# changelog

author: EL Errata <el-errata_ww@oracle.com> - 2.02-99.0.2
changelog:
  - Backport some better script logic for BTRFS support [Orabug: 32448171]
  - Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033]
  - Update Oracle SBAT data [Orabug: 32670033]
  - Use new signing certificate [Orabug: 32670033]
  - Fix various coverity issues [Orabug: 32530657]
  - Set proper blsdir if /boot is on btrfs rootfs [Orabug: 32063327]
  - Add CVE-2020-15706, CVE-2020-15707 to the list [Orabug: 31225072]
  - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497]
  - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597]
  - Update upstream references [Orabug: 26388226]
  - Copy symvers.gz to /boot during kernel install [Orabug: 29773086]
  - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955]
  - fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481]
  - Fix comparison in patch for 18504756
  - Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481]
  - Put "with" in menuentry instead of "using" [Orabug: 18504756]
  - Use different titles for UEK and RHCK kernels [Orabug: 18504756]


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-29
changelog:
  - grubby-bls: print the absolute kernel and initramfs images paths
    Resolves: rhbz#1649778
  - grubby-bls: make info print the root parameter if is present in cmdline
    Resolves: rhbz#1649791


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-31
changelog:
  - grubby-bls: allow to specify the same kernel param multiple times
    Resolves: rhbz#1652486
  - grubby-bls: expand kernel options if these are environment variables
    Resolves: rhbz#1649785
  - grubby-bls: always generate the BLS snippets when adding new entries
    Resolves: rhbz#1653365
  - Improve man page for --info option (jstodola)
    Resolves: rhbz#1651672


author: Livy Ge <livy.ge@oracle.com> - 8.40-34.0.1
changelog:
  - Do not strip /boot if it is not a mount point [Orabug: 29596113]
  - Handle cleanup of modules.* for RHCK and UEK [Orabug: 18493431]
  - Pick a suitable default kernel to boot if the current option is removed [Orabug: 22738301]
  - Set whatever entry before saved entry
  - Set different titles for RHCK and UEK [Orabug: 18504756] (Kevin Lyons)


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-37
changelog:
  - grubby-bls: unset default entry if is the one being removed
    Resolves: rhbz#1668329
  - grubby-bls: error if args or remove-args is used without update-kernel
    Related: rhbz#1690765
  - grubby-bls: make --update-kernel ALL to update kernelopts var in grubenv
    Resolves: rhbz#1690765
  - grubby-bls: fix --add-kernel not working when using the --args option
    Related: rhbz#1690765


author: Edward Leung <edward.leung@oracle.com> - 8.40-37.0.1
changelog:
  - Handle cleanup of modules.* for RHCK and UEK [Orabug: 18493431]
  - Pick a suitable default kernel to boot if the current option is removed [Orabug: 22738301]
  - Set whatever entry before saved entry
  - Set different titles for RHCK and UEK [Orabug: 18504756] (Kevin Lyons)


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-38
changelog:
  - grubby-bls: don't print rpm-sort error messages
    Resolves: rhbz#1731924
  - grubby-bls: remove -o option and support -c for ppc64le grub config
    Resolves: rhbz#1758598
  - grubby-bls: fix logic to check if the kernelopts var is defined in a BLS
    Resolves: rhbz#1726514
  - grubby-bls: don't update grubenv when generating grub.cfg for ppc64le
    Related: rhbz#1726514


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-39
changelog:
  - grubby-bls: strip only /boot from paths
    Resolves: rhbz#1738238
  - Make grubby to also update GRUB_CMDLINE_LINUX in /etc/default/grub
    Resolves: rhbz#1152027
  - grubby-bls: fix corner case when a kernel param value contains a '='
    Resolves: rhbz#1787584
  - grubby-bls: update man page to match options in current wrapper script
    Resolves: rhbz#1812065
  - grubby-bls: always escape the delimiter character used in sed commands
    Related: rhbz#1787584
  - grubby-bls: add a --no-etc-grub-update option
    Related: rhbz#1152027


author: EL Errata <el-errata_ww@oracle.com> - 8.40-47.0.1
changelog:
  - Do not add /boot twice for btrfs subvolumes [Orabug: 34380710]
  - Fix update of kernel options using add or remove args [Orabug: 34748051]
  - Also support "ueknano" as a possible kernel flavour [Orabug: 34420465]
  - Handle cleanup of modules.* for RHCK and UEK [Orabug: 18493431]
  - Pick a suitable default kernel to boot if the current option is removed [Orabug: 22738301]
  - Set whatever entry before saved entry
  - Set different titles for RHCK and UEK [Orabug: 18504756] (Kevin Lyons)


author: Jakub Martisko <jamartis@redhat.com> - 1.9-5
changelog:
  - Fix wrong skip size in gzexe
  - Add new test dealing with the ^^ (needs autoreconf)
  - Enable make check (needs less)
    Resolves: 1705413

   * Tue Aug 07 2018 Jakub Martisko <jamartis@redhat.com> - 1.9-4
   - Fix FTBFS bug (gnulib problems)
   - more details: https://lists.gnu.org/r/bug-gnulib/2018-03/msg00000.html
     Resolves 1611722


author: Petr Stodulka <pstodulk@redhat.com> - 1.7-1
changelog:
  - rebase to new upstream version 1.7
  - dropped all patches (almost all issues are fixed in new upstream version,
    sometimes in different way)
    - only patch gzip-1.3.12-openbsd-owl-tmp.patch is untested - code is changed
      significantly and patch is undocumented from archaic time, so I drop it too
    Resolves: #1321560


author: Jakub Martisko <jamartis@redhat.com> - 1.9-4
changelog:
  - Fix FTBFS bug (gnulib problems)
   - more details: https://lists.gnu.org/r/bug-gnulib/2018-03/msg00000.html
     Resolves 1611722


author: Francisco Javier Tsao Santín <tsao@gpul.org> - 1:1.3-1
changelog:
  - Patch by Todd Lewis that adds option -x to exclude files with pcre lib 
  - This patch solves RH Bugzilla ID's 955246 1322198


