE-2024-23918, CVE-2024-23984 (RHEL-67336):
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0005c0
      up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0005c0
      up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0005c0 up to 0x2b000603;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x36 up to 0x37;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x36
      up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x36 up to 0x37;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x434 up to 0x435;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x434 up to 0x435;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x434 up to 0x435;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x434
      up to 0x435;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1f
      up to 0x20;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x129 up
      to 0x12b;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4122 up to 0x4123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4122
      up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4122 up to 0x4123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4122 up to 0x4123;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x36 up
      to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x36 up to 0x37;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x36 up to 0x37;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x36 up
      to 0x37;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000230
      up to 0x21000283;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000230 up to 0x21000283;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000230 up to 0x21000283;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000230
      up to 0x21000283.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20250211-1
changelog:
  - Update Intel CPU microcode to microcode-20250211 release, addresses
    CVE-2023-34440, CVE-2023-43758, CVE-2024-24582, CVE-2024-28047,
    CVE-2024-28127, CVE-2024-29214, CVE-2024-31068, CVE-2024-31157,
    CVE-2024-37020, CVE-2024-39279, CVE-2024-39355, CVE-2024-36293 (RHEL-79182,
    RHEL-79186, RHEL-79187, RHEL-79242, RHEL-79243, RHEL-79246, RHEL-79251,
    RHEL-79252):
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) at
      revision 0x38;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) at
      revision 0x38;
    - Addition of 06-af-03/0x01 (SRF-SP C0) microcode at revision 0x3000330;
    - Addition of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) at
      revision 0x12c;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) at
      revision 0x38;
    - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) at
      revision 0x38;
    - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) at
      revision 0x38;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf8 up
      to 0xfa;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0x100 up
      to 0x102;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003e7
      up to 0xd0003f5;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002b0
      up to 0x10002c0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000603
      up to 0x2b000620;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000390 up to
      0x2c0003e0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000603
      up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000390 up to 0x2c0003e0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000603 up to 0x2b000620;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x37 up to 0x38;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x37
      up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x37 up to 0x38;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x435 up to 0x436;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x435 up to 0x436;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x435 up to 0x436;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x7 up
      to 0x9;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x435
      up to 0x436;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x62 up
      to 0x63;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12b up
      to 0x12c;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4123 up to 0x4124;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4123 up to 0x4124;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4123
      up to 0x4124;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4123 up to 0x4124;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4123 up to 0x4124;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4123 up to 0x4124;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1a up
      to 0x1c;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x37 up
      to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x37 up to 0x38;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x37 up to 0x38;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x37 up to 0x38;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x37 up to 0x38;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x37 up
      to 0x38;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000283
      up to 0x21000291;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) from revision 0x21000283 up to 0x21000291;
    - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) from revision 0x21000283 up to 0x21000291;
    - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000283
      up to 0x21000291.


author: Nicola Sella <nsella@redhat.com> - 3.5.0-1
changelog:
  - Update to 3.5.0
  - Add module enable and disable commands
  - Add reports of module changes
  - Add "module enable" command
  - Add subcommands support
  - Print info about obsoleted packages before transaction (RhBug:1855542)


author: Nicola Sella <nsella@redhat.com> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - spec: Sync summary and description from openSUSE
  - Add support for setting a platform module ID
  - Add dependency for DNF configurations skeleton
  - Add support for setting allow_vendor_change


author: Nicola Sella <nsella@redhat.com> - 3.7.1-1
changelog:
  - Update to 3.7.1
  - [download] fix: unwanted dependency on newer glib 
  - [download] Support for "--resolve" and "--alldeps" arguments 
  - [download] New get_packages_query function
  - Support "--setopt=keepcache=0/1"
  - [download] Support "--archlist=" argument
  - [download] Move package download code to "download_packages" function
  - [download] several optimizations
  - Don't set default value of "assumeyes" to TRUE 
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Extend "--setopt" to support repository options 
  - Added alias "update" to "upgrade" command
  - Command "update" renamed to "upgrade"
  - Add support for command aliases
  - dnf-data requirement only for Fedora and future RHEL
  - Relicense to GPLv2+ [errata corrige: not in 3.5.1-1]
  - Sync summary and description from openSUSE [errata corrige: not in 3.6.0-1]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - distrosync: Fix style issues and plugin build with Meson 
  - Add distro-sync subcommand
  - Add "makecache" command


author: Lukas Hrazky <lhrazky@redhat.com> - 3.9.1-1
changelog:
  - Update to 3.9.1
  - leaves: Treat recommends as dependencies when install_weak_deps=True
  - Add leaves command
  - Remove non-breaking space from "Size" column (RhBug:2010676)


author: Nicola Sella <nsella@redhat.com> - 3.9.1-2
changelog:
  - Revert: leaves: Treat recommends as dependencies when install_weak_deps=True
  - Revert: Add leaves command


author: Tomas Popela <tpopela@redhat.com> - 0.26-27
changelog:
  - Don't prune bind mounts on ostree based systems, prune the deployments folder
    there to avoid duplications.
  - Fixes: https://github.com/fedora-silverblue/issue-tracker/issues/76


author: Peter Jones <pjones@redhat.com> - 2:0.5.0-3
changelog:
  - Add support for "mokutil --list-sbat-revocations" and
    "mokutil --set-sbat-policy"
    Related: CVE-2022-28737


author: Pavel Cahyna <pcahyna@redhat.com> - 4.0.26-4
changelog:
  - Add dependency on glibc-gconv-extra
    mtools need codepage 850, which was split from glibc into a subpackage.
    (Fedora bug #2021637, RHEL bug #2073843)


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Phil Sutter <psutter@redhat.com> [1.0.4-2.el9]
changelog:
  - intervals: Do not sort cached set elements over and over again (Phil Sutter) [1917398]
  - intervals: do not empty cache for maps (Phil Sutter) [1917398]
  - intervals: do not report exact overlaps for new elements (Phil Sutter) [1917398]
  - rule: collapse set element commands (Phil Sutter) [1917398]
  - tests: shell: runtime set element automerge (Phil Sutter) [1917398]


author: Phil Sutter <psutter@redhat.com> [1.0.4-8.el9]
changelog:
  - monitor: Sanitize startup race condition (Phil Sutter) [2130721]
  - evaluate: set eval ctx for add/update statements with integer constants (Phil Sutter) [2094894]
  - src: allow anon set concatenation with ether and vlan (Phil Sutter) [2094887]
  - evaluate: search stacked header list for matching payload dep (Phil Sutter) [2094887]
  - netlink_delinearize: also postprocess OP_AND in set element context (Phil Sutter) [2094887]
  - tests: add a test case for ether and vlan listing (Phil Sutter) [2094887]
  - debug: dump the l2 protocol stack (Phil Sutter) [2094887]
  - proto: track full stack of seen l2 protocols, not just cumulative offset (Phil Sutter) [2094887]
  - netlink_delinearize: postprocess binary ands in concatenations (Phil Sutter) [2094887]
  - netlink_delinearize: allow postprocessing on concatenated elements (Phil Sutter) [2094887]
  - intervals: check for EXPR_F_REMOVE in case of element mismatch (Phil Sutter) [2115627]
  - intervals: fix crash when trying to remove element in empty set (Phil Sutter) [2115627]
  - scanner: don't pop active flex scanner scope (Phil Sutter) [2113874]
  - parser: add missing synproxy scope closure (Phil Sutter) [2113874]
  - tests/py: Add a test for failing ipsec after counter (Phil Sutter) [2113874]
  - doc: Document limitations of ipsec expression with xfrm_interface (Phil Sutter) [1806431]


author: Phil Sutter <psutter@redhat.com> [1.0.4-9.el9]
changelog:
  - tests: add a test case for map update from packet path with concat (Phil Sutter) [2094894]
  - netlink_linearize: fix timeout with map updates (Phil Sutter) [2094894]
  - netlink_delinearize: fix decoding of concat data element (Phil Sutter) [2094894]


author: Phil Sutter <psutter@redhat.com> [1.0.4-10.el9]
changelog:
  - netlink_delinearize: Sanitize concat data element decoding (Phil Sutter) [2160049]
  - optimize: Clarify chain_optimize() array allocations (Phil Sutter) [2160049]
  - optimize: Do not return garbage from stack (Phil Sutter) [2160049]
  - netlink: Fix for potential NULL-pointer deref (Phil Sutter) [2160049]
  - meta: parse_iso_date() returns boolean (Phil Sutter) [2160049]
  - mnl: dump_nf_hooks() leaks memory in error path (Phil Sutter) [2160049]
  - owner: Fix potential array out of bounds access (Phil Sutter) [2160049]


author: Phil Sutter <psutter@redhat.com> [1.0.4-11.el9]
changelog:
  - rule: check address family in set collapse (Phil Sutter) [RHEL-5908]
  - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL]


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-13
changelog:
  - tests: extend dtype test case to cover expression with integer type
  - evaluate: set evaluation context for set elements


author: Phil Sutter <psutter@redhat.com> [1.0.9-1.el9]
changelog:
  - spec: Utilize pyproject-rpm-macros for the python sub-package (Phil Sutter) [RHEL-14191]
  - Rebase onto version 1.0.9 (Phil Sutter) [RHEL-14191]


author: Phil Sutter <psutter@redhat.com> [1.0.9-4.el9]
changelog:
  - parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
  - json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.1-6
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: Than Ngo <than@redhat.com> - 3.18.0-4
changelog:
  - Related: #2044179, do not touch opencryptoki.conf if it is in place already and even if it is unchanged


author: Than Ngo <than@redhat.com> - 3.19.0-1
changelog:
  - Resolves: #2126294, opencryptoki fails after generating > 500 RSA keys
  - Resolves: #2110314, rebase to 3.19.0
  - Resolves: #2110989, openCryptoki key generation with expected MKVP only on CCA and EP11 tokens
  - Resolves: #2110476, openCryptoki ep11 token: master key consistency
  - Resolves: #2018458, openCryptoki ep11 token: vendor specific key derivation


author: Than Ngo <than@redhat.com> - 3.21.0-3
changelog:
  - Resolves: #2110497, concurrent MK rotation for cca token
  - Resolves: #2110498, concurrent MK rotation for ep11 token
  - Resolves: #2110499, ep11 token: PKCS #11 3.0 - support AES_XTS
  - Resolves: #2111010, cca token: protected key support 
  - Resolves: #2160061, rebase to 3.21.0
  - Resolves: #2160105, pkcsslotd hardening
  - Resolves: #2160107, p11sak support Dilithium and Kyber keys
  - Resolves: #2160109, ica and soft tokens: PKCS #11 3.0 - support AES_XTS


author: Than Ngo <than@redhat.com> - 3.21.0-8
changelog:
  - Resolves: #2222592, p11sak tool: slot option does not accept argument 0 for slot index 0
  - Resolves: #2222596, p11sak fails as soon as there reside non-key objects


author: Than Ngo <than@redhat.com> - 3.22.0-2
changelog:
  - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
  Resolves: RHEL-22792


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - Resolves: RHEL-23671, ep11 token: support protected keys for extractable keys
  - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys
  - Resolves: RHEL-23673, update to 3.23.0


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-50064, update to 3.24.0
  - Resolves: RHEL-50063, opencryptoki CCA Token support for x86_64 and ppc64le
  - Resolves: RHEL-50058, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-50056, openCryptoki cca token SHA3 support
  - Resolves: RHEL-50057, openCryptoki cca token RSA OAEP v2.1 support


author: Simon Pichugin <spichugi@redhat.com> - 2.4.57-6
changelog:
  - Fix slapd.tmpfiles complaints. Related: rhbz#1969853
  - Use https:// for source Related: rhbz#1973597


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71053)
  - Avoid SSL context cleanup during library destruction (RHEL-56502)


author: Jakub Jelen <jjelen@redhat.com> - 0.22.0-2
changelog:
  - Unbreak detection of unentrolled smart cards (#2007029)
  - Enable file caching by default except for pkcs15-init (#2000626)


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-1
changelog:
  - Rebase to latest 0.23.0 release (#2100409)
  - Use separate OpenSSL context to work better from inside of OpenSSL providers


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-2
changelog:
  - Fix regression in handling OpenPGP cards
  - Fix CVE-2023-2977: buffer overrun in pkcs15init for cardos


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-3
changelog:
  - Fix file caching with different offsets (RHEL-4079)
  - Fix CVE-2023-40660: Potential PIN bypass
  - Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init
  - Fix CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption using symmetric keys
  - Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-30
changelog:
  - Some non-terminating processes were listening on ports.
    Resolves: rhbz#2177768
  - On sshd startup, we check whether signing using the SHA1 for signing is
    available and don't use it when it isn't.
  - On ssh private key conversion we explicitly use SHA2 for testing RSA keys.
  - In sshd, when SHA1 signatures are unavailable, we fallback (fall forward :) )
    to SHA2 on host keys proof confirmation.
  - On a client side we permit SHA2-based proofs from server when requested SHA1
    proof (or didn't specify the hash algorithm that implies SHA1 on the client
    side). It is aligned with already present exception for RSA certificates.
  - We fallback to SHA2 if SHA1 signatures is not available on the client side
    (file sshconnect2.c).
  - We skip dss-related tests (they don't work without SHA1).
    Resolves: rhbz#2070163
  - FIPS compliance efforts for dh, ecdh and signing
    Resolves: rhbz#2091694


author: Norbert Pocs <npocs@redhat.com> - 8.7p1-31
changelog:
  - Fix minor issues with openssh-8.7p1-evp-fips-compl-dh.patch:
  - Check return values
  - Use EVP API to get the size of DH
  - Add some log debug lines
  - Related: rhbz#2091694


author: Norbert Pocs <npocs@redhat.com> - 8.7p1-32
changelog:
  - Fix pkcs11 issue with the recent changes
  - Delete unnecessary log messages from previous compl-dh patch
  - Add ssh_config man page explanation on rhbz#2068423
  - Resolves: rhbz#2207793, rhbz#2209096


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-35
changelog:
  - Relax OpenSSH checks for OpenSSL version
    Resolves: RHEL-4734
  - Limit artificial delays in sshd while login using AD user
    Resolves: RHEL-2469
  - Move users/groups creation logic to sysusers.d fragments
    Resolves: RHEL-5222


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-36
changelog:
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Relax OpenSSH build-time checks for OpenSSL version
    Related: RHEL-4734
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-44
changelog:
  - Add extra help information on ssh early failure
    Resolves: RHEL-33809
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-52293
  - Allow duplicate Subsystem directive
    Resolves: RHEL-47112


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-45
changelog:
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465).
    Resolves: RHEL-78700


author: Clemens Lang <cllang@redhat.com> - 1:3.0.7-19
changelog:
  - Re-enable DHX keys in FIPS mode, disable FIPS 186-4 parameter validation and generation in FIPS mode
    Resolves: rhbz#2169757


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-20
changelog:
  - Fix possible DoS translating ASN.1 object identifiers
    Resolves: CVE-2023-2650
  - Release the DRBG in global default libctx early
    Resolves: rhbz#2211340


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-25
changelog:
  - Provide relevant diagnostics when FIPS checksum is corrupted
    Resolves: RHEL-5317
  - Don't limit using SHA1 in KDFs in non-FIPS mode.
    Resolves: RHEL-5295
  - Provide empty evp_properties section in main OpenSSL configuration file
    Resolves: RHEL-11439
  - Avoid implicit function declaration when building openssl
    Resolves: RHEL-1780
  - Forbid explicit curves when created via EVP_PKEY_fromdata
    Resolves: RHEL-5304
  - AES-SIV cipher implementation contains a bug that causes it to ignore empty
    associated data entries (CVE-2023-2975)
    Resolves: RHEL-5302
  - Excessive time spent checking DH keys and parameters (CVE-2023-3446)
    Resolves: RHEL-5306
  - Excessive time spent checking DH q parameter value (CVE-2023-3817)
    Resolves: RHEL-5308
  - Fix incorrect cipher key and IV length processing (CVE-2023-5363)
    Resolves: RHEL-13251
  - Switch explicit FIPS indicator for RSA-OAEP to approved following
    clarification with CMVP
    Resolves: RHEL-14083
  - Backport the check required by SP800-56Br2 6.4.1.2.1 (3.c)
    Resolves: RHEL-14083
  - Add missing ECDH Public Key Check in FIPS mode
    Resolves: RHEL-15990
  - Excessive time spent in DH check/generation with large Q parameter value (CVE-2023-5678)
    Resolves: RHEL-15954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-26
changelog:
  - Avoid implicit function declaration when building openssl
    Related: RHEL-1780
  - In FIPS mode, prevent any other operations when rsa_keygen_pairwise_test fails
    Resolves: RHEL-17104
  - Add a directory for OpenSSL providers configuration
    Resolves: RHEL-17193
  - Eliminate memory leak in OpenSSL when setting elliptic curves on SSL context
    Resolves: RHEL-19515
  - POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129)
    Resolves: RHEL-21151
  - Excessive time spent checking invalid RSA public keys (CVE-2023-6237)
    Resolves: RHEL-21654
  - SSL ECDHE Kex fails when pkcs11 engine is set in config file
    Resolves: RHEL-20249
  - Denial of service via null dereference in PKCS#12
    Resolves: RHEL-22486
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Resolves: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-27
changelog:
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Related: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-1
changelog:
  - Rebase to OpenSSL 3.2.2. Fixes CVE-2024-2511, CVE-2024-4603, CVE-2024-4741,
    and Minerva attack.
    Resolves: RHEL-32148
    Resolves: RHEL-36792
    Resolves: RHEL-38514
    Resolves: RHEL-39111