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 1:1.3-4
changelog:
  - remove manually added pcre2 requires (this is autogenerated)
  - removed BuildRoot, %defattr() and Group (new Fedora Packaging Guildline)
  - do not use straight gcc and add use %{__global_ldflags}
  - use %_licensedir is no longer needed
  - minor cleanups:
  -- reformat %description to 80 col
  -- added full URLs in Source fields
  -- more macros
  -- a bit simpler %prep


author: Michal Grzedzicki <mge@fb.com> - 9.54-4
changelog:
  - backport fix for --dco-identify real max sectors calculation from upstream version 9.62 (#1959918)


author: Michal Schmidt <mschmidt@redhat.com> - 1.11.8-3
changelog:
  - BuildRequire rdma-core-devel on s390(x).
  - Install the hwloc-dump-hwdata.service systemd service on x86/x86_64.


author: Michal Schmidt <mschmidt@redhat.com> - 1.11.9-1
changelog:
  - Update to 1.11.9.
  - BuildRequire gcc, gcc-c++. Drop Group tags.
  - BuildRequire numactl-devel on s390x too.


author: Jarod Wilson <jarod@redhat.com> 18.1-2
changelog:
  - Disable nes, mthca and ipath libibverbs providers, this
    old hardware is no longer supported, and fix disabling
    of cxgb3 and ocrdma


author: Jarod Wilson <jarod@redhat.com> - 19.1-1
changelog:
  - Update to v19.1 stable branch release
  - Fix SRQ support in libi40iw
  - Backport libqedr support for SRQ
  - Resolves: rhbz#1639692
  - Switch rxe_cfg from ifconfig to iproute2
  - Resolves: rhbz#1640637


author: Jarod Wilson <jarod@redhat.com> - 22-1
changelog:
  - Update to upstream v22 release for features and fixes
  - Include legacy ibdev2netdev helper script
  - Resolves: rhbz#1643904


author: Jarod Wilson <jarod@redhat.com> - 22.3-1
changelog:
  - Update to upstream v22.3 stable release for fixes
  - Enable support for Broadcom 57500 hardware
  - Enable support for Mellanox ConnectX-6 DX hardware
  - Resolves: rhbz#1678276
  - Resolves: rhbz#1687435


author: Jarod Wilson <jarod@redhat.com> - 26.0-2
changelog:
  - Add Obsoletes/Provides pair for infiniband-diags-devel
  - Pull in upstream stable-v26 branch patches
  - Fix %postun scriptlet failures by removing superfluous -p options
  - Add new BuildRequires: on pandoc
  - Related: rhbz#1722257


author: Honggang Li <honli@redhat.com> - 29.0-2
changelog:
  - Suppress ibdev2netdev warning messgae
  - Unversioned documentation directory
  - Resolves: bz1794904, bz1824853


author: Honggang Li <honli@redhat.com> - 32.0-1
changelog:
  - Update to upstream v32 release for features and fixes
  - Support Amazon Elastic Fabric Adapter
  - Enable pyverbs
  - Add a check for udevadm in the specfile
  - Resolves: bz1851721, bz1856076, bz1887396, bz1868804


author: Honggang Li <honli@redhat.com> - 32.0-4
changelog:
  - Update to upstream stable release v32.1
  - Fix mlx5 pyverbs CQ test
  - Resolves: bz1915745, bz1907377


author: Honggang Li <honli@redhat.com> - 37.1-1
changelog:
  - Update to upstream v37.1 release for features and fixes
  - Resolves: bz1982200, bz1990120, bz1982131


author: Kamal Heib <kheib@redhat.com> - 46.0-1
changelog:
  - Rebase to upstream release v46.0
  - Resolves: rhbz#2170066, rhbz#2209685, rhbz#2159635, rhbz#2167517


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.18-9
changelog:
  - Do not use combined characters on preedit for compose keys
  - Fixed an infinite loop of extension preedit with xterm


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.18-14
changelog:
  - Fixed Man page scan results for ibus
  - Added IBUS_DISCARD_PASSWORD env variable for password dialog in firefox
  - Added history annotation for previous emojis


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.19-3
changelog:
  - Fix Bug SEGV Choose an emoji by mouse from the emoji category list
  - Fix Bug 1618682 - SEGV with ASCII on emojier in Wayland
  - Support Shift-Space on emojier preedit
  - Do not move Emojier popup with the active candidate in Xorg
  - Do not clear Unicode data when emoji annotation lang is changed


author: Mike FABIAN <mfabian@redhat.com> - 60.2-4
changelog:
  - Add negative-daylight-savings.patch from upstream.
    (see http://bugs.icu-project.org/trac/ticket/13566 and
    http://bugs.icu-project.org/trac/changeset/40954)


author: Parag Nemade <pnemade AT redhat DOT com> - 60.2-7
changelog:
  - Resolves:rh#1602551 - Fix specfile by adding compile options
  - also add BuildRequires for gcc and gcc-c++
  - Correct the upstream URL


author: Mike FABIAN <mfabian@redhat.com> - 60.3-1
changelog:
  - Update to 60.3 maintenance release including support for new Japanese era Reiwa (令和).
  - Resolves: rhbz#1677093


author: Mike FABIAN <mfabian@redhat.com> - 60.3-2
changelog:
  - Apply ICU-13634-Adding-integer-overflow-logic-to-ICU4C-num.patch
  - Apply ICU-20958-Prevent-SEGV_MAPERR-in-append.patch
  - Resolves: rhbz#1808238


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> - 1.0-1
changelog:
  - New upstream release
  - Add OpenSSL 1.0 compatibility package, due to issues with OpenSSL 1.1
  - Remove libtool files
  - Run ldconfig after un/installation to update *.so files
  - Add -devel subpackage to handle include files and examples


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> - 1.0-2
changelog:
  - Adjusted docbook xsl path to match the correct stylesheet
  - Remove only *.la files, considering there aren't any *.a files


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> - 1.0-3
changelog:
  - Add OpenSSL 1.1 API support for the package, avoiding the need of
    compat-openssl10-devel package


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> - 1.1-1
changelog:
  - New upstream release
  - Support for OpenSSL 1.1 was added directly to the source code in upstream,
    thus removing specific patch for it
  - Docbook xsl stylesheet updated to a local path


author: Bruno E. O. Meneguele <brdeoliv@redhat.com> - 1.1-2
changelog:
  - Remove libtool files
  - Run ldconfig scriptlets after un/installing
  - Add -devel subpackage to handle include files and examples
  - Disable any static file in the package


author: Bruno E. O. Meneguele <bmeneg@redhat.com> - 1.1-3
changelog:
  - Solve memory leaks pointed by covscan tool
  - Add optimization flag O2 during compilation to satisfy annocheck tool


author: Honggang Li <honli@redhat.com> - 1.6.7-5
changelog:
  - Update source URL
  - Disable support for ARM32
  - Disable support for s390 as rdma-core is unavailable for s390
  - Remove rdma-ndd as it had been merged into rdma-core
  - Resolves: bz1484155


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4-2
changelog:
  - Fix broken reference following when the reference is split to
    more than one line
  - Fix possible incorrect selection of already loaded file when
    following cross reference
    Resolves: #1383057


author: Petr Pisar <ppisar@redhat.com> - 6.4-3
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.78-1
changelog:
  - specfile: drop dependancy on /etc/system-release
  - ifup-post: always update nameserver & search entries in /etc/resolv.conf
  - network-scripts: forward DBus calls to /dev/null
  - Spelling fixes
  - Tell git to ignore *.o
  - Use grep -E instead of deprecated egrep
  - Avoid some unnecessary stat calls
  - systemd/system: symlinks for fedora-* services removed
  - network-scripts: firewall-cmd replaced with DBus calls
  - 'debugmode' subpackage dropped completely
  - sysconfig/init* files dropped
  - sysctl.conf.s390 dropped
  - usleep: change the error message to print the full replacement commandline


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.79-1
changelog:
  - ifdown-post: fix logical error in commit 5d61564
  - network: add knob to optionally keep interfaces up during shutdown
  - network-functions: use POSIX forwarding instead of bash-ism


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.80-1
changelog:
  - sysconfig/readonly-root: Clarify the usage of readonly-root
  - use proper shebang where appropriate
  - specfile: remove the systemctl call in the %postun phase
  - network-functions: use tr to upper case strings rather than awk
  - network-functions: add error messages for bonding installation
  - ifdown-eth: no longer needed 'pidof -x dhclient' condition removed
  - netconsole: LSB header added
  - po/xgettext_sh*: converted to use to python3
  - network.service: 'reload' removed
  - ifup-tunnel: Support 'external' tunnels
  - spec: add gcc to BuildRequires
  - init.d/functions: fix sourcing for ksh


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.81-1
changelog:
  - src/consoletype.c: deprecation warning added
  - src/genhostid.c: deprecation warning added
  - src/genhostid.c: fixed to not override /etc/hostid if it already exists
  - src/usleep.c: GCC warnings fixed
  - nis-domainname.service removed
  - fedora-* services renamed to more general names
  - specfile: missing fedora-domainname.service returned in systemd macros
  - COPYING updated to latest GNU version (GPLv2+)
  - network-scripts: control 'network' service with alternatives as well
  - netreport functionality dropped
  - networks moved into 'setup' package
  - lang.{sh,csh} moved into setup package
  - lang.{sh,csh} cleanup before moving to 'setup' package
  - src/sushell moved into 'policycoreutils' package
  - src/shvar.* removed
  - po/xgettext_sh removed
  - sys-unconfig removed
  - Outdated files from doc/ folder removed
  - make archive: ChangeLog generating removed
  - network-scripts: ifup & ifdown -- use alternatives system
  - adjtime moved into 'util-linux' package
  - specfile: simplified & updated to new repository layout
  - .gitignore files updated to new repository layout
  - Makefile simplified & updated to new repository layout
  - po/Makefile simplified & updated to new repository layout
  - src/Makefile simplified & updated to new repository layout
  - Repository scheme updated to new layout
  - fedora-readonly: command substitution warning fixed (null-byte input)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.82-1
changelog:
  - Makefile: make the creation of symlinks relative to path again
  - specfile: trailing file of netreport removed


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 9.83-1
changelog:
  - network-scripts: Add previously dropped error checking
  - network-scripts: Replace brctl with ip-link
  - Makefile: new release-commit rule added
  - src/rename_device.c: GCC warnings about unused return value suppressed
  - src/usernetctl.c: GCC warnings about unused return value suppressed
  - Makefile: allow sub-makefiles to run in parallel
  - specfile: netconsole service moved to /usr/libexec
  - specfile: services from /usr/lib/systemd moved to /usr/libexec
  - specfile: summary & description updated
  - specfile: no longer needed conflicts dropped
  - specfile: requirements cleanup
  - specfile: obsoletes on previous version of initscripts package added
  - specfile: network-scripts subpackage created
  - specfile: readonly-root subpackage created
  - specfile: netconsole-service subpackage created
  - README.md: Travis CI build icon added
  - .travis.yml: check the 'make install' proceeds as well
  - .travis.yml: initial commit
  - README.md: bug reporting described
  - README.dm: future of initscripts described
  - README.md: description added
  - README.md: references to old git branches added
  - README.md: initial commit
  - network-scripts: setting of firewall ZONE fixed
  - ifdown-post: artifact whitespace removed from the DBus call
  - l10n: drop .tx directory
  - l10n: add zanata.xml


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 10.00-1
changelog:
  - Move the /etc/rwtab.d & /etc/statetab.d folders to 'filesystem'
  - specfile: fix failing build because of incorrect use of (x86-64)


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 10.00.1-1
changelog:
  - consoletype/genhostid/usleep: allow disabling of deprecation warnings
  - network/ifup/ifdown: allow disabling of deprecation warnings
  - network/ifup/ifdown: deprecation warnings for 'network-scripts' added


author: Jan Macku <jamacku@redhat.com> - 10.00.7-1
changelog:
  - Wait for scope link addresses as well as for scope global addresses
  - Remove deprecated option -m of pidof


author: Jan Macku <jamacku@redhat.com> - 10.00.8-1
changelog:
  - rwtab: Add support for chrony
  - ifup-eth: Switch to bc utility, which supports floating point computations.
  - Replace grep -EL with subshell since -L changed behaviour


author: Jan Macku <jamacku@redhat.com> - 10.00.10-1
changelog:
  - Allow updating rfkill switch status while in readonly root mode
  - service: Prevent variables from globbing
  - Allow updating mlocate.db while in readonly root mode


author: Jan Macku <jamacku@redhat.com> - 10.00.16-1
changelog:
  - rename_device: also support dracut-style kernel cmdline configuration
  - ifup-routes: Log when using `ip $type replace`
  - ifup-routes: Use `ip route repace` to avoid race