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-7
changelog:
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76756


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
changelog:
  - Rebasing OpenSSL to 3.5
    Resolves: RHEL-80854
    Resolves: RHEL-50208
    Resolves: RHEL-50210
    Resolves: RHEL-50211
    Resolves: RHEL-85954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-2
changelog:
  - OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9
    Resolves: RHEL-88910
  - PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9
    Resolves: RHEL-88912
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-89860
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-89861
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-89862
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-89859
  - Enable sslkeylog support
    Resolves: RHEL-90854


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-2
changelog:
  - OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9
    Resolves: RHEL-88910
  - PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9
    Resolves: RHEL-88912


author: Jakub Jelen <jjelen@redhat.com> - 0.4.11-8
changelog:
  - Fix sending parameters for RSA-OAEP operations (#2063378)
  - Improve logging and fix selection of expired certificates (#2029834)


author: Leo Sandoval <lsandova@redhat.com> - 1.77-11
changelog:
  - 90fallback: include possible kernel parameters from grub's default file
  - common.sh: do not resolve symbolic link on mapped device filesystems
  - Resolves: #RHEL-44705


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.0-1
changelog:
  - common: Only check strndup behavior when replacement is used (Daiki Ueno)
  - Release 0.24.0 (Daiki Ueno)
  - Release 0.23.22 (Daiki Ueno)
  - rpc: Tighten attribute array check with manual enumeration (Daiki Ueno)
  - Check for SUN_LEN and provide fallback (Claes Nästén)
  - Do not define _XOPEN_SOURCE in compat.c on Solaris (Claes Nästén)
  - make autogen.sh a bit more portable (Claes Nästén)
  - rpc-server: Disable parsing CKF_ARRAY_ATTRIBUTE (Daiki Ueno)
  - Update README.md (Daiki Ueno)
  - README.md: Suggest using only meson sub-commands instead of ninja (Daiki Ueno)
  - p11-kit: Add missing <limits.h> include for SIZE_MAX (Daiki Ueno)
  - packit: drop synced_files (Tomas Tomecek)
  - packit: fedora renamed master branch to rawhide (Tomas Tomecek)
  - Fix minor typo (Yuri Chornoivan)
  - po: Add trust/trust.c to POTFILES.in (Daiki Ueno)
  - po: Update POTFILES.in (Daiki Ueno)
  - trust: Make more strings translatable (Daiki Ueno)
  - p11-kit: Make more strings translatable (Daiki Ueno)
  - common: Enable message translation in p11_tool_main (Daiki Ueno)
  - meson: Make sure to set PROJECT_NAME and ENABLE_NLS for 'nls' option (Daiki Ueno)
  - build: Add fuzz/meson.build in the distribution (Daiki Ueno)
  - fuzz: Move the directory out of build/ (Daiki Ueno)
  - Release all library/mock resources before exit (David Cook)
  - Add separate oss-fuzz Makefile target (David Cook)
  - Add build targets for future additional fuzzers (David Cook)
  - Build fuzzer target from meson/ninja (David Cook)
  - Explicit dependency for virtual-fixed-generated.h (David Cook)
  - Build fuzzer target from automake (David Cook)
  - rpc_fuzzer: Clean up buffer before exit (David Cook)
  - New set of fuzzer seeds (David Cook)
  - github: Remove unnecessary SRCDIR envvar (Daiki Ueno)
  - github: Use runuser instead of su for building and testing (Daiki Ueno)
  - github: Use composite action to simplify the main recipe (Daiki Ueno)
  - github: Use pre-built container image for building (Daiki Ueno)
  - README.md: Add GitHub workflow status (Daiki Ueno)
  - travis: Remove configurations other than FreeBSD (Daiki Ueno)
  - autotools: Fix for VPATH build (Daiki Ueno)
  - github actions: Initial CI setup (Anderson Toshiyuki Sasaki)
  - modules: p11_kit_initialize_module: Remove redundant module unref (Daiki Ueno)
  - server: Account for NUL byte at the end of Unix domain socket path (Daiki Ueno)
  - compat: Expose FreeBSD specific issetugid, getresuid, and getresgid (Daiki Ueno)
  - compat: Remove <unistd.h> inclusion from compat.h (Daiki Ueno)
  - compat: Avoid unused variables warning in fdwalk emulation (Daiki Ueno)
  - compat: Pacify ASan complaints on intentionally leaked buffer (Daiki Ueno)
  - meson: Link trust/client modules explicitly to -ldl (Daiki Ueno)
  - p11-kit/lists.c: Add stdint.h to fix compilation (Daniel Engberg)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - Use inclusive language on certificate distrust (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.2-1
changelog:
  - Update to new upstream release 0.25.2
    Resolves: RHEL-14834
  - Add IBM specific mechanisms and attributes
    Resolves: RHEL-10570


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.3-3
changelog:
  - Fix regression in trust where file creation fails for long cert labels
    Resolves: RHEL-58899
  - Fix usage message in p11-kit list-tokens command
    Resolves: RHEL-31810


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-14
changelog:
  - pam_lastlog: check localtime_r() return value. Resolves: #2130124
  - pam_faillock: clarify missing user faillock files after reboot. Resolves: #2126632
  - pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2126648


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-16
changelog:
  - libpam: use close_range() to close file descriptors. Resolves: RHEL-5099
  - fix formatting of audit messages. Resolves: RHEL-5100


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.3.1-18
changelog:
  - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
  - pam_access: handle hostnames in access.conf. Resolves: RHEL-22300


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.3.1-19
changelog:
  - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
    situations. CVE-2024-22365. Resolves: RHEL-21244


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-22
changelog:
  - pam_unix: always run the helper to obtain shadow password file entries.
    CVE-2024-10041. Resolves: RHEL-62879
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-23631 and RHEL-39943


author: Brian C. Lane <bcl@redhat.com> - 3.4-4
changelog:
  - Fix issues that covscan classifies as important
    Resolves: rhbz#1938836
  - Work around a mkswap bug


author: Brian C. Lane <bcl@redhat.com> - 3.5-1
changelog:
  - Rebase to upstream release 3.5
  - Drop patches included in new upstream tar
  - Add upstream patches for new type command
  - Add upstream patch for swap flag on DASD
    Resolves: rhbz#1999333


author: Brian C. Lane <bcl@redhat.com> - 3.5-3
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73217
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73217
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73217
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73217


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Petr Pisar <ppisar@redhat.com> - 10.36-4
changelog:
  - Fix a mismatch if \K was involved in a recursion
  - Restore single character repetition optimization in JIT (upstream bug #2698)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.37-1
changelog:
  - Rebase to the 10.37
  - libpcre2-posix.so.2* SONAME bump to libpcre2-posix.so.3*
  - Enable JIT for s390x arch
  - Patches upstreamed: Patch 1,2,3,4
  - Resolves: rhbz#1970765, BZ#1965025


author: Jakub Jelen <jjelen@redhat.com> - 1.9.4-1
changelog:
  - Rebase to current version from Fedora (#2017828)
  - Use of upstrea polkit policy preventing unneeded prompts


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.94-1
changelog:
  - Resolves: RHEL-40758
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list
  - Package tests


author: Tom Stellard <tstellar@redhat.com> - 3.78-441
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Paul Howarth <paul@city-fan.org> - 1:0.238-1
changelog:
  - Update to 0.238
    - Move the prerequisite Test::More from being a runtime prerequisite to a
      test time / build time prerequisite (GH#11)


author: Petr Lautrbach <plautrba@redhat.com> - 3.4-2
changelog:
  - gettext: handle unsupported languages properly (#2100378)
  - semodule: rename --rebuild-if-modules-changed to --refresh
  - python: Split "semanage import" into two transactions (#2063353)
  - selinux-autorelabel: Do not force reboot (#2093133)


author: Petr Lautrbach <plautrba@redhat.com> - 3.4-3
changelog:
  - Run autorelabel in parallel by default
    https://fedoraproject.org/wiki/Changes/SELinux_Parallel_Autorelabel


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-2
changelog:
  - Improve man pages (RHEL-672)
  - Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)


author: Jan Rybar <jrybar@redhat.com> - 0.117-13
changelog:
  - session-monitor: watch sessions only
  - PolkitPermission: react on really changed sessions
  - allow polkit-pkla-compat to be uninstalled if no .pkla rules
  - Resolves: RHEL-39063


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-6
changelog:
  - free: backport new 'used' calculation
  - sysctl: backport support of systemd glob patterns
  - Resolves: rhbz#2003033
  - Resolves: rhbz#2052536


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-7
changelog:
  - sysctl: backport - keys with dots instead of slashes again
  - Resolves: rhbz#2116977
  - Related: rhbz#2052536


author: Miro Hrončok <mhroncok@redhat.com> - 21.0.1-2
changelog:
  - python-pip-wheel: Remove bundled provides and libcrypt recommends for Python 2
    (The wheel is Python 3 only for a while)


author: Tomas Orsava <torsava@redhat.com> - 21.0.1-5
changelog:
  - Provide the platform-python-pip name for backwards compatibility
    with RHEL 8
  - Related: rhbz#1891487


author: Miro Hrončok <mhroncok@redhat.com> - 51.1.1-1
changelog:
  - Update to 51.1.1
  - Fixes test failures with pip 20.3 as well as with pytest 6.2+
  - Fixes: rhbz#1909575


author: Miro Hrončok <mhroncok@redhat.com> - 51.1.2-1
changelog:
  - Update to 51.1.2
  - Removes tests from the wheel
  - https://setuptools.readthedocs.io/en/latest/history.html#v51-1-2
  - Fixes: rhbz#1914481


author: Miro Hrončok <mhroncok@redhat.com> - 53.0.0-1
changelog:
  - Update to 53.0.0
  - https://setuptools.readthedocs.io/en/latest/history.html#v53-0-0
  - Fixes: rhbz#1923249


author: Tomas Orsava <torsava@redhat.com> - 53.0.0-5
changelog:
  - Provide the platform-python-setuptools name for backwards compatibility
    with RHEL 8
  - Related: rhbz#1891487


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.19-1
changelog:
  - Update to 3.9.19
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix tests for XMLPullParser with Expat with fixed CVE
  Resolves: RHEL-33679, RHEL-33691


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.21-1
changelog:
  - Update to 3.9.21
  - Security fix for CVE-2024-11168 and CVE-2024-9287
  Resolves: RHEL-64889
  Resolves: RHEL-69942


author: Tomas Orsava <torsava@redhat.com> - 1.14.5-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Miro Hrončok <mhroncok@redhat.com> - 3.0.4-14
changelog:
  - Subpackage python2-chardet has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 3.4.7-1
changelog:
  - Update to 3.4.7
  - Remove dependency on python-cryptography-vectors package and use vectors
    directly from Github source tar ball. Related: rhbz#1952343


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-6
changelog:
  - Rebase to 36.0.1, related: rhbz#2059630, rhbz#2060787
  - OpenSSL 3.0 FIPS mode is now detected correctly, related: rhbz#2054785
  - Fix error check from EVP_PKEY_CTX_set_signature_md, related: rhbz#2060343
  - Block 3DES in FIPS mode, related: rhbz#2055209
  - Disable DSA tests in FIPS mode
  - Enable SHA1 signatures in test suite
  - Fix serialization of keyusage ext with no bits
  - Re-enable tests that are passing again


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-3
changelog:
  - Fix CVE-2023-23931: Don't allow update_into to mutate immutable objects, resolves rhbz#2172399
  - Fix FTBFS due to failing test_load_invalid_ec_key_from_pem and test_decrypt_invalid_decrypt


author: Miro Hrončok <mhroncok@redhat.com> - 1:2.8.0-7
changelog:
  - Subpackage python2-dateutil has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.8-9
changelog:
  - Subpackage python2-dbus has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 4.4.0-5
changelog:
  - Subpackage python2-decorator has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Christian Heimes <cheimes@redhat.com> - 2.1.0-3
changelog:
  - Add bconds for extras require trio, curio, and doh
  - Move trio and curio backend modules into extras subpackages
  - Enable python3-dns+curio meta package
  - Skip failing test testCanonicalNameDangling


author: Rafael Jeffman <rjeffman@redhat.com> - 2.2.1-1
changelog:
  - Rebase to version 2.2.1
    Resolves: rhbz#2088661
  - Disable DNSSEC tests using SHA1 due to crypto policies
    Resolves: rhbz#2107651


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Miro Hrončok <mhroncok@redhat.com> - 2.8-5
changelog:
  - Subpackage python2-idna has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.4-39
changelog:
  - Subpackage python2-iniparse has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 0.9.6-19
changelog:
  - Subpackages python2-inotify, python2-inotify-examples have been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: John Kacur <jkacur@redhat.com> - 0.6.3-5
changelog:
  - various clean-ups including using 'with' context managers in try-except
  - Fix to ignore UnicodeDecodeError when it occurs
  Resolves: rhbz#2031717


author: John Kacur <jkacur@redhat.com> - 0.7.3-1
changelog:
  - Rebase to upstream python-linux-procfs-0.7.3
  - This rebase removes upstream spec files and
  - syncs the git tag with version
  Resolves: RHEL-7614


author: Thomas Moschny <thomas.moschny@gmx.de> - 3.3.4-2
changelog:
  - Apply PR6 by Igor Raits <ignatenkobrain@fedoraproject.org>: Support
    for building on EPEL8 + upstream tests invocation.
  - Remove unused BR on python3-tidy (we'd need pytidylib instead, which
    doesn't seem to be packaged).