author: Jan Macku <jamacku@redhat.com> - 10.00.17-1
changelog:
  - ifup-routes: Revert quotes
  - ifup-routes: Use `ip replace` only on type `route`
  - ci: introduce GA ci from master to rhel8-branch
  - ci: Setup packit for RHEL8 branch
  - ci: Get rid of old ci files (travis and zanata)


author: Jan Macku <jamacku@redhat.com> - 10.00.3-1
changelog:
  - rc.d/functions: fix escape sequence being output under systemd service units
  - Replace not working awk command with sed


author: Jan Macku <jamacku@redhat.com> - 10.00.5-1
changelog:
  - network-function: bridges are created by ifup-eth
  - network: don't fail with IFDOWN_ON_SHUTDOWN
  - Add ip6gre tunnel option
  - ifup-eth: Check that device name is set
  - Initscripts no longer care about rc.local


author: Charalampos Stratakis <cstratak@redhat.com> - 0.6-10
changelog:
  - SPEC file cleanup
  - Added licence tag
  - Removal of old and unneeded macros
  - Use of newest python macros
  - Removed Python 2 dependency
  - Added patch for Python 3 build


author: Phil Sutter <psutter@redhat.com> [4.18.0-2.el8]
changelog:
  - bridge/mdb: fix missing new line when show bridge mdb (Phil Sutter) [1625500]
  - ip-route: Fix segfault with many nexthops (Phil Sutter) [1625358]
  - Update kernel headers (Phil Sutter) [1615915]
  - tc/flower: Add match on encapsulating tos/ttl (Phil Sutter) [1615915]
  - tc/act_tunnel_key: Enable setup of tos and ttl (Phil Sutter) [1615915]
  - iprule: Fix destination prefix output (Phil Sutter) [1623503]
  - ip: Add missing -M flag to help text (Phil Sutter) [1612704]
  - man: ss.8: Describe --events option (Phil Sutter) [1612704]
  - rtmon: List options in help text (Phil Sutter) [1612704]
  - man: rtacct.8: Fix nstat options (Phil Sutter) [1612704]
  - man: ifstat.8: Document --json and --pretty options (Phil Sutter) [1612704]
  - genl: Fix help text (Phil Sutter) [1612704]
  - man: devlink.8: Document -verbose option (Phil Sutter) [1612704]
  - devlink: trivial: Make help text consistent (Phil Sutter) [1612704]
  - bridge: trivial: Make help text consistent (Phil Sutter) [1612704]
  - man: bridge.8: Document -oneline option (Phil Sutter) [1612704]


author: Phil Sutter <psutter@redhat.com> [4.18.0-4.el8]
changelog:
  - iplink_vxlan: take into account preferred_family creating vxlan device (Phil Sutter) [1626321]
  - ip-addrlabel: Fix printing of label value (Phil Sutter) [1639412]
  - bridge: fdb: Fix for missing keywords in non-JSON output (Phil Sutter) [1636532]


author: Phil Sutter <psutter@redhat.com> [4.18.0-5.el8]
changelog:
  - utils: fix get_rtnl_link_stats_rta stats parsing (Phil Sutter) [1626306]
  - uapi: add snmp header file (Phil Sutter) [1626306]
  - macsec: fix off-by-one when parsing attributes (Phil Sutter) [1628428]
  - json: make 0xhex handle u64 (Phil Sutter) [1628428]


author: Phil Sutter <psutter@redhat.com> [4.18.0-6.el8]
changelog:
  - Update kernel headers (Phil Sutter) [1637440]
  - tc_util: Add support for showing TCA_STATS_BASIC_HW statistics (Phil Sutter) [1637440]
  - tc: Remove pointless assignments in batch() (Phil Sutter) [1602555]
  - tipc: Drop unused variable 'genl' (Phil Sutter) [1602555]
  - ip-route: Fix parse_encap_seg6() srh parsing (Phil Sutter) [1602555]
  - rdma: Don't pass garbage to rd_check_is_filtered() (Phil Sutter) [1602555]
  - ip-route: Fix for memleak in error path (Phil Sutter) [1602555]
  - rdma: Fix for ineffective check in add_filter() (Phil Sutter) [1602555]
  - devlink: Fix error reporting in cmd_resource_set() (Phil Sutter) [1602555]
  - libnetlink: fix use-after-free of message buf (Phil Sutter) [1602555]
  - libnetlink: don't return error on success (Phil Sutter) [1602555]
  - libnetlink: fix leak and using unused memory on error (Phil Sutter) [1602555]
  - tc: htb: Print default value in hex (Phil Sutter) [1641053]


author: Phil Sutter <psutter@redhat.com> [4.18.0-7.el8]
changelog:
  - ip-route: Fix nexthop encap parsing (Phil Sutter) [1625358]
  - man: ip-route.8: Document nexthop limit (Phil Sutter) [1625358]


author: Phil Sutter <psutter@redhat.com> [4.18.0-11.el8]
changelog:
  - tc: m_tunnel_key: Add tunnel option support to act_tunnel_key (Phil Sutter) [1654761]
  - tc: f_flower: add geneve option match support to flower (Phil Sutter) [1654761]
  - l2tp: Fix printing of cookie and peer_cookie values (Phil Sutter) [1643805]


author: Andrea Claudi <aclaudi@redhat.com> [4.18.0-12.el8]
changelog:
  - devlink: Add param command support (Andrea Claudi) [1663199]
  - rdma: Fix representation of PortInfo CapabilityMask (Andrea Claudi) [1664694]
  - uapi: update ib_verbs (Andrea Claudi) [1664694]
  - tc: flower: Add support for QinQ (Andrea Claudi) [1615928]
  - ip rule: Add ipproto and port range to filter list (Andrea Claudi) [1678111]


author: Andrea Claudi <aclaudi@redhat.com> [4.18.0-13.el8]
changelog:
  - ip-xfrm: Respect family in deleteall and list commands (Andrea Claudi) [1656717]
  - Update kernel headers (Andrea Claudi) [1716361]
  - uapi: update bpf header (Andrea Claudi) [1716361]
  - uapi: update headers to 4.20-rc1 (Andrea Claudi) [1716361]
  - bpf: add btf func and func_proto kind support (Andrea Claudi) [1716361]
  - lib/bpf: fix build warning if no elf (Andrea Claudi) [1716361]
  - bpf: initialise map symbol before retrieving and comparing its type (Andrea Claudi) [1716361]
  - Include bsd/string.h only in include/utils.h (Andrea Claudi) [1716361]
  - Use libbsd for strlcpy if available (Andrea Claudi) [1716361]
  - bpf: check map symbol type properly with newer llvm compiler (Andrea Claudi) [1716361]
  - bpf: implement btf handling and map annotation (Andrea Claudi) [1716361]
  - bpf: implement bpf to bpf calls support (Andrea Claudi) [1716361]
  - bpf: remove strict dependency on af_alg (Andrea Claudi) [1716361]
  - bpf: move bpf_elf_map fixup notification under verbose (Andrea Claudi) [1716361]
  - iplink: add support for reporting multiple XDP programs (Andrea Claudi) [1716361]
  - rdma: Document IB device renaming option (Andrea Claudi) [1663228]
  - rdma: Add an option to rename IB device interface (Andrea Claudi) [1663228]
  - rdma: Introduce command execution helper with required device name (Andrea Claudi) [1663228]
  - rdma: Update kernel include file to support IB device renaming (Andrea Claudi) [1663228]
  - libnetlink: Convert GETADDR dumps to use rtnl_addrdump_req (Andrea Claudi) [1716772]


author: Andrea Claudi <aclaudi@redhat.com> [4.18.0-15.el8]
changelog:
  - netns: make netns_{save,restore} static (Andrea Claudi) [1719759]
  - ip vrf: use hook to change VRF in the child (Andrea Claudi) [1719759]
  - netns: switch netns in the child when executing commands (Andrea Claudi) [1719759]
  - m_mirred: don't bail if the control action is missing (Andrea Claudi) [1711760]
  - tc: introduce support for chain templates (Andrea Claudi) [1710291]
  - ip: reset netns after each command in batch mode (Andrea Claudi) [1671016]


author: Andrea Claudi <aclaudi@redhat.com> [5.9.0-2.el8]
changelog:
  - tc: flower: fix json output with mpls lse (Andrea Claudi) [1885770]
  - tc-mpls: fix manpage example and help message string (Andrea Claudi) [1885770]
  - tc-vlan: fix help and error message strings (Andrea Claudi) [1885770]
  - m_mpls: test the 'mac_push' action after 'modify' (Andrea Claudi) [1885770]
  - m_mpls: add mac_push action (Andrea Claudi) [1885770]
  - m_vlan: add pop_eth and push_eth actions (Andrea Claudi) [1885770]
  - Update kernel headers (Andrea Claudi) [1885770]


author: Andrea Claudi <aclaudi@redhat.com> [5.12.0-1.el8]
changelog:
  - tc: f_flower: Add missing ct_state flags to usage description (Andrea Claudi) [1957243]
  - tc: f_flower: Add option to match on related ct state (Andrea Claudi) [1957243]


author: Andrea Claudi <aclaudi@redhat.com> [5.12.0-3.el8]
changelog:
  - tc: htb: improve burst error messages (Andrea Claudi) [1910745]
  - tc: u32: Fix key folding in sample option (Andrea Claudi) [1979425]
  - police: Fix normal output back to what it was (Andrea Claudi) [1981393]
  - police: Add support for json output (Andrea Claudi) [1981393]
  - police: add support for packet-per-second rate limiting (Andrea Claudi) [1981393]
  - Update kernel headers (Andrea Claudi) [1981393]
  - mptcp: add support for port based endpoint (Andrea Claudi) [1984733]


author: EL Errata <el-errata_ww@oracle.com> - 5.12.0-4.0.1
changelog:
  - Backport selected rdma patches needed for vDPA support [Orabug: 32719473]
  - rdma: Add SRQ resource tracking information [Orabug: 32719473]
  - rdma: Add context resource tracking information [Orabug: 32719473]
  - rdma: Update uapi headers [Orabug: 32719473]
  - lib: move get_task_name() from rdma [Orabug: 32719473]


author: Andrea Claudi <aclaudi@redhat.com> - 5.15.0-2.el8
changelog:
  - vdpa: Enable user to set mtu of the vdpa device (Andrea Claudi) [2036880]
  - vdpa: Enable user to set mac address of vdpa device (Andrea Claudi) [2036880]
  - vdpa: Enable user to query vdpa device config layout (Andrea Claudi) [2036880]
  - vdpa: align uapi headers (Andrea Claudi) [2036880]


author: Andrea Claudi <aclaudi@redhat.com> - 5.15.0-3.el8
changelog:
  - tc: u32: add json support in `print_raw`, `print_ipv4`, `print_ipv6` (Andrea Claudi) [1989591]
  - tc: u32: add support for json output (Andrea Claudi) [1989591]


author: Andrea Claudi <aclaudi@redhat.com> - 5.15.0-4.el8
changelog:
  - vdpa: Update man page with added support to configure max vq pair (Andrea Claudi) [2056827]
  - vdpa: Support reading device features (Andrea Claudi) [2056827]
  - vdpa: Support for configuring max VQ pairs for a device (Andrea Claudi) [2056827]
  - vdpa: Allow for printing negotiated features of a device (Andrea Claudi) [2056827]
  - vdpa: Remove unsupported command line option (Andrea Claudi) [2056827]
  - uapi: update vdpa.h (Andrea Claudi) [2056827]
  - Update kernel headers and import virtio_net (Andrea Claudi) [2056827]


author: Lukáš Lipinský <lukas.lipinsky@oracle.com> - 5.18.0-1.1.0.1.el8_8
changelog:
  - macvlan: Add bclim parameter (Andrea Claudi) [2188134]
  - Update kernel headers (Andrea Claudi) [2188134]
    Resolves: rhbz#2188134


author: Andrea Claudi <aclaudi@redhat.com> [5.3.0-2.el8]
changelog:
  - man: ip.8: Add missing vrf subcommand description (Andrea Claudi) [1780010]
  - xfrm: not try to delete ipcomp states when using deleteall (Andrea Claudi) [1808634]
  - ip-xfrm: Fix help messages (Andrea Claudi) [1796045]
  - man: rdma.8: Add missing resource subcommand description (Andrea Claudi) [1786576]
  - man: rdma-statistic: Add filter description (Andrea Claudi) [1786565]
  - tc: implement support for action flags (Andrea Claudi) [1770671]
  - Update kernel headers (Andrea Claudi) [1770671]
  - Update kernel headers (Andrea Claudi) [1770671]