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-566.el9]
changelog:
  - redhat/configs: add CONFIG_CIFS_COMPRESSION (Paulo Alcantara) [RHEL-76046]
  - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-76046]
  - cifs: support reconnect with alternate password for SMB1 (Paulo Alcantara) [RHEL-76046]
  - smb: client: sync the root session and superblock context passwords before automounting (Paulo Alcantara) [RHEL-76046]
  - cifs: Remove unused is_server_using_iface() (Paulo Alcantara) [RHEL-76046]
  - smb: enable reuse of deferred file handles for write operations (Paulo Alcantara) [RHEL-76046]
  - smb: use macros instead of constants for leasekey size and default cifsattrs value (Paulo Alcantara) [RHEL-76046]
  - smb: client: destroy cfid_put_wq on module exit (Paulo Alcantara) [RHEL-76046]
  - cifs: Use str_yes_no() helper in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-76046]
  - smb3: fix compiler warning in reparse code (Paulo Alcantara) [RHEL-76046]
  - smb3.1.1: fix posix mounts to older servers (Paulo Alcantara) [RHEL-76046]
  - fs/smb/client: cifs_prime_dcache() for SMB3 POSIX reparse points (Paulo Alcantara) [RHEL-76046]
  - fs/smb/client: Implement new SMB3 POSIX type (Paulo Alcantara) [RHEL-76046]
  - fs/smb/client: avoid querying SMB2_OP_QUERY_WSL_EA for SMB3 POSIX (Paulo Alcantara) [RHEL-76046]
  - cifs: unlock on error in smb3_reconfigure() (Paulo Alcantara) [RHEL-76046]
  - cifs: during remount, make sure passwords are in sync (Paulo Alcantara) [RHEL-76046]
  - cifs: support mounting with alternate password to allow password rotation (Paulo Alcantara) [RHEL-76046]
  - smb: During unmount, ensure all cached dir instances drop their dentry (Paulo Alcantara) [RHEL-76046] {CVE-2024-53176}
  - smb: client: fix noisy message when mounting shares (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix parsing reparse point with native symlink in SMB1 non-UNICODE session (Paulo Alcantara) [RHEL-76046]
  - cifs: Validate content of WSL reparse point buffers (Paulo Alcantara) [RHEL-76046]
  - cifs: Improve guard for excluding $LXDEV xattr (Paulo Alcantara) [RHEL-76046]
  - cifs: Add support for parsing WSL-style symlinks (Paulo Alcantara) [RHEL-76046]
  - cifs: Validate content of native symlink (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix parsing native symlinks relative to the export (Paulo Alcantara) [RHEL-76046]
  - Update misleading comment in cifs_chan_update_iface (Paulo Alcantara) [RHEL-76046]
  - smb: client: change return value in open_cached_dir_by_dentry() if !cfids (Paulo Alcantara) [RHEL-76046]
  - smb: client: disable directory caching when dir_cache_timeout is zero (Paulo Alcantara) [RHEL-76046]
  - smb: client: remove unnecessary checks in open_cached_dir() (Paulo Alcantara) [RHEL-76046]
  - smb: prevent use-after-free due to open_cached_dir error paths (Paulo Alcantara) [RHEL-76046] {CVE-2024-53177}
  - smb: Don't leak cfid when reconnect races with open_cached_dir (Paulo Alcantara) [RHEL-76046] {CVE-2024-53178}
  - smb: client: handle max length for SMB symlinks (Paulo Alcantara) [RHEL-76046]
  - smb: client: get rid of bounds check in SMB2_ioctl_init() (Paulo Alcantara) [RHEL-76046]
  - smb: client: improve compound padding in encryption (Paulo Alcantara) [RHEL-76046]
  - smb3: request handle caching when caching directories (Paulo Alcantara) [RHEL-76046]
  - cifs: Recognize SFU char/block devices created by Windows NFS server on Windows Server <<2012 (Paulo Alcantara) [RHEL-76046]
  - CIFS: New mount option for cifs.upcall namespace resolution (Paulo Alcantara) [RHEL-76046]
  - smb/client: Prevent error pointer dereference (Paulo Alcantara) [RHEL-76046]
  - fs/smb/client: implement chmod() for SMB3 POSIX Extensions (Paulo Alcantara) [RHEL-76046]
  - smb: cached directories can be more than root file handle (Paulo Alcantara) [RHEL-76046]
  - smb: client: Use str_yes_no() helper function (Paulo Alcantara) [RHEL-76046]
  - smb: client: memcpy() with surrounding object base address (Paulo Alcantara) [RHEL-76046]
  - cifs: Remove pre-historic unused CIFSSMBCopy (Paulo Alcantara) [RHEL-76046]
  - cifs: Remove unused functions (Paulo Alcantara) [RHEL-76046]
  - smb/client: Fix logically dead code (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix creating native symlinks pointing to current or parent directory (Paulo Alcantara) [RHEL-76046]
  - cifs: Improve creating native symlinks pointing to directory (Paulo Alcantara) [RHEL-76046]
  - cifs: Do not convert delimiter when parsing NFS-style symlinks (Paulo Alcantara) [RHEL-76046]
  - cifs: Validate content of NFS reparse point buffer (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix buffer overflow when parsing NFS reparse points (Paulo Alcantara) [RHEL-76046] {CVE-2024-49996}
  - smb: client: Correct typos in multiple comments across various files (Paulo Alcantara) [RHEL-76046]
  - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-76046]
  - cifs: Remove intermediate object of failed create reparse call (Paulo Alcantara) [RHEL-76046]
  - Revert "smb: client: make SHA-512 TFM ephemeral" (Paulo Alcantara) [RHEL-76046]
  - smb: Update comments about some reparse point tags (Paulo Alcantara) [RHEL-76046]
  - cifs: Check for UTF-16 null codepoint in SFU symlink target location (Paulo Alcantara) [RHEL-76046]
  - smb: client: make SHA-512 TFM ephemeral (Paulo Alcantara) [RHEL-76046]
  - smb: client: make HMAC-MD5 TFM ephemeral (Paulo Alcantara) [RHEL-76046]
  - smb: client: allocate crypto only for primary server (Paulo Alcantara) [RHEL-76046]
  - ksmbd: Correct typos in multiple comments across various files (Paulo Alcantara) [RHEL-76046]
  - smb3: fix incorrect mode displayed for read-only files (Paulo Alcantara) [RHEL-76046]
  - smb: client: fix parsing of device numbers (Paulo Alcantara) [RHEL-76046]
  - smb: client: set correct device number on nfs reparse points (Paulo Alcantara) [RHEL-76046]
  - smb: client: fix compression heuristic functions (Paulo Alcantara) [RHEL-76046]
  - cifs: Update SFU comments about fifos and sockets (Paulo Alcantara) [RHEL-76046]
  - cifs: Add support for creating SFU symlinks (Paulo Alcantara) [RHEL-76046]
  - cifs: Recognize SFU socket type (Paulo Alcantara) [RHEL-76046]
  - cifs: Show debug message when SFU Fifo type was detected (Paulo Alcantara) [RHEL-76046]
  - cifs: Put explicit zero byte into SFU block/char types (Paulo Alcantara) [RHEL-76046]
  - cifs: Add support for reading SFU symlink location (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix recognizing SFU symlinks (Paulo Alcantara) [RHEL-76046]
  - smb: client: compress: fix an "illegal accesses" issue (Paulo Alcantara) [RHEL-76046]
  - smb: client: compress: fix a potential issue of freeing an invalid pointer (Paulo Alcantara) [RHEL-76046]
  - smb: client: compress: LZ77 code improvements cleanup (Paulo Alcantara) [RHEL-76046]
  - smb: client: insert compression check/call on write requests (Paulo Alcantara) [RHEL-76046]
  - smb3: mark compression as CONFIG_EXPERIMENTAL and fix missing compression operation (Paulo Alcantara) [RHEL-76046]
  - cifs: Remove obsoleted declaration for cifs_dir_open (Paulo Alcantara) [RHEL-76046]
  - smb: client: Use min() macro (Paulo Alcantara) [RHEL-76046]
  - smb: add comment to STATUS_MCA_OCCURED (Paulo Alcantara) [RHEL-76046]
  - smb: move SMB2 Status code to common header file (Paulo Alcantara) [RHEL-76046]
  - smb: move some duplicate definitions to common/smbacl.h (Paulo Alcantara) [RHEL-76046]
  - smb/client: rename cifs_ace to smb_ace (Paulo Alcantara) [RHEL-76046]
  - smb/client: rename cifs_acl to smb_acl (Paulo Alcantara) [RHEL-76046]
  - smb/client: rename cifs_sid to smb_sid (Paulo Alcantara) [RHEL-76046]
  - smb/client: rename cifs_ntsd to smb_ntsd (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix FALLOC_FL_PUNCH_HOLE support (Paulo Alcantara) [RHEL-76046]
  - cifs: Fix missing set of remote_i_size (Paulo Alcantara) [RHEL-76046]
  - cifs: Share server EOF pos with netfslib (Paulo Alcantara) [RHEL-76046]
  - ALSA: change configuration CONFIG_SND_HDA_SCODEC_TAS2781_SPI (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/realtek: fixup ASUS H7606W (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/realtek: fixup ASUS GA605W (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA (Jaroslav Kysela) [RHEL-76110]
  - ASoC: rt722: add delay time to wait for the calibration procedure (Jaroslav Kysela) [RHEL-76110]
  - ALSA: seq: oss: Send fragmented SysEx messages immediately (Jaroslav Kysela) [RHEL-76110]
  - ALSA: seq: oss: Fix races at processing SysEx messages (Jaroslav Kysela) [RHEL-76110] {CVE-2024-57893}
  - ALSA: seq: Check UMP support for midi_version change (Jaroslav Kysela) [RHEL-76110]
  - sound: usb: format: don't warn that raw DSD is unsupported (Jaroslav Kysela) [RHEL-76110]
  - ASoC: audio-graph-card: Call of_node_put() on correct node (Jaroslav Kysela) [RHEL-76110]
  - sound: usb: enable DSD output for ddHiFi TC44C (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/ca0132: Use standard HD-audio quirk matching helpers (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio (Jaroslav Kysela) [RHEL-76110]
  - ALSA: usb-audio: US16x08: Initialize array before use (Jaroslav Kysela) [RHEL-76110]
  - ASoC: Intel: sof_sdw: Fix DMI match for Lenovo 83JX, 83MC and 83NM (Jaroslav Kysela) [RHEL-76110]
  - ASoC: Intel: sof_sdw: Fix DMI match for Lenovo 83LC (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda: tas2781-spi: Delete some dead code (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda: tas2781-spi: Fix bogus error handling in tas2781_hda_spi_probe() (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda: tas2781-spi: Fix error code in tas2781_read_acpi() (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda: tas2781-spi: Fix -Wsometimes-uninitialized in tasdevice_spi_switch_book() (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda: tas2781-spi: select CRC32 instead of CRC32_SARWATE (Jaroslav Kysela) [RHEL-76110]
  - ALSA: hda/tas2781: Add tas2781 hda SPI driver (Jaroslav Kysela) [RHEL-76110]
  - wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one (CKI Backport Bot) [RHEL-75898] {CVE-2024-56663}
  - perf/x86/intel: Add Arrow Lake U support (Michael Petlan) [RHEL-33309]
  - wifi: cfg80211: clear link ID from bitmap during link delete after clean up (Jose Ignacio Tornos Martinez) [RHEL-73817 RHEL-74089] {CVE-2024-57898}
  - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create() (Jose Ignacio Tornos Martinez) [RHEL-72282 RHEL-73817] {CVE-2024-56602}
  - wifi: rtw89: coex: initialize local .dbcc_2g_phy in _set_btg_ctrl() (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: rtw89: check return value of ieee80211_probereq_get() for RNR (Jose Ignacio Tornos Martinez) [RHEL-73669 RHEL-73817] {CVE-2024-48873}
  - wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures (Jose Ignacio Tornos Martinez) [RHEL-72421 RHEL-73817] {CVE-2024-53190}
  - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (Jose Ignacio Tornos Martinez) [RHEL-72111 RHEL-73817] {CVE-2024-53156}
  - wifi: iwlwifi: fix CRF name for Bz (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: cfg80211: sme: init n_channels before channels[] access (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: mac80211: init cnt before accessing elem in ieee80211_copy_mbssid_beacon (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: mac80211: wake the queues in case of failure in resume (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: mac80211: fix a queue stall in certain cases of CSA (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: mac80211: fix station NSS capability initialization order (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: cfg80211: tests: Fix potential NULL dereference in test_cfg80211_parse_colocated_ap() (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: rtlwifi: rtl8821ae: phy: restore removed code to fix infinite loop (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: cfg80211: Remove the Medium Synchronization Delay validity check (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: rtw89: coex: check NULL return of kmalloc in btc_fw_set_monreg() (Jose Ignacio Tornos Martinez) [RHEL-72322 RHEL-73817] {CVE-2024-56535}
  - wifi: nl80211: fix bounds checker error in nl80211_parse_sched_scan (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: iwlwifi: mvm: tell iwlmei when we finished suspending (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: iwlwifi: allow fast resume on ax200 (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: rtw89: Fix TX fail with A2DP after scanning (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: ath12k: remove msdu_end structure for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - bus: mhi: host: Switch trace_mhi_gen_tre fields to native endian (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: ath12k: fix one more memcpy size error (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: ath12k: fix use-after-free in ath12k_dp_cc_cleanup() (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: rtl8xxxu: Perform update_beacon_work when beaconing is enabled (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: ath11k: Fix CE offset address calculation for WCN6750 in SSR (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: cfg80211: check radio iface combination for multi radio per wiphy (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: ath12k: Skip Rx TID cleanup for self peer (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - wifi: iwlwifi: mvm: Fix __counted_by usage in cfg80211_wowlan_nd_* (Jose Ignacio Tornos Martinez) [RHEL-73817]
  - perf test: Remove cpu-list BPF cgroup counter test (Michael Petlan) [RHEL-33006]
  - loop: fix queue freeze vs limits lock order (Ming Lei) [RHEL-71345]
  - loop: refactor queue limits updates (Ming Lei) [RHEL-71345]
  - usb-storage: fix queue freeze vs limits lock order (Ming Lei) [RHEL-71345]
  - nbd: fix queue freeze vs limits lock order (Ming Lei) [RHEL-71345]
  - nvme: fix queue freeze vs limits lock order (Ming Lei) [RHEL-71345]
  - block: fix queue freeze vs limits lock order in sysfs store methods (Ming Lei) [RHEL-71345]
  - block: add a store_limit operations for sysfs entries (Ming Lei) [RHEL-71345]
  - block: don't update BLK_FEAT_POLL in __blk_mq_update_nr_hw_queues (Ming Lei) [RHEL-71345]
  - block: check BLK_FEAT_POLL under q_usage_count (Ming Lei) [RHEL-71345]
  - block: add a queue_limits_commit_update_frozen helper (Ming Lei) [RHEL-71345]
  - block: fix docs for freezing of queue limits updates (Ming Lei) [RHEL-71345]
  - block: return void from the queue_sysfs_entry load_module method (Ming Lei) [RHEL-71345]
  - loop: Fix ABBA locking race (Ming Lei) [RHEL-71345]
  - loop: Simplify discard granularity calc (Ming Lei) [RHEL-71345]
  - loop: Use bdev limit helpers for configuring discard (Ming Lei) [RHEL-71345]
  - nvme-rdma: unquiesce admin_q before destroy it (CKI Backport Bot) [RHEL-73644] {CVE-2024-49569}
  - tls: Fix tls_sw_sendmsg error handling (Benjamin Coddington) [RHEL-60028]
  - SUNRPC: Fix a hang in TLS sock_close if sk_write_pending (Benjamin Coddington) [RHEL-60028]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-567.el9]
changelog:
  - spi: pxa2xx: Add MTP-S, ARL-H, LNL-M support (David Arcari) [RHEL-78311]
  - erofs: promote to full support (Ian Kent) [RHEL-78339]
  - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-78016] {CVE-2024-43871}
  - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75825]
  - RDMA/mlx5: Move events notifier registration to be after device registration (CKI Backport Bot) [RHEL-72349] {CVE-2024-53224}