author: Andrea Claudi <aclaudi@redhat.com> [5.3.0-3.el8]
changelog:
  - xfrm: also check for ipv6 state in xfrm_state_keep (Andrea Claudi) [1828033]
  - man: bridge.8: fix bridge link show description (Andrea Claudi) [1817571]
  - ip: fix ip route show json output for multipath nexthops (Andrea Claudi) [1738633]
  - ip link: xstats: fix TX IGMP reports string (Andrea Claudi) [1796041]
  - nstat: print useful error messages in abort() cases (Andrea Claudi) [1824896]


author: Andrea Claudi <aclaudi@redhat.com> [5.3.0-4.el8]
changelog:
  - tc: f_flower: add options support for erspan (Andrea Claudi) [1830485]
  - tc: f_flower: add options support for vxlan (Andrea Claudi) [1830485]
  - tc: m_tunnel_key: add options support for erpsan (Andrea Claudi) [1830485]
  - tc: m_tunnel_key: add options support for vxlan (Andrea Claudi) [1830485]
  - iproute_lwtunnel: add options support for erspan metadata (Andrea Claudi) [1830485]
  - iproute_lwtunnel: add options support for vxlan metadata (Andrea Claudi) [1830485]
  - iproute_lwtunnel: add options support for geneve metadata (Andrea Claudi) [1830485]
  - Update kernel headers (Andrea Claudi) [1830485]
  - man: ip.8: add reference to mptcp man-page (Andrea Claudi) [1812207]
  - man: mptcp man page (Andrea Claudi) [1812207]
  - ss: allow dumping MPTCP subflow information (Andrea Claudi) [1812207]
  - Update kernel headers (Andrea Claudi) [1812207]
  - Update kernel headers (Andrea Claudi) [1812207]
  - add support for mptcp netlink interface (Andrea Claudi) [1812207]
  - Update kernel headers and import mptcp.h (Andrea Claudi) [1812207]
  - ip: xfrm: add espintcp encapsulation (Andrea Claudi) [1844045]
  - Update kernel headers and import udp.h (Andrea Claudi) [1844045]


author: Andrea Claudi <aclaudi@redhat.com> [5.3.0-5.el8]
changelog:
  - man: tc-ct.8: Add manual page for ct tc action (Andrea Claudi) [1844637]
  - tc: flower: Add matching on conntrack info (Andrea Claudi) [1844637]
  - tc: Introduce tc ct action (Andrea Claudi) [1844637]
  - tc: add NLA_F_NESTED flag to all actions options nested block (Andrea Claudi) [1844637]
  - Import tc_act/tc_ct.h uapi file (Andrea Claudi) [1844637]
  - ss: allow dumping kTLS info (Andrea Claudi) [1812207]
  - devlink: Add health error recovery status monitoring (Andrea Claudi) [1821039]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-2.el8
changelog:
  - macvlan: Add bclim parameter (Andrea Claudi) [2188134]
  - Update kernel headers (Andrea Claudi) [2188134]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-4.el8
changelog:
  - ip vrf: make ipvrf_exec SELinux-aware (Andrea Claudi) [1780023]
  - lib: add SELinux include and stub functions (Andrea Claudi) [1780023]
  - ss: make SELinux stub functions conformant to API definitions (Andrea Claudi) [1780023]
  - ss: make is_selinux_enabled stub work like in SELinux (Andrea Claudi) [1780023]


author: Stefano Brivio <sbrivio@redhat.com> - 6.38-3
changelog:
  - Fix loading of sets with dependencies on other sets (RHBZ#1647096), and
    hardcode 6.38-1.el7 for ipset-service upgrade and downgrade triggers, so that
    we don't run into issues with z-stream updates


author: Stefano Brivio <sbrivio@redhat.com> - 7.1-1
changelog:
  - Rebase to 7.1 (RHBZ#1649090):
    - Add compatibility support for strscpy()
    - Correct the manpage about the sort option
    - Add missing functions to libipset.map
    - configure.ac: Fix build regression on RHEL/CentOS/SL (Serhey Popovych)
    - Implement sorting for hash types in the ipset tool
    - Fix to list/save into file specified by option (reported by Isaac Good)
    - Introduction of new commands and protocol version 7, updated kernel include files
    - Add compatibility support for async in pernet_operations
    - Use more robust awk patterns to check for backward compatibility
    - Prepare the ipset tool to handle multiple protocol version
    - Fix warning message handlin
    - Correct to test null valued entry in hash:net6,port,net6 test
    - Library reworked to support embedding ipset completely
    - Add compatibility to support kvcalloc()
    - Validate string type attributes in attr2data() (Stefano Brivio)
    - manpage: Add comment about matching on destination MAC address (Stefano Brivio)
      (RHBZ#1649079)
    - Add compatibility to support is_zero_ether_addr()
    - Fix use-after-free in ipset_parse_name_compat() (Stefano Brivio) (RHBZ#1649085)
    - Fix leak in build_argv() on line parsing error (Stefano Brivio) (RHBZ#1649085)
    - Simplify return statement in ipset_mnl_query() (Stefano Brivio) (RHBZ#1649085)
    - tests/check_klog.sh: Try dmesg too, don't let shell terminate script (Stefano Brivio) 
  - Fixes:
    - Fix all shellcheck warnings in init script (RHBZ#1649085)
    - Make error reporting consistent, introduce different severities (RHBZ#1683711)
    - While restoring, on invalid entries, remove them and retry (RHBZ#1683713)
    - Fix covscan SC2166 warning in init script (RHBZ#1649085)


author: Phil Sutter <psutter@redhat.com> - 1.8.2-10
changelog:
  - arptables-nft: fix decoding of hlen on bigendian platforms
  - xtables-save: Fix table not found error message
  - xtables: Catch errors when zeroing rule rounters
  - extensions: TRACE: Point at xtables-monitor in documentation
  - extensions: libipt_realm: Document allowed realm values


author: Phil Sutter <psutter@redhat.com> - 1.8.2-12
changelog:
  - Add iptables-test.py testsuite to sources
  - extensions: libip6t_mh: fix bogus translation error
  - extensions: AUDIT: Document ineffective --type option
  - xtables-restore: Fix program names in help texts
  - xtables-save: Point at existing man page in help text
  - utils: Add a manpage for nfbpf_compile
  - Mark man pages in base package as documentation files