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-568.el9]
changelog:
  - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-78655]
  - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-78655]
  - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix parsing native symlinks directory/file type (Paulo Alcantara) [RHEL-78655]
  - cifs: Add support for creating WSL-style symlinks (Paulo Alcantara) [RHEL-78655]
  - smb3: add support for IAKerb (Paulo Alcantara) [RHEL-78655]
  - oid_registry: Add OIDs for missing Spnego auth mechanisms to Macs (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix struct FILE_ALL_INFO (Paulo Alcantara) [RHEL-78655]
  - cifs: Add support for creating NFS-style symlinks (Paulo Alcantara) [RHEL-78655]
  - cifs: Add support for creating native Windows sockets (Paulo Alcantara) [RHEL-78655]
  - cifs: Add mount option -o reparse=none (Paulo Alcantara) [RHEL-78655]
  - cifs: Add mount option -o symlink= for choosing symlink create type (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix creating and resolving absolute NT-style symlinks (Paulo Alcantara) [RHEL-78655]
  - cifs: Simplify reparse point check in cifs_query_path_info() function (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove symlink member from cifs_open_info_data union (Paulo Alcantara) [RHEL-78655]
  - cifs: Update description about ACL permissions (Paulo Alcantara) [RHEL-78655]
  - cifs: Rename struct reparse_posix_data to reparse_nfs_data_buffer and move to common/smb2pdu.h (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove struct reparse_posix_data from struct cifs_open_info_data (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove unicode parameter from parse_reparse_point() function (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix getting and setting SACLs over SMB1 (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove intermediate object of failed create SFU call (Paulo Alcantara) [RHEL-78655]
  - cifs: Validate EAs for WSL reparse points (Paulo Alcantara) [RHEL-78655]
  - cifs: Change translation of STATUS_PRIVILEGE_NOT_HELD to -EPERM (Paulo Alcantara) [RHEL-78655]
  - cifs: Change translation of STATUS_NOT_A_REPARSE_POINT to -ENODATA (Paulo Alcantara) [RHEL-78655]
  - smb: client: handle lack of EA support in smb2_query_path_info() (Paulo Alcantara) [RHEL-78655]
  - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-78655]
  - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove duplicate struct reparse_symlink_data and SYMLINK_FLAG_RELATIVE (Paulo Alcantara) [RHEL-78655]
  - cifs: Do not attempt to call CIFSGetSrvInodeNumber() without CAP_INFOLEVEL_PASSTHRU (Paulo Alcantara) [RHEL-78655]
  - cifs: Do not attempt to call CIFSSMBRenameOpenFile() without CAP_INFOLEVEL_PASSTHRU (Paulo Alcantara) [RHEL-78655]
  - cifs: Remove declaration of dead CIFSSMBQuerySymLink function (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix printing Status code into dmesg (Paulo Alcantara) [RHEL-78655]
  - cifs: Add missing NT_STATUS_* codes from nterr.h to nterr.c (Paulo Alcantara) [RHEL-78655]
  - cifs: Fix endian types in struct rfc1002_session_packet (Paulo Alcantara) [RHEL-78655]
  - cifs: Use cifs_autodisable_serverino() for disabling CIFS_MOUNT_SERVER_INUM in readdir.c (Paulo Alcantara) [RHEL-78655]
  - smb3: add missing tracepoint for querying wsl EAs (Paulo Alcantara) [RHEL-78655]
  - smb: client: fix order of arguments of tracepoints (Paulo Alcantara) [RHEL-78655]
  - smb: client: correctly handle ErrorContextData as a flexible array (Paulo Alcantara) [RHEL-78655]
  - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-78655]
  - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-78655]
  - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-78655]
  - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-78655]
  - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-78655]
  - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-78655]
  - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-78655]
  - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-78655]
  - thermal/drivers/rcar_gen3: Update temperature approximation calculation (Radu Rendec) [RHEL-78506]
  - thermal/drivers/rcar_gen3: Move Tj_T storage to shared private data (Radu Rendec) [RHEL-78506]
  - pinctrl: renesas: rzn1: Fix possible null-ptr-deref in sh_pfc_map_resources() (Radu Rendec) [RHEL-78506]
  - pinctrl: renesas: core: Fix possible null-ptr-deref in sh_pfc_map_resources() (Radu Rendec) [RHEL-78506]
  - pinctrl: renesas: checker: Rework drive and bias pin iteration (Radu Rendec) [RHEL-78506]
  - pinctrl: renesas: checker: Fix miscalculation of number of states (Radu Rendec) [RHEL-78506]
  - i2c: rcar: fix NACK handling when being a target (Radu Rendec) [RHEL-78506]
  - i2c: rcar: ensure Gen3+ reset does not disturb local targets (Radu Rendec) [RHEL-78506]
  - i2c: rcar: clear NO_RXDMA flag after resetting (Radu Rendec) [RHEL-78506]
  - i2c: rcar: bring hardware to known state when probing (Radu Rendec) [RHEL-78506]
  - i2c: rcar: add FastMode+ support for Gen4 (Radu Rendec) [RHEL-78506]
  - i2c: rcar: introduce Gen4 devices (Radu Rendec) [RHEL-78506]
  - gpio: rcar: drop of_match_ptr for ID table (Radu Rendec) [RHEL-78506]
  - clocksource/drivers/sh_tmu: Mark driver as non-removable (Radu Rendec) [RHEL-78506]
  - clocksource/drivers/sh_cmt: Address race condition for clock events (Radu Rendec) [RHEL-78506]
  - clocksource/drivers/sh_cmt: Mark driver as non-removable (Radu Rendec) [RHEL-78506]
  - serial: sh-sci: Increment the runtime usage counter for the earlycon device (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: Clean sci_ports[0] after at earlycon exit (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: Move runtime PM enable to sci_probe_single() (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: Drop __initdata macro for port_cfg (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: Use plain struct copy in early_console_setup() (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: simplify locking when re-issuing RXDMA fails (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: let timeout timer only run when DMA is scheduled (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: describe locking requirements for invalidating RXDMA (Jared Kangas) [RHEL-78246]
  - serial: sh-sci: protect invalidating RXDMA on shutdown (Jared Kangas) [RHEL-78246]
  - rxrpc: Don't need barrier for ->tx_bottom and ->acks_hard_ack (Marc Dionne) [RHEL-78217]
  - rxrpc, afs: Fix peer hash locking vs RCU callback (Marc Dionne) [RHEL-78217]
  - afs: Add more tracepoints to do with tracking validity (Marc Dionne) [RHEL-78217]
  - netfs: Remove some extraneous directory invalidations (Marc Dionne) [RHEL-78217]
  - afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call (Marc Dionne) [RHEL-78217]
  - afs: Add rootcell checks (Marc Dionne) [RHEL-78217]
  - afs: Make /afs/.<cell> as well as /afs/<cell> mountpoints (Marc Dionne) [RHEL-78217]
  - afs: Fix the maximum cell name length (Marc Dionne) [RHEL-78217] {CVE-2025-21646}
  - afs: Fix cleanup of immediately failed async calls (Marc Dionne) [RHEL-78217]
  - afs: Fix directory format encoding struct (Marc Dionne) [RHEL-78217]
  - afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY (Marc Dionne) [RHEL-78217]
  - afs: Don't use mutex for I/O operation lock (Marc Dionne) [RHEL-78217]
  - rxrpc: Use a large kvec[] in rxrpc_local rather than every rxrpc_txbuf (Marc Dionne) [RHEL-78217]
  - rxrpc: Request an ACK on impending Tx stall (Marc Dionne) [RHEL-78217]
  - rxrpc: Show stats counter for received reason-0 ACKs (Marc Dionne) [RHEL-78217]
  - rxrpc: Don't set the MORE-PACKETS rxrpc wire header flag (Marc Dionne) [RHEL-78217]
  - rxrpc: Clean up Tx header flags generation handling (Marc Dionne) [RHEL-78217]
  - rxrpc: Fix handling of received connection abort (Marc Dionne) [RHEL-78217]
  - rxrpc: Add a tracepoint for aborts being proposed (Marc Dionne) [RHEL-78217]
  - afs: Fix missing subdir edit when renamed between parent dirs (Marc Dionne) [RHEL-78217]
  - rxrpc: Fix uninitialised variable in rxrpc_send_data() (Marc Dionne) [RHEL-78217]
  - afs: Fix the setting of the server responding flag (Marc Dionne) [RHEL-64506 RHEL-78217] {CVE-2024-49999}
  - afs: Remove unused struct and function prototype (Marc Dionne) [RHEL-78217]
  - afs: Fix possible infinite loop with unresponsive servers (Marc Dionne) [RHEL-78217]
  - rxrpc: Remove unused function declarations (Marc Dionne) [RHEL-78217]
  - afs: drop usage of folio_file_pos (Marc Dionne) [RHEL-78217]
  - afs: Convert comma to semicolon (Marc Dionne) [RHEL-78217]
  - afs: Add __counted_by for struct afs_acl and use struct_size() (Marc Dionne) [RHEL-78217]
  - afs: move afs_xattr_handlers to .rodata (Marc Dionne) [RHEL-78217]
  - afs: Annotate struct afs_permits with __counted_by (Marc Dionne) [RHEL-78217]
  - afs: convert to ctime accessor functions (Marc Dionne) [RHEL-78217]
  - afs: Don't use folio->private to record partial modification (Marc Dionne) [RHEL-78217]
  - afs: Remove whitespace before most ')' from the trace header (Marc Dionne) [RHEL-78217]
  - firmware: psci: Fix return value from psci_system_suspend() (Jared Kangas) [RHEL-78060]
  - libperf cpumap: Grow array of read CPUs in smaller increments (Michael Petlan) [RHEL-71187]
  - libperf cpumap: Remove perf_cpu_map__read() (Michael Petlan) [RHEL-71187]
  - libperf cpumap: Remove use of perf_cpu_map__read() (Michael Petlan) [RHEL-71187]
  - perf pmu: Remove use of perf_cpu_map__read() (Michael Petlan) [RHEL-71187]
  - libperf cpumap: Be tolerant of newline at the end of a cpumask (Michael Petlan) [RHEL-71187]
  - libperf cpumap: Hide/reduce scope of MAX_NR_CPUS (Michael Petlan) [RHEL-71187]
  - perf cpumap: Reduce transitive dependencies on libperf MAX_NR_CPUS (Michael Petlan) [RHEL-71187]
  - perf: Increase MAX_NR_CPUS to 4096 (Michael Petlan) [RHEL-71187]
  - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-74147]
  - dev: Acquire netdev_rename_lock before restoring dev->name in dev_change_name(). (Toke Høiland-Jørgensen) [RHEL-77329]
  - Enable CONFIG_INTEL_MEI_PXP and CONFIG_DRM_I915_PXP on rhel (David Arcari) [RHEL-77170]
  - redhat/configs: disable CONFIG_INTEL_MEI_VSC_HW (David Arcari) [RHEL-77170]
  - mei: vsc: Fix typo "maintstepping" -> "mainstepping" (David Arcari) [RHEL-77170]
  - mei: vsc: Improve error logging in vsc_identify_silicon() (David Arcari) [RHEL-77170]
  - mei: vsc: Do not re-enable interrupt from vsc_tp_reset() (David Arcari) [RHEL-77170]
  - mei: clean pending read with vtag on bus (David Arcari) [RHEL-77170]
  - mei: use kvmalloc for read buffer (David Arcari) [RHEL-77170]
  - mei: bus: Reorganize kerneldoc parameter names (David Arcari) [RHEL-77170]
  - finally take no_llseek out [partial] (David Arcari) [RHEL-77170]
  - mei: vsc: Fix spelling error (David Arcari) [RHEL-77170]
  - mei: vsc: Enhance SPI transfer of IVSC ROM (David Arcari) [RHEL-77170]
  - mei: vsc: Utilize the appropriate byte order swap function (David Arcari) [RHEL-77170]
  - mei: vsc: Prevent timeout error with added delay post-firmware download (David Arcari) [RHEL-77170]
  - mei: vsc: Enhance IVSC chipset stability during warm reboot (David Arcari) [RHEL-77170]
  - mei: bus-fixup: set timeout for MKHI send operations (David Arcari) [RHEL-77170]
  - mei: vsc: Fix wrong invocation of ACPI SID method (David Arcari) [RHEL-77170]
  - mei: vsc: Don't stop/restart mei device during system suspend/resume (David Arcari) [RHEL-77170]
  - mei: me: release irq in mei_me_pci_resume error path (David Arcari) [RHEL-77170]
  - mei: demote client disconnect warning on suspend to debug (David Arcari) [RHEL-77170]
  - mei: pxp: match against PCI_CLASS_DISPLAY_OTHER (David Arcari) [RHEL-77170]
  - mei: bus: constify the struct mei_cl_bus_type usage (David Arcari) [RHEL-77170]
  - mei: vsc: Unregister interrupt handler for system suspend (David Arcari) [RHEL-77170]
  - Revert "mei: vsc: Call wake_up() in the threaded IRQ handler" (David Arcari) [RHEL-77170]
  - mei: Avoid a bunch of -Wflex-array-member-not-at-end warnings (David Arcari) [RHEL-77170]
  - mei: gsc_proxy: match component when GSC is on different bus (David Arcari) [RHEL-77170]
  - mei: vsc: Convert to platform remove callback returning void (David Arcari) [RHEL-77170]
  - mei: vsc: Assign pinfo fields in variable declaration (David Arcari) [RHEL-77170]
  - mei: vsc: Don't use sleeping condition in wait_event_timeout() (David Arcari) [RHEL-77170]
  - mei: vsc: Call wake_up() in the threaded IRQ handler (David Arcari) [RHEL-77170]
  - mei: me: remove unnecessary NULL pointer checks (David Arcari) [RHEL-77170]
  - mei: txe: remove unnecessary NULL pointer checks (David Arcari) [RHEL-77170]
  - mei: gsc: remove unnecessary NULL pointer checks (David Arcari) [RHEL-77170]
  - mei: Add Meteor Lake support for IVSC device (David Arcari) [RHEL-77170]
  - mei: pxp: add dependency on Xe driver (David Arcari) [RHEL-77170]
  - mei: hdcp: add dependency on Xe driver (David Arcari) [RHEL-77170]
  - mei: pxp: match without driver name (David Arcari) [RHEL-77170]
  - mei: hdcp: match without driver name (David Arcari) [RHEL-77170]
  - mei: gsc: add support for auxiliary device created by Xe driver (David Arcari) [RHEL-77170]
  - mei: rework Kconfig dependencies (David Arcari) [RHEL-77170]
  - mei: fix vsc dependency (David Arcari) [RHEL-77170]
  - mei: vsc: Rework firmware image names (David Arcari) [RHEL-77170]
  - mei: pxp: spdx should be at first line (David Arcari) [RHEL-77170]
  - mei: Add MEI hardware support for IVSC device (David Arcari) [RHEL-77170]
  - mei: Add transport driver for IVSC device (David Arcari) [RHEL-77170]
  - misc: mei: client.c: fix problem of return '-EOVERFLOW' in mei_cl_write (David Arcari) [RHEL-77170]
  - misc: mei: client.c: return negative error code in mei_cl_write (David Arcari) [RHEL-77170]
  - mei: pxp: fix mei_pxp_send_message return value (David Arcari) [RHEL-77170]
  - mei: me: emit error only if reset was unexpected (David Arcari) [RHEL-77170]
  - misc: mei: main.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: interrupt.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: hw-me.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: hbm.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: dma-ring.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: client.c: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - misc: mei: hw.h: fix kernel-doc warnings (David Arcari) [RHEL-77170]
  - mei: update mei-pxp's component interface with timeouts [partial] (David Arcari) [RHEL-77170]
  - mei: pxp: re-enable client on errors (David Arcari) [RHEL-77170]
  - mei: pxp: recover from recv fail under memory pressure (David Arcari) [RHEL-77170]
  - mei: bus: add send and recv api with timeout (David Arcari) [RHEL-77170]
  - mei: docs: fix spelling errors (David Arcari) [RHEL-77170]
  - mei: docs: add missing entries to kdoc in struct mei_cfg_idx (David Arcari) [RHEL-77170]
  - mei: docs: use correct structures name in kdoc (David Arcari) [RHEL-77170]
  - mei: make mei_class a static const structure (David Arcari) [RHEL-77170]
  - mei: gsc: add module description (David Arcari) [RHEL-77170]
  - mei: pxp: Keep a const qualifier when calling mei_cldev_send() (David Arcari) [RHEL-77170]
  - mei: obtain firmware version only on gsc. (David Arcari) [RHEL-77170]
  - mei: bus: enable asynchronous suspend. (David Arcari) [RHEL-77170]
  - mei: log firmware status on hw_start failure. (David Arcari) [RHEL-77170]
  - drm/i915/hdcp: Move away from master naming to arbiter [partial] (David Arcari) [RHEL-77170]
  - mei: bus-fixup: fix buffer type (David Arcari) [RHEL-77170]
  - mei: bus: drop useless cldev null check (David Arcari) [RHEL-77170]
  - virt: acrn: Mark the uuid field as unused (David Arcari) [RHEL-77170]
  - mei: Move uuid.h to the MEI namespace (David Arcari) [RHEL-77170]
  - drm/i915/hdcp: Refactor HDCP API structures [partial] (David Arcari) [RHEL-77170]
  - uuid: remove licence boilerplate text from the header (David Arcari) [RHEL-77170]
  - drm/i915/hdcp: Use generic names for HDCP helpers and structs [partial] (David Arcari) [RHEL-77170]
  - mei: lower the log level for non-fatal failed messages (David Arcari) [RHEL-77170]
  - mei: bus: disallow driver match while dismantling device (David Arcari) [RHEL-77170]
  - mei: Move uuid_le_cmp() to its only user (David Arcari) [RHEL-77170]
  - uuid: Decouple guid_t and uuid_le types and respective macros (David Arcari) [RHEL-77170]
  - uuid: discourage people from using UAPI header in new code (David Arcari) [RHEL-77170]
  - mei: mei-me: resume device in prepare (David Arcari) [RHEL-77170]
  - mei: gsc: Remove redundant dev_err call (David Arcari) [RHEL-77170]
  - mei: fix repeated words in comments (David Arcari) [RHEL-77170]
  - misc: move from strlcpy with unused retval to strscpy [partial] (David Arcari) [RHEL-77170]
  - sunrpc: simplify one-level sysctl registration for xs_tunables_table (Benjamin Coddington) [RHEL-73723]
  - sunrpc: simplify one-level sysctl registration for xr_tunables_table (Benjamin Coddington) [RHEL-73723]
  - sunrpc: move sunrpc_table and proc routines above (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: Silence compiler complaints about tautological comparisons (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: Revert e0a912e8ddba (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: Remove unused declarations (Benjamin Coddington) [RHEL-73723]
  - sunrpc: Remove unused extern declarations (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: change svc_xprt::xpt_flags bits to enum (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: Remove unused declaration rpc_modcount() (Benjamin Coddington) [RHEL-73723]
  - lockd: define nlm_port_min,max with CONFIG_SYSCTL (Benjamin Coddington) [RHEL-73723]
  - nfs/blocklayout: Limit repeat device registration on failure (Benjamin Coddington) [RHEL-73723]
  - nfs/blocklayout: Don't attempt unregister for invalid block device (Benjamin Coddington) [RHEL-73723]
  - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket (Benjamin Coddington) [RHEL-73723]
  - nfsd: fix refcount leak when file is unhashed after being found (Benjamin Coddington) [RHEL-73723]
  - net: initialize net->notrefcnt_tracker earlier (Benjamin Coddington) [RHEL-73723]
  - mptcp: fix tracking issue in mptcp_subflow_create_socket() (Benjamin Coddington) [RHEL-73723]
  - net: add a refcount tracker for kernel sockets (Benjamin Coddington) [RHEL-73723]
  - NFSD: Fix nfsd4_shutdown_copy() (Benjamin Coddington) [RHEL-73723]
  - svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() (Benjamin Coddington) [RHEL-73723]
  - nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work" (Benjamin Coddington) [RHEL-73723]
  - nfsd: release svc_expkey/svc_export with rcu_work (Benjamin Coddington) [RHEL-73723]
  - NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir() (Benjamin Coddington) [RHEL-73723]
  - nfsd: restore callback functionality for NFSv4.0 (Benjamin Coddington) [RHEL-73723]
  - NFSD: Prevent NULL dereference in nfsd4_process_cb_update() (Benjamin Coddington) [RHEL-73723]
  - NFSD: Remove a never-true comparison (Benjamin Coddington) [RHEL-73723]
  - Revert "nfs: don't reuse partially completed requests in nfs_lock_and_join_requests" (Benjamin Coddington) [RHEL-73723]
  - nfsd: drop inode parameter from nfsd4_change_attribute() (Benjamin Coddington) [RHEL-73723]
  - svcrdma: Address an integer overflow (Benjamin Coddington) [RHEL-73723]
  - nfs: avoid i_lock contention in nfs_clear_invalid_mapping (Benjamin Coddington) [RHEL-73723]
  - nfs: Fix KMSAN warning in decode_getfattr_attrs() (Benjamin Coddington) [RHEL-73723]
  - NFSv3: only use NFS timeout for MOUNT when protocols are compatible (Benjamin Coddington) [RHEL-73723]
  - sunrpc: handle -ENOTCONN in xs_tcp_setup_socket() (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: Fix integer overflow in decode_rc_list() (Benjamin Coddington) [RHEL-73723]
  - SUNRPC: clnt.c: Remove misleading comment (Benjamin Coddington) [RHEL-73723]
  - nfs: fix memory leak in error path of nfs4_do_reclaim (Benjamin Coddington) [RHEL-73723]
  - nfsd: nfsd_destroy_serv() must call svc_destroy() even if nfsd_startup_net() failed (Benjamin Coddington) [RHEL-73723]
  - NFSD: Mark filecache "down" if init fails (Benjamin Coddington) [RHEL-73723]
  - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Benjamin Coddington) [RHEL-73723]
  - NFSD: Fix NFSv4's PUTPUBFH operation (Benjamin Coddington) [RHEL-73723]
  - nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire (Benjamin Coddington) [RHEL-73723]
  - Revert "net/tls: fix tls_sk_proto_close executed repeatedly" (Benjamin Coddington) [RHEL-73723]
  - net/tls: fix tls_sk_proto_close executed repeatedly (Benjamin Coddington) [RHEL-73723]
  - hugetlb: prioritize surplus allocation from current node (Aristeu Rozanski) [RHEL-68966]
  - net: tun: call napi_schedule_prep() to ensure we own a napi (Jared Kangas) [RHEL-76236]
  - net: tun: Fix memory leaks of napi_get_frags (Jared Kangas) [RHEL-76236]
  - virtio-net: fix overflow inside virtnet_rq_alloc (Jon Maloy) [RHEL-73638] {CVE-2024-57843}
  - RDMA/uverbs: Prevent integer overflow issue (CKI Backport Bot) [RHEL-74224] {CVE-2024-57890}
  - EDAC/igen6: Add Intel Arrow Lake-U/H SoCs support (Joel Savitz) [RHEL-33317 RHEL-52289]
  - EDAC/bluefield: Fix potential integer overflow (Aristeu Rozanski) [RHEL-72108] {CVE-2024-53161}
  - virtio/vsock: Improve MSG_ZEROCOPY error handling (Jon Maloy) [RHEL-69661] {CVE-2024-53117}
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68028] {CVE-2024-50264}
  - powerpc/boot: Fix incorrect version calculation issue in ld_version (Waiman Long) [RHEL-68367]
  - powerpc: suppress some linker warnings in recent linker versions (Waiman Long) [RHEL-68367]
  - Makefile: link with -z noexecstack --no-warn-rwx-segments (Waiman Long) [RHEL-68367]
  - fs: Fix file_set_fowner LSM hook inconsistencies (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add layout1.refer_mount_root (Ryan Sullivan) [RHEL-8810]
  - fs/ioctl: Add a comment to keep the logic in sync with LSM policies (Ryan Sullivan) [RHEL-8810]
  - landlock: Document IOCTL support (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Add support for LANDLOCK_ACCESS_FS_IOCTL_DEV (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Exhaustive test for the IOCTL allow-list (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Check IOCTL restrictions for named UNIX domain sockets (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test IOCTLs on named pipes (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test ioctl(2) and ftruncate(2) with open(O_PATH) (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test IOCTL with memfds (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test IOCTL support (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add cred_transfer test (Ryan Sullivan) [RHEL-8810]
  - landlock: Don't lose track of restrictions on cred_transfer (Ryan Sullivan) [RHEL-8810]
  - Enable CONFIG_SECURITY_LANDLOCK for RHEL (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Handle TEST_F()'s explicit exit codes (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Fix tests timeout and race condition (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Fix vfork() side effects (Ryan Sullivan) [RHEL-8810]
  - selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Fix port parsing in sandboxer (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix d_parent walk (Ryan Sullivan) [RHEL-8810]
  - hostfs: fix dev_t handling (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Fix fixture teardown (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Fix interleaved scheduling leading to race conditions (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Prevent infinite loop due to Assert in FIXTURE_TEARDOWN (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Share _metadata between forked processes (Ryan Sullivan) [RHEL-8810]
  - landlock: Add IOCTL access right for character and block devices (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Fix incorrect free in populate_ruleset_net (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Do not allocate memory in fixture data (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix FS tests when run on a private mount point (Ryan Sullivan) [RHEL-8810]
  - fs: Return ENOTTY directly if FS_IOC_GETUUID or FS_IOC_GETFSSYSFSPATH fail (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Don't error out if a file path cannot be opened (Ryan Sullivan) [RHEL-8810]
  - landlock: Use f_cred in security_file_open() hook (Ryan Sullivan) [RHEL-8810]
  - landlock: Rename "ptrace" files to "task" (Ryan Sullivan) [RHEL-8810]
  - landlock: Simplify current_check_access_socket() (Ryan Sullivan) [RHEL-8810]
  - landlock: Warn once if a Landlock action is requested while disabled (Ryan Sullivan) [RHEL-8810]
  - landlock: Extend documentation for kernel support (Ryan Sullivan) [RHEL-8810]
  - landlock: Add support for KUnit tests (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Clean up error logs related to capabilities (Ryan Sullivan) [RHEL-8810]
  - selftests/harness: Fix TEST_F()'s vfork handling (Ryan Sullivan) [RHEL-8810]
  - selftests: kselftest_harness: use exit code to store skip (Ryan Sullivan) [RHEL-8810]
  - selftests: kselftest_harness: save full exit code in metadata (Jakub Kicinski) [RHEL-8810]
  - selftests/harness: Merge TEST_F_FORK() into TEST_F() (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Redefine TEST_F() as TEST_F_FORK() (Ryan Sullivan) [RHEL-8810]
  - fs: add FS_IOC_GETFSSYSFSPATH (Ryan Sullivan) [RHEL-8810]
  - fs: super_set_uuid() (Ryan Sullivan) [RHEL-8810]
  - kernfs: attach uuid for every kernfs and report it in fsid (Ryan Sullivan) [RHEL-8810]
  - fs: FS_IOC_GETUUID (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix asymmetric private inodes referring (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix fs_test build with old libc (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix net_test build with old libc (Ryan Sullivan) [RHEL-8810]
  - landlock: Optimize the number of calls to get_access_mask slightly (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Rename "permitted" to "allowed" in ftruncate tests (Ryan Sullivan) [RHEL-8810]
  - landlock: Remove remaining "inline" modifiers in .c files [v6.6] (Ryan Sullivan) [RHEL-8810]
  - landlock: Remove remaining "inline" modifiers in .c files [v6.1] (Ryan Sullivan) [RHEL-8810]
  - landlock: Remove remaining "inline" modifiers in .c files [v5.15] (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests to check unhandled rule's access rights (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests to check unknown rule's access rights (Ryan Sullivan) [RHEL-8810]
  - lsm: new security_file_ioctl_compat() hook (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix capability for net_test (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests for FS topology changes with network rules (Ryan Sullivan) [RHEL-8810]
  - landlock: Document network support (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Support TCP restrictions (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add network tests (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Share enforce_ruleset() helper (Ryan Sullivan) [RHEL-8810]
  - landlock: Support network rules with TCP bind and connect (Ryan Sullivan) [RHEL-8810]
  - hostfs: Fix ephemeral inodes (Ryan Sullivan) [RHEL-8810]
  - landlock: Refactor landlock_add_rule() syscall (Ryan Sullivan) [RHEL-8810]
  - landlock: Refactor layer helpers (Ryan Sullivan) [RHEL-8810]
  - landlock: Move and rename layer helpers (Ryan Sullivan) [RHEL-8810]
  - landlock: Refactor merge/inherit_ruleset helpers (Ryan Sullivan) [RHEL-8810]
  - landlock: Refactor landlock_find_rule/insert_rule helpers (Ryan Sullivan) [RHEL-8810]
  - landlock: Allow FS topology changes for domains without such rule type (Ryan Sullivan) [RHEL-8810]
  - landlock: Make ruleset's access masks more generic (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix a resource leak (Ryan Sullivan) [RHEL-8810]
  - landlock: Annotate struct landlock_rule with __counted_by (Ryan Sullivan) [RHEL-8810]
  - security: Create file_truncate hook from path_truncate hook (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add hostfs tests (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests for pseudo filesystems (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Make mounts configurable (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add supports_filesystem() helper (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Don't create useless file layouts (Ryan Sullivan) [RHEL-8810]
  - landlock: Clarify documentation for the LANDLOCK_ACCESS_FS_REFER right (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test ptrace as much as possible with Yama (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Skip overlayfs tests when not supported (Ryan Sullivan) [RHEL-8810]
  - landlock: Explain file descriptor access rights (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Document best-effort approach for LANDLOCK_ACCESS_FS_REFER (Ryan Sullivan) [RHEL-8810]
  - landlock: Document Landlock's file truncation support (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Extend sample tool to support LANDLOCK_ACCESS_FS_TRUNCATE (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test ftruncate on FDs created by memfd_create(2) (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test FD passing from restricted to unrestricted processes (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Locally define __maybe_unused (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test open() and ftruncate() in multiple scenarios (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test file truncation support (Ryan Sullivan) [RHEL-8810]
  - landlock: Support file truncation (Ryan Sullivan) [RHEL-8810]
  - landlock: Document init_layer_masks() helper (Ryan Sullivan) [RHEL-8810]
  - landlock: Refactor check_access_path_dual() into is_access_to_paths_allowed() (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix documentation style (Ryan Sullivan) [RHEL-8810]
  - landlock: Slightly improve documentation and fix spelling (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Print hints about ABI versions (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fix out-of-tree builds (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix file reparenting without explicit LANDLOCK_ACCESS_FS_REFER (Ryan Sullivan) [RHEL-8810]
  - landlock: Explain how to support Landlock (Ryan Sullivan) [RHEL-8810]
  - landlock: Add design choices documentation for filesystem access rights (Ryan Sullivan) [RHEL-8810]
  - landlock: Document good practices about filesystem policies (Ryan Sullivan) [RHEL-8810]
  - landlock: Document LANDLOCK_ACCESS_FS_REFER and ABI versioning (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Add support for file reparenting (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add 11 new test suites dedicated to file reparenting (Ryan Sullivan) [RHEL-8810]
  - landlock: Add support for file reparenting with LANDLOCK_ACCESS_FS_REFER (Ryan Sullivan) [RHEL-8810]
  - landlock: Move filesystem helpers and add a new one (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix same-layer rule unions (Ryan Sullivan) [RHEL-8810]
  - landlock: Create find_rule() from unmask_layers() (Ryan Sullivan) [RHEL-8810]
  - landlock: Reduce the maximum number of layers to 16 (Ryan Sullivan) [RHEL-8810]
  - landlock: Define access_mask_t to enforce a consistent access mask size (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Test landlock_create_ruleset(2) argument check ordering (Ryan Sullivan) [RHEL-8810]
  - landlock: Change landlock_restrict_self(2) check ordering (Ryan Sullivan) [RHEL-8810]
  - landlock: Change landlock_add_rule(2) argument check ordering (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests for O_PATH (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Fully test file rename with "remove" access (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Extend access right tests to directories (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add tests for unknown access rights (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Extend tests for minimal valid attribute size (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Make tests build with old libc (Ryan Sullivan) [RHEL-8810]
  - landlock: Fix landlock_add_rule(2) documentation (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Format with clang-format (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Add clang-format exceptions (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Format with clang-format (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Normalize array assignment (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: Add clang-format exceptions (Ryan Sullivan) [RHEL-8810]
  - landlock: Add clang-format exceptions (Ryan Sullivan) [RHEL-8810]
  - fs: fix an infinite loop in iomap_fiemap (Ryan Sullivan) [RHEL-8810]
  - landlock: Use square brackets around "landlock-ruleset" (Ryan Sullivan) [RHEL-8810]
  - samples/landlock: Fix path_list memory leak (Ryan Sullivan) [RHEL-8810]
  - fs/ioctl: remove unnecessary __user annotation (Ryan Sullivan) [RHEL-8810]
  - selftests/landlock: remove ARRAY_SIZE define from common.h (Ryan Sullivan) [RHEL-8810]
  - fs: forbid invalid project ID (Ryan Sullivan) [RHEL-8810]
  - fs: remove generic_block_fiemap (Ryan Sullivan) [RHEL-8810]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-569.el9]
changelog:
  - scsi: ufs: core: Store min and max clk freq from OPP table (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Cancel RTC work during ufshcd_remove() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Fix the build for the old ARM OABI (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Improve ufshcd_mcq_sq_cleanup() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Start the RTC update work later (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix another deadlock during RTC update (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Requeue aborted request (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix the issue of ICU failure (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove ufshcd_urgent_bkops() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Move UFS trace events to private header (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Add HCI capabilities sysfs group (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Prepare to add HCI capabilities sysfs (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Support Updating UIC Command Timeout (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add a quirk for handling broken LSDBS field in controller capabilities register (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Do not set link to OFF state while waking up from hibernation (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix deadlock during RTC update (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Bypass quick recovery if force reset is needed (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Check LSDBS cap when !mcq (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add UFSHCD_QUIRK_KEYS_IN_PRDT (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add fill_crypto_prdt variant op (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add UFSHCD_QUIRK_BROKEN_CRYPTO_ENABLE (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: fold ufshcd_clear_keyslot() into its caller (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add UFSHCD_QUIRK_CUSTOM_CRYPTO_PROFILE (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Make .get_hba_mac() optional (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Inline ufshcd_mcq_vops_get_hba_mac() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Move the ufshcd_mcq_enable() call (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Move the "hba->mcq_enabled = true" assignment (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Inline is_mcq_enabled() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Initialize hba->reserved_slot earlier (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Rename the MASK_TRANSFER_REQUESTS_SLOTS constant (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove two constants (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Initialize struct uic_command once (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Declare functions once (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove SCSI host only if added (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Suspend clk scaling on no request (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Prevent no I/O queue case for MCQ (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Convert MCQ_CFG_n to an inline function (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Fix missing argument 'hba' in MCQ_OPR_OFFSET_n (Radu Rendec) [RHEL-79078]
  - scsi: ufs: sysfs: Make max_number_of_rtt read-write (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Maximum RTT supported by the host driver (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Allow RTT negotiation (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix ufshcd_abort_one racing issue (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix ufshcd_clear_cmd racing issue (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Free memory allocated for model before reinit (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Quiesce request queues before checking pending cmds (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Fix error output and clean up ufshcd_mcq_abort() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: mcq: Fix ufshcd_mcq_sqe_search() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Changing the status to check inflight (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Remove support for old UFSHCI versions (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove unnecessary wmb() prior to writing run/stop regs (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove unnecessary wmb() after ringing doorbell (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Perform read back after disabling interrupts (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Perform read back after writing UTP_TASK_REQ_LIST_BASE_H (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Drop driver owner initialization (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Reuse compose_devman_upiu (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Reuse compose_dev_cmd (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Reuse exec_dev_cmd (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Reuse device management locking code (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix MCQ mode dev command timeout (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: WLUN suspend dev/link state error recovery (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix MCQ MAC configuration (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Remove unused parameters (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Use ufshcd_mcq_req_to_hwq() to simplify updating hwq (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Add definition for REG_UFS_MEM_CFG register (Radu Rendec) [RHEL-79078]
  - scsi: ufs: ufs-mediatek: Migrate to UFSHCD generic CPU latency PM QoS support (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add CPU latency QoS support for UFS driver (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Uninitialized variable in ufshcd_devfreq_target() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove the ufshcd_release() in ufshcd_err_handling_prepare() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix shift issue in ufshcd_clear_cmd() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove the ufshcd_hba_exit() call from ufshcd_async_scan() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Simplify power management during async scan (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Simplify ufshcd_auto_hibern8_update() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Rename ufshcd_auto_hibern8_enable() and make it static (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add sysfs node for UFS RTC update (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add UFS RTC support (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add ufshcd_is_ufs_dev_busy() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Warn if the request tag is truncated (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Make fault injection dynamically configurable per HBA (Radu Rendec) [RHEL-79078]
  - scsi: ufs: ufs-sysfs: Expose UFS power info (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Let the sq_lock protect sq_tail_slot access (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Clear cmd if abort succeeds in MCQ mode (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix racing issue between ufshcd_mcq_abort() and ISR (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Expand MCQ queue slot to DeviceQueueDepth + 1 (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Leave space for '\0' in utf8 desc string (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Conversion to bool not necessary (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix race between force complete and ISR (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove dev cmd clock scaling busy (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: WLUN send SSU timeout recovery (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Set the Command Priority (CP) flag for RT requests (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Simplify ufshcd_comp_scsi_upiu() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove request tag range checks (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Include the SCSI ID in UFS command tracing output (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Correct clear TM error log (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: No need to update UPIU.header.flags and lun in advanced RPMB handler (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add advanced RPMB support where UFSHCI 4.0 does not support EHS length in UTRD (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix the build for gcc 9 and before (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Simplify response header parsing (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Simplify transfer request header initialization (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Remove a member variable (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Simplify ufshcd_abort_all() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Remove a local variable from ufshcd_abort_all() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Improve type safety (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Simplify zero-initialization (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Minimize #include directives (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Rename a function argument (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Fix kernel-doc headers (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Document all return values (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Follow the kernel-doc syntax for documenting return values (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Fix residual handling (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove HPB support (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix some kernel-doc comments (Radu Rendec) [RHEL-79078]
  - scsi: ufs: ufs-mediatek: Add MCQ support for MTK platform (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Export symbols for MTK driver module (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Convert UPIU_HEADER_DWORD() into a function (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Fix the search/wrap around logic (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add support for qTimestamp attribute (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove unused function declaration (Radu Rendec) [RHEL-79078]
  - scsi: ufs: wb: Add explicit flush_threshold sysfs attribute (Radu Rendec) [RHEL-79078]
  - scsi: ufs: ufs-mediatek: Set UFSHCD_QUIRK_MCQ_BROKEN_RTC quirk (Radu Rendec) [RHEL-79078]
  - scsi: ufs: ufs-mediatek: Set UFSHCD_QUIRK_MCQ_BROKEN_INTR quirk (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add host quirk UFSHCD_QUIRK_MCQ_BROKEN_RTC (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add host quirk UFSHCD_QUIRK_MCQ_BROKEN_INTR (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove dedicated hwq for dev command (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: mcq: Fix the incorrect OCS value for the device command (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Combine ufshcd_mq_poll_cqe functions (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix ufshcd_inc_sq_tail() function bug (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Remove a ufshcd_add_command_trace() call (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Simplify driver shutdown (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Move ufshcd_wl_shutdown() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix handling of lrbp->cmd (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Increase the START STOP UNIT timeout from one to ten seconds (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add error handling for MCQ mode (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Use ufshcd_mcq_poll_cqe_lock() in MCQ mode (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Added ufshcd_mcq_abort() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Add support for cleaning up MCQ resources (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Add supporting functions for MCQ abort (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Update the ufshcd_clear_cmds() functionality (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Combine 32-bit command_desc_base_addr_lo/hi (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Replace all non-returning strlcpy() with strscpy() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Do not open code SZ_x (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Ungate the clock synchronously (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Declare ufshcd_{hold,release}() once (Radu Rendec) [RHEL-79078]
  - scsi: ufs: Conditionally enable the BLK_MQ_F_BLOCKING flag (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Return earlier if ufshcd_hba_init_crypto_capabilities() fails (Radu Rendec) [RHEL-79078]
  - scsi: ufs: hwmon: Constify pointers to hwmon_channel_info (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Change the module parameter macro of use_mcq_mode (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix MCQ nr_hw_queues (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Rename symbol sizeof_utp_transfer_cmd_desc() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Fix MCQ tag calculation (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Use pointer arithmetic in ufshcd_send_command() (Radu Rendec) [RHEL-79078]
  - scsi: ufs: mcq: Annotate ufshcd_inc_sq_tail() appropriately (Radu Rendec) [RHEL-79078]
  - scsi: core: Clean up struct ufs_saved_pwr_info (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Add trace event for MCQ (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Print trs for pending requests in MCQ mode (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Set the residual byte count (Radu Rendec) [RHEL-79078]
  - scsi: ufs: core: Disable the reset settle delay (Radu Rendec) [RHEL-79078]
  - scsi: mpi3mr: Avoid reply queue full condition (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Fix possible crash when setting up bsg fails (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Update driver version to 8.12.0.3.50 (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Handling of fault code for insufficient power (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Start controller indexing from 0 (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (Chandrakanth Patil) [RHEL-49780] {CVE-2024-57804}
  - scsi: mpi3mr: Synchronize access to ioctl data buffer (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Validate SAS port assignments (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Improve wait logic while controller transitions to READY state (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Update MPI Headers to revision 34 (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Use firmware-provided timestamp update interval (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Enhance the Enable Controller retry logic (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: A performance fix (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Update consumer index of reply queues after every 100 replies (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Return complete ioc_status for ioctl commands (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Avoid MAX_PAGE_ORDER WARNING for buffer allocations (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Add missing spin_lock_init() for mrioc->trigger_lock (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Prevent PCI writes from driver during PCI error recovery (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Support PCI Error Recovery callback handlers (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Correct a test in mpi3mr_sas_port_add() (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Add ioctl support for HDB (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: Trigger support (Chandrakanth Patil) [RHEL-49780]
  - scsi: mpi3mr: HDB allocation and posting for hardware and firmware buffers (Chandrakanth Patil) [RHEL-49780]
  - rpmsg: virtio: Free driver_override when rpmsg_remove() (Jared Kangas) [RHEL-78824]
  - rpmsg: virtio: Replace deprecated strncpy with strscpy/_pad (Jared Kangas) [RHEL-78824]
  - rpmsg: Replace deprecated strncpy with strscpy_pad (Jared Kangas) [RHEL-78824]
  - rpmsg: core: Replace deprecated strncpy with strscpy (Jared Kangas) [RHEL-78824]
  - rpmsg: glink: Release driver_override (Jared Kangas) [RHEL-78824]
  - rpmsg: ctrl: Add lock to rpmsg_ctrldev_remove (Jared Kangas) [RHEL-78824]
  - rpmsg: char: Add lock to avoid race when rpmsg device is released (Jared Kangas) [RHEL-78824]
  - rpmsg: char: Avoid double destroy of default endpoint (Jared Kangas) [RHEL-78824]
  - rpmsg: Fix possible refcount leak in rpmsg_register_device_override() (Jared Kangas) [RHEL-78824]
  - rpmsg: Strcpy is not safe, use strscpy_pad() instead (Jared Kangas) [RHEL-78824]
  - rpmsg: mtk_rpmsg: Fix circular locking dependency (Jared Kangas) [RHEL-78824]
  - rpmsg: char: Add mutex protection for rpmsg_eptdev_open() (Jared Kangas) [RHEL-78824]
  - rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge (Jared Kangas) [RHEL-78824]
  - rpmsg: use local 'dev' variable (Jared Kangas) [RHEL-78824]
  - rpmsg: Fix calling device_lock() on non-initialized device (Jared Kangas) [RHEL-78824]
  - rpmsg: virtio: Fix the unregistration of the device rpmsg_ctrl (Jared Kangas) [RHEL-78824]
  - rpmsg: virtio: Fix possible double free in rpmsg_virtio_add_ctrl_dev() (Jared Kangas) [RHEL-78824]
  - rpmsg: virtio: Fix possible double free in rpmsg_probe() (Jared Kangas) [RHEL-78824]
  - rpmsg: Fix parameter naming for announce_create/destroy ops (Jared Kangas) [RHEL-78824]
  - rpmsg: qcom_smd: Fix returning 0 if irq_of_parse_and_map() fails (Jared Kangas) [RHEL-78824]
  - rpmsg: qcom_smd: Fix irq_of_parse_and_map() return value (Jared Kangas) [RHEL-78824]
  - rpmsg: Fix kfree() of static memory on setting driver_override (Jared Kangas) [RHEL-78824]
  - rpmsg: Constify local variable in field store macro (Jared Kangas) [RHEL-78824]
  - clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context (Waiman Long) [RHEL-76143]
  - clocksource: Use pr_info() for "Checking clocksource synchronization" message (Waiman Long) [RHEL-76143]
  - clocksource: Make watchdog and suspend-timing multiplication overflow safe (Waiman Long) [RHEL-76143]
  - clocksource: Scale the watchdog read retries automatically (Waiman Long) [RHEL-76143]
  - clocksource: Skip watchdog check for large watchdog intervals (Waiman Long) [RHEL-76143]
  - torture: Enable clocksource watchdog with "tsc=watchdog" (Waiman Long) [RHEL-76143]
  - clocksource: Suspend the watchdog temporarily when high read latency detected (Waiman Long) [RHEL-76143]
  - clocksource: Loosen clocksource watchdog constraints (Waiman Long) [RHEL-76143]
  - clocksource: Replace cpumask_weight() with cpumask_empty() (Waiman Long) [RHEL-76143]
  - clocksource: Add a Kconfig option for WATCHDOG_MAX_SKEW (Waiman Long) [RHEL-76143]
  - vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (CKI Backport Bot) [RHEL-77211] {CVE-2025-21666}
  - net: atlantic: use irq_update_affinity_hint() (Izabela Bakollari) [RHEL-73855 RHEL-76480]
  - net: atlantic: convert comma to semicolon (Izabela Bakollari) [RHEL-73855]
  - net: atlantic: Avoid warning about potential string truncation (Izabela Bakollari) [RHEL-73855]
  - net: atlantic: use ethtool_sprintf (Izabela Bakollari) [RHEL-73855]
  - x86: bring back rep movsq for user access on CPUs without ERMS (Herton R. Krzesinski) [RHEL-74389]
  - x86/retpolines: Enable the default thunk warning only on relevant configs (Waiman Long) [RHEL-71467]
  - x86/vdso: Fix rethunk patching for vdso-image-{32,64}.o (Waiman Long) [RHEL-71467]
  - x86/retpoline: Ensure default return thunk isn't used at runtime (Waiman Long) [RHEL-71467]
  - objtool: Revert "skip non-text sections when adding return-thunk sites" (Waiman Long) [RHEL-71467]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-570.el9]
changelog:
  - rhel-9: gate on kernel-qe tests results not cki ones (Bruno Goncalves)
  - USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (CKI Backport Bot) [RHEL-78682] {CVE-2025-21689}
  - af_packet: do not call packet_read_pending() from tpacket_destruct_skb() (CKI Backport Bot) [RHEL-78307]
  - pmdomain: imx8mp-blk-ctrl: add missing loop break condition (CKI Backport Bot) [RHEL-77237] {CVE-2025-21668}
  - vsock/virtio: discard packets if the transport changes (CKI Backport Bot) [RHEL-77228] {CVE-2025-21669}
  - s390/mm/hugetlbfs: Add missing includes (Aristeu Rozanski) [RHEL-74362]
  - s390/mm: Add PTE_MARKER support for hugetlbfs mappings (Aristeu Rozanski) [RHEL-74362]
  - s390/mm: Introduce region-third and segment table swap entries (Aristeu Rozanski) [RHEL-74362]
  - s390/mm: Introduce region-third and segment table entry present bits (Aristeu Rozanski) [RHEL-74362]
  - s390/mm: Rearrange region-third and segment table entry SW bits (Aristeu Rozanski) [RHEL-74362]
  - s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception() (Aristeu Rozanski) [RHEL-74362]
  - s390/pgtable: Switch read and write softbits for puds (Aristeu Rozanski) [RHEL-74362]
  - mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a MM (CKI Backport Bot) [RHEL-75840] {CVE-2024-56611}
  - workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from !WQ_MEM_RECLAIM worker (Waiman Long) [RHEL-74107] {CVE-2024-57888}
  - ovl: Filter invalid inodes with missing lookup function (Miklos Szeredi) [RHEL-72307] {CVE-2024-56570}
  - pmdomain: imx93-blk-ctrl: correct remove path (CKI Backport Bot) [RHEL-70045] {CVE-2024-53134}
  - i2c: tegra: Do not mark ACPI devices as irq safe (Mark Salter) [RHEL-50601]
  - i2c: tegra: allow VI support to be compiled out (Mark Salter) [RHEL-50601]
  - i2c: tegra: allow DVC support to be compiled out (Mark Salter) [RHEL-50601]
  - i40e: fix race condition by adding filter's intermediate sync state (CKI Backport Bot) [RHEL-68274] {CVE-2024-53088}