author: Phil Sutter <psutter@redhat.com> - 1.8.2-14
changelog:
  - arptables: Print space before comma and counters
  - extensions: Fix ipvs vproto parsing
  - extensions: Fix ipvs vproto option printing
  - extensions: Add testcase for libxt_ipvs


author: Phil Sutter - 1.8.2-2
changelog:
  - Point out that nftables-variants are installed in package description
  - Fix for deleting arptables rules by referencing them


author: Phil Sutter - 1.8.2-4
changelog:
  - Fix iptables init script for nftables-backend
  - Drop references to unsupported broute table from ebtables man page
  - xtables: Don't use native nftables comments


author: Phil Sutter - 1.8.2-6
changelog:
  - Improve performance with large rulesets
  - Fix for changes in arptables output
  - Fix for inserting rules at wrong position
  - Fix segfault when comparing rules with standard target
  - Fix ebtables output for negated values
  - Document missing arptables FORWARD chain


author: Phil Sutter <psutter@redhat.com> - 1.8.4-3
changelog:
  - Reduce globbing in library file names to expose future SONAME changes
  - Add bootstrapping for libip*tc SONAME bump


author: Phil Sutter <psutter@redhat.com> - 1.8.4-8
changelog:
  - xtables-translate: Fix for iface++
  - tests: shell: Fix skip checks with --host mode
  - xtables-restore: fix for --noflush and empty lines


author: Phil Sutter <psutter@redhat.com> - 1.8.4-11
changelog:
  - Complete ebtables-nft among match support
  - Replace RHEL-only xtables-monitor fix with upstream solution
  - xtables: Align effect of -4/-6 options with legacy
  - xtables: Drop -4 and -6 support from xtables-{save,restore}
  - Review systemd unit files


author: Phil Sutter <psutter@redhat.com> - 1.8.4-15.1
changelog:
  - tests: shell: Improve concurrent noflush restore test a bit
  - nft: Fix for concurrent noflush restore calls
  - nft: Fix error reporting for refreshed transactions
  - nft: Make batch_add_chain() return the added batch object


author: Phil Sutter <psutter@redhat.com> - 1.8.4-15.2
changelog:
  - tests/shell: Add test for bitwise avoidance fixes
  - ebtables: Optimize masked MAC address matches
  - nft: Optimize class-based IP prefix matches
  - nft: Fix for broken address mask match detection


author: Phil Sutter <psutter@redhat.com> - 1.8.4-16
changelog:
  - tests/shell: Add test for bitwise avoidance fixes
  - ebtables: Optimize masked MAC address matches
  - nft: Optimize class-based IP prefix matches
  - nft: Fix for broken address mask match detection
  - nft: cache: Make nft_rebuild_cache() respect fake cache
  - tests: shell: Improve concurrent noflush restore test a bit
  - nft: Fix for concurrent noflush restore calls
  - nft: Fix error reporting for refreshed transactions
  - nft: Make batch_add_chain() return the added batch object


author: Phil Sutter <psutter@redhat.com> - 1.8.4-17
changelog:
  - extensions: dccp: Fix for DCCP type 'INVALID'
  - tests: shell: Merge and extend return codes test
  - nft: Fix command name in ip6tables error message
  - extensions: libxt_CT: add translation for NOTRACK
  - extensions: libipt_icmp: Fix translation of type 'any'
  - tests/shell: Test for fixed extension registration
  - libxtables: Register multiple extensions in ascending order
  - libxtables: Simplify pending extension registration
  - libxtables: Make sure extensions register in revision order


author: Phil Sutter <psutter@redhat.com> - 1.8.4-18
changelog:
  - xtables-translate: Fix translation of odd netmasks
  - nft: Fix bitwise expression avoidance detection
  - xtables-monitor: 'LL=0x304' is not very convenient, print LOOPBACK instead.
  - xtables-monitor: print packet first
  - xtables-monitor: fix packet family protocol
  - xtables-monitor: fix rule printing
  - xtables-monitor: Fix ip6tables rule printing


author: Phil Sutter <psutter@redhat.com> - 1.8.4-20
changelog:
  - extensions: SECMARK: Use a better context in test case
  - extensions: sctp: Translate --chunk-types option
  - extensions: sctp: Fix nftables translation
  - extensions: SECMARK: Implement revision 1
  - nft: cache: Retry if kernel returns EINTR


author: Phil Sutter <psutter@redhat.com> - 1.8.4-21
changelog:
  - extensions: hashlimit: Fix tests with HZ=100
  - ebtables: Dump atomic waste
  - doc: ebtables-nft.8: Adjust for missing atomic-options


author: Phil Sutter <psutter@redhat.com> - 1.8.4-23
changelog:
  - libxtables: Fix unsupported extension warning corner case
  - tests: shell: Check overhead in iptables-save and -restore
  - nft: Fix EPERM handling for extensions without rev 0
  - Improve error messages for unsupported extensions
  - xshared: Fix response to unprivileged users
  - libxtables: Register only the highest revision extension
  - Use proto_to_name() from xshared in more places
  - libxtables: Boost rule target checks by announcing chain names
  - libxtables: Implement notargets hash table
  - nft: Reject standard targets as chain names when restoring
  - xshared: Merge and share parse_chain()
  - xshared: Prefer xtables_chain_protos lookup over getprotoent
  - nft: Speed up immediate parsing
  - nft: Simplify immediate parsing


author: Lukáš Lipinský <lukas.lipinsky@oracle.com> - 1.8.4-24.0.1.2
changelog:
  - libxtables: Revert change to struct xtables_pprot (RHBZ#2221107)
  - nft: un-break among match with concatenation (RHBZ#2234809)


author: Phil Sutter <psutter@redhat.com> - 1.8.5-11
changelog:
  - iptables-restore: Drop dead code
  - iptables-apply: Eliminate shellcheck warnings
  - ebtables: Exit gracefully on invalid table names


author: Phil Cameron <pcameron@redhat.com> - 1.1.4-16
changelog:
  - Moved upstream from https://fedorahosted.org/iptraf-ng/ to 
    https://github.com/iptraf-ng/iptraf-ng/ with release v1.1.4
    Fixes error in patch Patch03 - this fixes 1283773