author: Dan Radez <dradez@redhat.com> - 4.8.0-6
changelog:
  - adding workaround for https://bugzilla.redhat.com/show_bug.cgi?id=1914843
  - while we wait for upstream fix: https://github.com/pexpect/pexpect/issues/669


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-4
changelog:
  - Make the python-pip-wheel subpackage versioned (python3-pip-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-5
changelog:
  - Conflict with old Python versions that use the old unversioned wheel location
  - Resolves: rhbz#1982668


author: Miro Hrončok <mhroncok@redhat.com> - 0.6.0-8
changelog:
  - Subpackage python2-ptyprocess has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.7.1-3
changelog:
  - Subpackage python2-pysocks has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 5.4.1-6
changelog:
  - Remove some outdated Obsoletes and Provides,
    but keep providing python3-yaml and python3-PyYAML for users
  - Related: rhbz#1990421


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-20
changelog:
  - Add bcond macros (#2129060)
  - Fix db queries with carets (#2129468)
  - Remove spurious Python rpm module (#2135731)
  - Handle SELinux log messages (#2123719)
  - Add --nocompression to rpm2archive (#2150804)


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-25
changelog:
  - Followup on #2166383
  - Add compat scripts calling external find-debug, sepdebugcrcfix and debugedit
  - Add %__find_debuginfo macro


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-26
changelog:
  - Backport file handling code from rpm-4.19 to fix CVE-2021-35937,
    CVE-2021-35938 and CVE-2021-35939


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-27
changelog:
  - Fix short circuiting of version strings in expressions (RHEL-15688)
  - Fix description of whatconflicts in the man page (RHEL-6303)
  - Expose and document rpmdb --verifydb operation (RHEL-14591)
  - Fixes to the file handling backport


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-29
changelog:
  - Actually add --verifydb to the man page (RHEL-14591)
  - Don't warn about missing user/group on skipped files (RHEL-18037)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-30
changelog:
  - Don't segfault on missing priority tag (RHEL-35249)
  - Use unsigned integers for buildtime too for Y2K38 safety (RHEL-22602)
  - Rebuild against libimaevm.so.4 (RHEL-32505)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-31
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-22604)
  - Fix potential use of uninitialized pgp struct (RHEL-22605)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)
  - Add SourceLicense tag to spec syntax (RHEL-28798)
  - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-33
changelog:
  - Fix root relocation regression (RHEL-28967)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-35
changelog:
  - Fix %patch N applying Patch0 implicitly (RHEL-6294)
  - Issue deprecation warning for number-less %patch (RHEL-6294)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-37
changelog:
  - Allow parametric macros to opt out of option processing (RHEL-67161)
  - Report unsafe symlinks during installation as a specific case (RHEL-33393)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-38
changelog:
  - Add support for spec local file attributes and generators (RHEL-52772)
  - Store configurable digest(s) on packages in rpmdb (RHEL-35619)
  - Fix a hard link race condition in brp-strip (RHEL-74011)


author: Petr Lautrbach <plautrba@redhat.com> - 4.4.0-0.1.20201102git05e90ee
changelog:
  - Update to 05e90ee
  - Add /usr/bin/sechecker
  - Adapt to new libsepol filename transition structures
  - Rebuild with libsepol.so.2


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.3-1
changelog:
  - SETools 4.4.3 release
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Tomas Orsava <torsava@redhat.com> - 53.0.0-7
changelog:
  - Make the python-setuptools-wheel subpackage versioned (python3-setuptools-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Miro Hrončok <mhroncok@redhat.com> - 234-11
changelog:
  - Subpackage python2-systemd has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.25.10-3
changelog:
  - Drop redundant BuildRequires for nose
  - Instead of the mock backport, use unittest.mock from the standard library


author: Karolina Surma <ksurma@redhat.com> - 1.26.5-1
changelog:
  - Update to 1.26.5
  - Fix for CVE-2021-33503 Catastrophic backtracking in URL authority parser
  Resolves: rhbz#1972639


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.26.5-6
changelog:
  - Security fix for CVE-2024-37891
  - Backport upstream patch to fix TypeError for http connection if the PoolManager
  - is instantiated with server_hostname
  Resolves: RHEL-43172
  Resolves: RHEL-39285


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: Pavel Reichl <preichl@redhat.com> - 1:4.09-1
changelog:
  - Update to new upstream version
  - Add tmpfs quota support
  - Remove rhel-only patches that were merged upstream


author: Sumit Bose <sbose@redhat.com> - 0.17.0-8
changelog:
  - LDAP socket timeout, fix duplicated logs and new Samba command line options
    Resolves: rhbz#2038260
    Resolves: rhbz#2038268
    Resolves: rhbz#2028530


author: Sumit Bose <sbose@redhat.com>
changelog:
  - Use make macros https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - migrated to SPDX license
  - allow multiple names and _srv_ ad_server option
    Resolves: jira#RHEL-12112
  - fix ccache handling for leave operation
    Resolves: jira#RHEL-5104


author: Fedora Release Engineering <releng@fedoraproject.org> - 1:0.4-0.44.b46
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
  - Use standard make_build and make_install macros in spec file.


author: Jeff Makey <jeff@makey.net> - 1:0.4-0.46.b47
changelog:
  - New upstream release 0.4b47
  - Update main URL.
  - Drop dump-glibc_xattr patch, now applied upstream.
  - Drop documentation conversion from ISO-8859-1 to UTF-8, now applied upstream.
  - Print correct name of archive table of contents file (#1727392).


author: Josef Ridky <jridky@redhat.com> - 1:0.4-0.51.b47
changelog:
  - rename spec file to restore
  - add gating.yaml
  - changes between .47 and .51 had to be stripped due of wrong sync
    between centos and dist-git


author: systemd maintenance team <systemd-maint@redhat.com> - 252-27
changelog:
  - test: merge TEST-20-MAINPIDGAMES into TEST-07-PID1 (fixup) (RHEL-1086)
  - test: use the default nsec3-iterations value (RHEL-1086)
  - test: explicitly set nsec3-iterations to 0 (RHEL-1086)
  - core: mount namespaces: Remove auxiliary bind mounts directory after unit termination (RHEL-19483)
  - ci: deploy systemd man to GitHub Pages (RHEL-1086)
  - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-7026)
  - man: reorder the list of supported naming schemes (RHEL-7026)
  - tree-wide: fix return value handling of base64mem() (RHEL-16182)
  - Consolidate various TAKE_* into TAKE_GENERIC(), add TAKE_STRUCT() (RHEL-16182)
  - pcrphase: add $SYSTEMD_PCRPHASE_STUB_VERIFY env var for overriding stub check (RHEL-16182)
  - pcrphase: gracefully exit if TPM2 support is incomplete (RHEL-16182)
  - tpm2-util: split out code that derives "good" TPM2 banks into an strv from pcrphase and generalize it in tpm2-util.c (RHEL-16182)
  - tpm2-util: split out code that extends a PCR from pcrphase (RHEL-16182)
  - tpm2-util: optionally do HMAC in tpm2_extend_bytes() in case we process sensitive data (RHEL-16182)
  - cryptsetup: add tpm2-measure-pcr= and tpm2-measure-bank= crypttab options (RHEL-16182)
  - man: document the new crypttab measurement options (RHEL-16182)
  - gpt-auto-generator: automatically measure root/var volume keys into PCR 15 (RHEL-16182)
  - blkid-util: define enum for blkid_do_safeprobe() return values (RHEL-16182)
  - pcrphase: make tool more generic, reuse for measuring machine id/fs uuids (RHEL-16182)
  - units: measure /etc/machine-id into PCR 15 during early boot (RHEL-16182)
  - generators: optionally, measure file systems at boot (RHEL-16182)
  - tpm2: add common helper for checking if we are running on UKI with TPM measurements (RHEL-16182)
  - man: document new machine-id/fs measurement options (RHEL-16182)
  - test: add simple integration test for checking PCR extension works as it should (RHEL-16182)
  - update TODO (RHEL-16182)
  - cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (RHEL-16182)
  - boot: Simplify object erasure (RHEL-16182)
  - tree-wide: use CLEANUP_ERASE() at various places (RHEL-16182)
  - dlfcn: add new safe_dclose() helper (RHEL-16182)
  - tpm2: rename tpm2 alg id<->string functions (RHEL-16182)
  - tpm2: rename struct tpm2_context to Tpm2Context (RHEL-16182)
  - tpm2: use ref counter for Tpm2Context (RHEL-16182)
  - tpm2: use Tpm2Context* instead of ESYS_CONTEXT* (RHEL-16182)
  - tpm2: add Tpm2Handle with automatic cleanup (RHEL-16182)
  - tpm2: simplify tpm2_seal() blob creation (RHEL-16182)
  - tpm2: add salt to pin (RHEL-16182)
  - basic/macro: add macro to iterate variadic args (RHEL-16182)
  - test/test-macro: add tests for FOREACH_VA_ARGS() (RHEL-16182)
  - basic/bitfield: add bitfield operations (RHEL-16182)
  - test/test-bitfield: add tests for bitfield macros (RHEL-16182)
  - tpm2: add tpm2_get_policy_digest() (RHEL-16182)
  - tpm2: add TPM2_PCR_VALID() (RHEL-16182)
  - tpm2: add/rename functions to manage pcr selections (RHEL-16182)
  - test/test-tpm2: add tests for pcr selection functions (RHEL-16182)
  - tpm2: add tpm2_pcr_read() (RHEL-16182)
  - tpm2: move openssl-required ifdef code out of policy-building function (RHEL-16182)
  - tpm2: add tpm2_is_encryption_session() (RHEL-16182)
  - tpm2: move policy building out of policy session creation (RHEL-16182)
  - tpm2: add support for a trusted SRK (RHEL-16182)
  - tpm2: fix nits from PR #26185 (RHEL-16182)
  - tpm2: replace magic number (RHEL-16182)
  - tpm2: add tpm2_digest_*() functions (RHEL-16182)
  - tpm2: replace hash_pin() with tpm2_digest_*() functions (RHEL-16182)
  - tpm2: add tpm2_set_auth() (RHEL-16182)
  - tpm2: add tpm2_get_name() (RHEL-16182)
  - tpm2: rename pcr_values_size vars to n_pcr_values (RHEL-16182)
  - tpm2: add tpm2_policy_pcr() (RHEL-16182)
  - tpm2: add tpm2_policy_auth_value() (RHEL-16182)
  - tpm2: add tpm2_policy_authorize() (RHEL-16182)
  - tpm2: use tpm2_policy_authorize() (RHEL-16182)
  - tpm2: add tpm2_calculate_sealing_policy() (RHEL-16182)
  - tpm: remove external calls to dlopen_tpm2() (RHEL-16182)
  - tpm2: remove all extern tpm2-tss symbols (RHEL-16182)
  - tpm2: add tpm2_get_capability(), tpm2_cache_capabilities(), tpm2_capability_pcrs() (RHEL-16182)
  - tpm2: verify symmetric parms in tpm2_context_new() (RHEL-16182)
  - tpm2: replace _cleanup_tpm2_* macros with _cleanup_() (RHEL-16182)
  - tpm2-util: use compound initialization when allocating tpm2 objects (RHEL-16182)
  - tpm2: add tpm2_get_capability_handle(), tpm2_esys_handle_from_tpm_handle() (RHEL-16182)
  - tpm2: add tpm2_read_public() (RHEL-16182)
  - tpm2: add tpm2_get_legacy_template() and tpm2_get_srk_template() (RHEL-16182)
  - tpm2: add tpm2_load() (RHEL-16182)
  - tpm2: add tpm2_load_external() (RHEL-16182)
  - tpm2: move local vars in tpm2_seal() to point of use (RHEL-16182)
  - tpm2: replace magic number in hmac_sensitive initialization (RHEL-16182)
  - tpm2: add tpm2_create() (RHEL-16182)
  - tpm2: replace tpm2_capability_pcrs() macro with direct c->capaiblity_pcrs use (RHEL-16182)
  - basic/alloc-util: add greedy_realloc_append() (RHEL-16182)
  - tpm2: cache the TPM supported commands, add tpm2_supports_command() (RHEL-16182)
  - tpm2: cache TPM algorithms (RHEL-16182)
  - tpm2: add tpm2_persist_handle() (RHEL-16182)
  - tpm2: add tpm2_get_or_create_srk() (RHEL-16182)
  - tpm2: move local vars in tpm2_unseal() to point of use (RHEL-16182)
  - tpm2: remove tpm2_make_primary() (RHEL-16182)
  - tpm2: use CreatePrimary() to create primary keys instead of Create() (RHEL-16182)
  - cryptsetup: downgrade a bunch of log messages that to LOG_WARNING (RHEL-16182)
  - boot/measure: replace TPM PolicyPCR session with calculation (RHEL-16182)
  - core: imply DeviceAllow=/dev/tpmrm0 with LoadCredentialEncrypted (RHEL-16182)
  - added more test cases (RHEL-16182)
  - test: fixed negative checks in TEST-70-TPM2. Use in-line error handling rather than redirections. Follow up on #27020 (RHEL-16182)
  - systemd-cryptenroll: add string aliases for tpm2 PCRs Fixes #26697. RFE. (RHEL-16182)
  - cryptenroll: fix an assertion with weak passwords (RHEL-16182)
  - man/systemd-cryptenroll: update list of PCRs, link to uapi docs (RHEL-16182)
  - tpm2: add debug logging to functions converting hash or asym algs to/from strings or ids (RHEL-16182)
  - tpm2: add tpm2_hash_alg_to_size() (RHEL-16182)
  - tpm2: change tpm2_tpm*_pcr_selection_to_mask() to return mask (RHEL-16182)
  - tpm2: add more helper functions for managing TPML_PCR_SELECTION and TPMS_PCR_SELECTION (RHEL-16182)
  - tpm2: add Tpm2PCRValue struct and associated functions (RHEL-16182)
  - tpm2: move declared functions in header lower down (RHEL-16182)
  - tpm2: declare tpm2_log_debug_*() functions in tpm2_util.h (RHEL-16182)
  - tpm2: change tpm2_calculate_policy_pcr(), tpm2_calculate_sealing_policy() to use Tpm2PCRValue array (RHEL-16182)
  - tpm2: change tpm2_parse_pcr_argument() parameters to parse to Tpm2PCRValue array (RHEL-16182)
  - tpm2: add TPM2B_*_MAKE(), TPM2B_*_CHECK_SIZE() macros (RHEL-16182)
  - tpm2: add tpm2_pcr_read_missing_values() (RHEL-16182)
  - openssl: add openssl_pkey_from_pem() (RHEL-16182)
  - openssl: add rsa_pkey_new(), rsa_pkey_from_n_e(), rsa_pkey_to_n_e() (RHEL-16182)
  - openssl: add ecc_pkey_new(), ecc_pkey_from_curve_x_y(), ecc_pkey_to_curve_x_y() (RHEL-16182)
  - test: add DEFINE_HEX_PTR() helper function (RHEL-16182)
  - openssl: add test-openssl (RHEL-16182)
  - tpm2: add functions to convert TPM2B_PUBLIC to/from openssl pkey or PEM (RHEL-16182)
  - tpm2: move policy calculation out of tpm2_seal() (RHEL-16182)
  - man: update systemd-cryptenroll man page with details on --tpm2-pcrs format change (RHEL-16182)
  - tpm2: update TEST-70-TPM2 to test passing PCR value to systemd-cryptenroll (RHEL-16182)
  - tpm2: change *alg_to_* functions to use switch() (RHEL-16182)
  - tpm2: lowercase TPM2_PCR_VALUE[S]_VALID functions (RHEL-16182)
  - tpm2: move cast from lhs to rhs in uint16_t/int comparison (RHEL-16182)
  - tpm2: in validator functions, return false instead of assert failure (RHEL-16182)
  - tpm2: in tpm2_pcr_values_valid() use FOREACH_ARRAY() (RHEL-16182)
  - tpm2: use SIZE_MAX instead of strlen() for unhexmem() (RHEL-16182)
  - tpm2: put !isempty() check inside previous !isempty() check (RHEL-16182)
  - tpm2: simplify call to asprintf() (RHEL-16182)
  - tpm2: check pcr value hash != 0 before looking up hash algorithm name (RHEL-16182)
  - tpm2: use strempty() (RHEL-16182)
  - tpm2: split TPM2_PCR_VALUE_MAKE() over multiple lines (RHEL-16182)
  - tpm2: remove ret_ prefix from input/output params (RHEL-16182)
  - tpm2: use memcpy_safe() instead of memcpy() (RHEL-16182)
  - openssl: use new(char, size) instead of malloc(size) (RHEL-16182)
  - tpm2: use table for openssl<->tpm2 ecc curve id mappings (RHEL-16182)
  - tpm2: use switch() instead of if-else (RHEL-16182)
  - tpm2: make logging level consistent at debug for some functions (RHEL-16182)
  - tpm2: remove unnecessary void* cast (RHEL-16182)
  - tpm2: add tpm2_pcr_values_has_(any|all)_values() functions (RHEL-16182)
  - tpm2: wrap (7) in UINT32_C() (RHEL-16182)
  - cryptenroll: change man page example to remove leading 0x and lowercase hex (RHEL-16182)
  - openssl: add log_openssl_errors() (RHEL-16182)
  - openssl: add openssl_digest_size() (RHEL-16182)
  - openssl: add openssl_digest_many() (RHEL-16182)
  - openssl: replace openssl_hash() with openssl_digest() (RHEL-16182)
  - openssl: add openssl_hmac_many() (RHEL-16182)
  - openssl: add rsa_oaep_encrypt_bytes() (RHEL-16182)
  - openssl: add kdf_kb_hmac_derive() (RHEL-16182)
  - openssl: add openssl_cipher_many() (RHEL-16182)
  - openssl: add ecc_edch() (RHEL-16182)
  - openssl: add kdf_ss_derive() (RHEL-16182)
  - dlfcn-util: add static asserts ensuring our sym_xyz() func ptrs match the types from the official headers (RHEL-16182)
  - tpm2: add tpm2_marshal_blob() and tpm2_unmarshal_blob() (RHEL-16182)
  - tpm2: add tpm2_serialize() and tpm2_deserialize() (RHEL-16182)
  - tpm2: add tpm2_index_to_handle() and tpm2_index_from_handle() (RHEL-16182)
  - tpm2: fix build failure without openssl (RHEL-16182)
  - tpm2-util: look for tpm2-pcr-signature.json directly in /.extra/ (RHEL-16182)
  - tpm2: downgrade most log functions from error to debug (RHEL-16182)
  - tpm2: handle older tpm enrollments without a saved pcr bank (RHEL-16182)
  - tpm2: allow tpm2_make_encryption_session() without bind key (RHEL-16182)
  - tpm2: update tpm2 test for supported commands (RHEL-16182)
  - tpm2: use GREEDY_REALLOC_APPEND() in tpm2_get_capability_handles(), cap max value (RHEL-16182)
  - tpm2: change tpm2_unseal() to accept Tpm2Context instead of device string (RHEL-16182)
  - tpm2: cache TPM's supported ECC curves (RHEL-16182)
  - tpm2-util: make tpm2_marshal_blob()/tpm2_unmarshal_blob() static (RHEL-16182)
  - tpm2-util: make tpm2_read_public() static, as we use it only internally in tpm2-util.c (RHEL-16182)
  - cryptenroll: allow specifying handle index of key to use for sealing (RHEL-16182)
  - test: add tests for systemd-cryptenroll --tpm2-seal-key-handle (RHEL-16182)
  - tpm2: do not call Esys_TR_Close() (RHEL-16182)
  - tpm2: don't use GetCapability() to check transient handles (RHEL-16182)
  - tpm2-util: pick up a few new symbols from tpm2-tss (RHEL-16182)
  - tpm2: add tpm2_get_pin_auth() (RHEL-16182)
  - tpm2: instead of adjusting authValue trailing 0(s), trim them as required by tpm spec (RHEL-16182)
  - tpm2-util: rename tpm2_calculate_name() → tpm2_calculate_pubkey_name() (RHEL-16182)
  - cryptenroll: do not implicitly verify with default tpm policy signature (RHEL-16182)
  - cryptenroll: drop deadcode (RHEL-16182)
  - tpm2: allow using tpm2_get_srk_template() without tpm (RHEL-16182)
  - tpm2: add test to verify srk templates (RHEL-16182)
  - tpm2: add tpm2_sym_alg_*_string() and tpm2_sym_mode_*_string() (RHEL-16182)
  - tpm2: add tpm2_calculate_seal() and helper functions (RHEL-16182)
  - tpm2: update test-tpm2 for tpm2_calculate_seal() (RHEL-16182)
  - cryptenroll: add support for calculated TPM2 enrollment (RHEL-16182)
  - test: update TEST-70 with systemd-cryptenroll calculated TPM2 enrollment (RHEL-16182)
  - openssl-util: avoid freeing invalid pointer (RHEL-16182)
  - creds-util: check for CAP_DAC_READ_SEARCH (RHEL-16182)
  - creds-util: do not try TPM2 if there is not support (RHEL-16182)
  - creds-util: merge the TPM2 detection for initrd (RHEL-16182)
  - cryptenroll: fix a memory leak (RHEL-16182)
  - sd-journal: introduce sd_journal_step_one() (RHEL-11591)
  - test: modernize test-journal-flush (RHEL-11591)
  - journal-file-util: do not fail when journal_file_set_offline() called more than once (RHEL-11591)
  - journal-file-util: Prefer punching holes instead of truncating (RHEL-11591)
  - test: add reproducer for SIGBUS issue caused by journal truncation (RHEL-11591)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-28
changelog:
  - random-seed: shorten a bit may_credit() (RHEL-16952)
  - random-seed: make one more use of random_write_entropy() (RHEL-16952)
  - random-seed: use getopt() (RHEL-16952)
  - random-seed: make the logic to calculate the number of bytes read from the random seed file clearer (RHEL-16952)
  - random-seed: no need to pass 'mode' argument when opening /dev/urandom (RHEL-16952)
  - random-seed: split out run() (RHEL-16952)
  - random_seed: minor improvement in run() (RHEL-16952)
  - random-seed: downgrade some messages (RHEL-16952)
  - random-seed: clarify one comment (RHEL-16952)
  - random-seed: make sure to load machine id even if the seed file is missing (RHEL-16952)
  - chase-symlinks: add new flag for prohibiting any following of symlinks (RHEL-16952)
  - bootctl,bootspec: make use of CHASE_PROHIBIT_SYMLINKS whenever we access the ESP/XBOOTLDR (RHEL-16952)
  - boot: implement kernel EFI RNG seed protocol with proper hashing (RHEL-16952)
  - random-seed: refresh EFI boot seed when writing a new seed (RHEL-16952)
  - random-seed: handle post-merge review nits (RHEL-16952)
  - boot: do not truncate random seed file (RHEL-16952)
  - bootctl: install system token on virtualized systems (RHEL-16952)
  - boot: remove random-seed-mode (RHEL-16952)
  - stub: handle random seed like sd-boot does (RHEL-16952)
  - efi: add efi_guid_equal() helper (RHEL-16952)
  - efi: add common implementation for loop finding EFI configuration tables (RHEL-16952)
  - boot: Detect hypervisors using SMBIOS info (RHEL-16952)
  - boot: Skip soft-brick warning when in a VM (RHEL-16952)
  - boot: Replace UINTN with size_t (RHEL-16952)
  - boot: Use unsigned for beep counting (RHEL-16952)
  - boot: Use unicode literals (RHEL-16952)
  - macro: add generic IS_ALIGNED32() anf friends (RHEL-16952)
  - meson: use 0|1 for SD_BOOT (RHEL-16952)
  - boot: Add printf functions (RHEL-16952)
  - boot: Use printf for error logging (RHEL-16952)
  - boot: Introduce log_wait (RHEL-16952)
  - boot: Add log_trace debugging helper (RHEL-16952)
  - tree-wide: Use __func__ in asserts (RHEL-16952)
  - boot: Drop use of xpool_print/SPrint (RHEL-16952)
  - boot: Drop use of Print (RHEL-16952)
  - boot: Rework GUID handling (RHEL-16952)
  - efi-string: Fix strchr() null byte handling (RHEL-16952)
  - efi-string: Add startswith8() (RHEL-16952)
  - efi-string: Add efi_memchr() (RHEL-16952)
  - vmm: Add more const (RHEL-16952)
  - vmm: Add smbios_find_oem_string() (RHEL-16952)
  - stub: Read extra kernel command line items from SMBIOS (RHEL-16952)
  - vmm: Modernize get_smbios_table() (RHEL-16952)
  - stub: measure SMBIOS kernel-cmdline-extra in PCR12 (RHEL-16952)
  - efi: support passing empty cmdline to mangle_stub_cmdline() (RHEL-16952)
  - efi: set EFIVAR to stop Shim from uninstalling its protocol (RHEL-16952)
  - ukify: use empty stub for addons (RHEL-16952)
  - stub: allow loading and verifying cmdline addons (RHEL-16952)
  - TODO: remove fixed item (RHEL-16952)
  - fix: do not check/verify slice units if recursive errors are to be ignored (RHEL-1086)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-30
changelog:
  - resolved: limit the number of signature validations in a transaction (RHEL-26643)
  - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26643)
  - efi: alignment of the PE file has to be at least 512 bytes (RHEL-26133)
  - units: change assert to condition to skip running in initrd/os (RHEL-16182)
  - ci: add configuration for regression sniffer GA (RHEL-1086)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-31
changelog:
  - bootctl: rework random seed logic to use open_mkdir_at() and openat() (RHEL-16952)
  - bootctl: properly sync fs before/after moving random seed file into place (RHEL-16952)
  - bootctl: when updating EFI random seed file, hash old seed with new one (RHEL-16952)
  - sha256: add helper than hashes a buffer *and* its size (RHEL-16952)
  - random-seed: don't refresh EFI random seed from random-seed.c anymore (RHEL-16952)
  - bootctl: downgrade graceful messages to LOG_NOTICE (RHEL-16952)
  - units: rename/rework systemd-boot-system-token.service → systemd-boot-random-seed.service (RHEL-16952)
  - bootctl: split out setting of system token into function of its own (RHEL-16952)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-33
changelog:
  - execute: Pass AT_FDCWD instead of -1 (RHEL-31783)
  - ci(src-git): update list of supported products (RHEL-30372)
  - coredump: by default process and store core files up to 1GiB (RHEL-15501)
  - coredump: keep core files for two weeks (RHEL-15501)
  - ukify: make the test happy with the latest OpenSSL (RHEL-30372)
  - test_ukify: use raw string for the regex (RHEL-30372)
  - coredump: generate stacktraces also for processes running in containers w/o coredump forwarding (RHEL-29430)
  - test: add a couple of tests for systemd-coredump (RHEL-29430)
  - test: don't expand the subshell expression prematurely (RHEL-29430)
  - coredump filter: fix stack overflow with =all (RHEL-29430)
  - coredump filter: add mask for 'all' using UINT32_MAX, not UINT64_MAX (RHEL-29430)
  - test: add coverage for CoredumpFilter=all (RHEL-29430)
  - test: rotate journal before storing coredumps (RHEL-29430)
  - test: sync with the fake binary before killing it (RHEL-29430)
  - test: check coredump handling in containers & namespaces (RHEL-29430)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-34
changelog:
  - ci: update actions/upload-artifact to v4 (RHEL-30372)
  - journal-remote: code is of type enum MHD_RequestTerminationCode (RHEL-30372)
  - resolve: dns_server_feature_level_*_string type is DnsServerFeatureLevel (RHEL-30372)
  - shared|install: Use InstallChangeType consistently (RHEL-30372)
  - test: temporarily disable coredumps in testsuite-17.03.sh (RHEL-30372)
  - ci: update manpage deployment workflow (RHEL-30372)
  - bootspec: fix null-dereference-read (RHEL-36284)
  - units: don't install pcrphase-related units without gnu-efi (RHEL-33384)
  - kernel-install: fix uki-copy deinstall (RHEL-36505)
  - ci(packit): explicitly clone `c9s` branch (RHEL-30372)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-37
changelog:
  - ci(src-git): add RHEL-9.1 and RHEL-9.1.z to allowed versions (RHEL-30372)
  - libsystemd: link with '-z nodelete' (RHEL-6589)
  - basic/utf8: make utf8_encoded_to_unichar() return length of the codepoint (RHEL-31219)
  - test-gunicode: add new test to show that unichar_iswide() is borked (RHEL-31219)
  - string-util: pass ANSI sequences through unchanged (RHEL-31219)
  - cryptsetup: do not assert when unsealing token without salt (RHEL-38864)
  - cryptsetup: check the existence of salt by salt_size > 0 (RHEL-38864)
  - core/mount: if umount(8) fails but mount disappeared, assume success (RHEL-13159)
  - Drop log level of header limits log message (RHEL-33890)
  - journal: do not rotate unrelated journal files when full or corrupted (RHEL-33890)
  - man: suffix --unit with an equal sign, since it expects an argument (RHEL-31070)
  - shared: move uid-alloc-range.[ch] from src/shared/ → src/basic/ (RHEL-31070)
  - journald: move uid_for_system_journal() to uid-alloc-range.h (RHEL-31070)
  - sd-journal: when SD_JOURNAL_CURRENT_USER is set, and called from system UID, imply SD_JOURNAL_SYSTEM (RHEL-31070)
  - man: document that journalctl --user requires Storage=persistent (RHEL-31070)
  - fix: prefix of dmesg pstore files (RHEL-20322)
  - backport new mkosi (RHEL-27512)
  - test: Skip various tests when /sys is not mounted (RHEL-27512)
  - string-util: introduce ascii_ishex() (RHEL-27512)
  - sd-id128: several cleanups (RHEL-27512)
  - sd-id128: make id128_read() or friends return -ENOPKG when the file contents is "uninitialized" (RHEL-27512)
  - test: add tests for "uninitialized" string handling by id128_read_fd() (RHEL-27512)
  - man: mention sd_id128_get_machine() or friend may return -ENOPKG (RHEL-27512)
  - sd-id128: make sd_id128_get_boot() and friend return -ENOMEDIUM (RHEL-27512)
  - sd-id128: make sd_id128_get_boot() and friend return -ENOSYS when /proc/ is not mounted (RHEL-27512)
  - man: mention that sd_id128_get_boot() and friend may return -ENOSYS (RHEL-27512)
  - sd-id128: fold do_sync flag into Id128FormatFlag (RHEL-27512)
  - sd-id128: make sd_id128_get_machine() or friends return -EUCLEAN when an ID is in an invalid format (RHEL-27512)
  - sd-id128: allow sd_id128_get_machine() and friend to be called with NULL (RHEL-27512)
  - sd-id128: also refuse an empty invocation ID (RHEL-27512)
  - man: update documents for sd_id128_get_invocation() (RHEL-27512)
  - test-id128: simplify machine-id check (RHEL-27512)
  - test-fs-util: skip part of test_chase_symlinks if machine-id is not initialized (RHEL-27512)
  - test-unit-name: simplify machine-id check (RHEL-27512)
  - test-load-fragment: simplify machine-id check (RHEL-27512)
  - journal: skip part of test-journal-interleaving if no machine-id exists (RHEL-27512)
  - test: skip journal tests without valid /etc/machine-id (RHEL-27512)
  - test-recurse-dir: work around nftw() ignoring symlinks() (RHEL-27512)
  - test: Skip test-recurse-dir on overlayfs (RHEL-27512)
  - test-specifier: Ignore -ENOPKG from specifier_printf() (RHEL-27512)
  - test-execute: Skip when /sys is read-only (RHEL-27512)
  - kernel-install: Make sure KERNEL_INSTALL_BYPASS is disabled in tests (RHEL-27512)
  - tools: make sure $KERNEL_INSTALL_BYPASS is disabled when checking help (RHEL-27512)
  - test-execute: drop capabilities when testing with user manager (RHEL-27512)
  - tmpfiles: Add merge support for copy files action (RHEL-27512)
  - generator: add generator_open_unit_file_full to allow creating temporary units (RHEL-27512)
  - network-generator: rewrite unit if it already exists and its content changed (RHEL-27512)
  - ci: drop super-linter's shellcheck (RHEL-27512)
  - mkosi: make sure we build & use RHEL 9 stuff (RHEL-27512)
  - ci: backport mkosi CI configuration from upstream (RHEL-27512)
  - mkosi: explicitly enroll SecureBoot keys (RHEL-27512)
  - test-execute: also mount tmpfs on /dev/shm (RHEL-27512)
  - mkosi: fix UKI addons test (RHEL-27512)
  - Revert "mkosi: Disable cmdline addon test for now" (RHEL-27512)
  - Revert "mkosi: Don't fail on systemd-vconsole-setup.service failure for now" (RHEL-27512)
  - mkosi: make shellcheck happy (RHEL-27512)
  - mkosi: use pesign for signing UKI addons (RHEL-27512)
  - test: copy out the necessary test data before we start overmounting stuff (RHEL-27512)
  - ci: make the build dir accessible when running w/o privileges (RHEL-27512)
  - ci: explicitly change oom-{score}-adj before running tests (RHEL-27512)
  - ratelimit: add ratelimit_left helper (RHEL-35703)
  - manager: restrict Dump*() to privileged callers or ratelimit (RHEL-35703)
  - ci: define `runas` function inline (RHEL-35703)
  - Drop /dev test in test-mountpoint-util (RHEL-30372)
  - core/manager: export manager_dbus_is_running (RHEL-40878)
  - core: refuse dbus activation if dbus is not running (RHEL-40878)
  - core: only refuse Type=dbus service enqueuing if dbus has stop job (RHEL-40878)
  - Revert "core/manager: export manager_dbus_is_running" and partially "core: refuse dbus activation if dbus is not running" (RHEL-40878)
  - manager: fix reloading in reload-or-restart --marked (RHEL-40878)
  - rpm: add `systemd_postun_with_reload` and `systemd_user_postun_with_reload` (RHEL-40878)
  - rpm: add `systemd_user_daemon_reexec` (RHEL-40878)