author: Thomas Woerner <twoerner@redhat.com> 2.2.6-1
changelog:
  - New upstream version 2.2.6
    - Located at github
    - Fixes (RHBZ#1294913 and RHBZ#1375395)
  - Additional upstream patch (no_debug) to drop some debugging remains
  - Additional proposed patch to fix segmentation fault with -1 -C (RHBZ#599181)


author: Kairui Song <kasong@redhat.com> 2:1.4.0-2
changelog:
  - Fix several memleak problems found by covscan (bz1606969)
  - Fix an possible overflow error (bz1606969)
  - Don't leak socket fd on connection error (bz1606969)
  - Check xen-dyn-event more flexible (bz1576164)


author: Kairui Song <kasong@redhat.com> 2:1.4.0-3
changelog:
  - Update document and remove dead options to fix manpage scan warning (bz1612706)
  - Fix gating test error (bz1680619)


author: Chris Leech <cleech@redhat.com> - 6.2.0.876-1.git4ef9261
changelog:
  - pull in post 2.0.876 tagged fixes from upstream git
  - minimal packaging of libopeniscsiusr (internal use only, no dev package yet)


author: Chris Leech <cleech@redhat.com> - 6.2.0.876-5.gitf3c8e90
changelog:
  - iscsiuio: add mutex to protect netlink buffer for pass-through xmit
  - iscsid: get gateway information from sysfs when recovering sessions
  - enabled MaxOustandingR2T negotiation during login


author: EL Errata <el-errata_ww@oracle.com> - 6.2.0.876-7.gitf3c8e90.0.1
changelog:
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot.
    [Orabug: 29653342]
  - Print vital iscsid messages on console using rsyslog facility.  This
    is particularly useful when using iscsi boot and there is a connection
    or session issue.
  - Execute systemctl daemon-reload during post installation upgrade
    and try to restart iscsi services during upgrade.
    [Orabug: 29503805]
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0030-Use-sd_notify-to-tell-systemd-when-iscsid-is-ready.patch
    Add 0031-Update-systemd-unit-files-for-iscsid.patch
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
    change InitiatorName to "iqn.1988-12.com.oracle" (Tianyue Lan) [18791695]


author: Fred Herard <fred.herard@oracle.com> - 6.2.0.876-7.gitf3c8e90.0.2
changelog:
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted.
    [Orabug: 29851447]


author: Livy Ge <livy.ge@oracle.com> - 6.2.0.877-1.gitf71581b.0.1
changelog:
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted.
    [Orabug: 29851447]
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot.
    [Orabug: 29653342]
  - Print vital iscsid messages on console using rsyslog facility.  This
    is particularly useful when using iscsi boot and there is a connection
    or session issue.
  - Execute systemctl daemon-reload during post installation upgrade
    and try to restart iscsi services during upgrade.
    [Orabug: 29503805]
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
    change InitiatorName to "iqn.1988-12.com.oracle" (Tianyue Lan) [18791695]


author: Chris Leech <cleech@redhat.com> - 6.2.0.878-0.gitd791ce0
changelog:
  - 1761940 iSCSI CHAP authentication not function with FIPS enabled
  - Service file improvements forward ported from RHEL 7.8
  - various static analysis fixes from upstream


author: EL Errata <el-errata_ww@oracle.com> - 6.2.0.878-4.gitd791ce0.0.1.el8
changelog:
  - Tune TimeoutSec of iscsid service to 10 minutes
    [Orabug: 29869817]
  - Modify patches 0007 and 0032-0035 to apply cleanly.
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted.
    [Orabug: 29851447]
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot.
    [Orabug: 29653342]
  - Print vital iscsid messages on console using rsyslog facility.  This
    is particularly useful when using iscsi boot and there is a connection
    or session issue.
  - Execute systemctl daemon-reload during post installation upgrade
    and try to restart iscsi services during upgrade.
    [Orabug: 29503805]
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
    change InitiatorName to "iqn.1988-12.com.oracle" (Tianyue Lan) [18791695]
  - iSCSI CHAP authentication not function with FIPS enabled [Orabug: 1761940]


author: Chris Leech - 6.2.0.878-5.gitd791ce0
changelog:
  - 1849931, 1869438 go back to MD5 CHAP only by default
    new CHAP modes can cause issue with some targets,
    so SHA1/SHA256/SHA3-256 modes must be configured to enable now


author: EL Errata <el-errata_ww@oracle.com> - 6.2.0.878-5.gitd791ce0.0.1
changelog:
  - iscsid - Proper disconnect of TCP connection. [Orabug: 31503159]
  - Tune TimeoutSec of iscsid service to 10 minutes
    [Orabug: 29869817]
  - Modify patches 0007 and 0032-0035 to apply cleanly.
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted.
    [Orabug: 29851447]
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot.
    [Orabug: 29653342]
  - Print vital iscsid messages on console using rsyslog facility.  This
    is particularly useful when using iscsi boot and there is a connection
    or session issue.
  - Execute systemctl daemon-reload during post installation upgrade
    and try to restart iscsi services during upgrade.
    [Orabug: 29503805]
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
    change InitiatorName to "iqn.1988-12.com.oracle" (Tianyue Lan) [Orabug: 18791695]
  - iSCSI CHAP authentication not function with FIPS enabled [Orabug: 1761940]


author: David Kubat <david.kubat@oracle.com> - 6.2.1.2-1.gita8fcb37.0.1
changelog:
  - Tune TimeoutSec of iscsid service to 10 minutes
    [Orabug: 29869817]
  - Modify patches 0007 and 0032-0035 to apply cleanly.
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted.
    [Orabug: 29851447]
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot.
    [Orabug: 29653342]
  - Print vital iscsid messages on console using rsyslog facility.  This
    is particularly useful when using iscsi boot and there is a connection
    or session issue.
  - Execute systemctl daemon-reload during post installation upgrade
    and try to restart iscsi services during upgrade.
    [Orabug: 29503805]
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
    change InitiatorName to "iqn.1988-12.com.oracle" (Tianyue Lan) [Orabug: 18791695]
  - iSCSI CHAP authentication not function with FIPS enabled [Orabug: 1761940]


author: Lukáš Lipinský <lukas.lipinsky@oracle.com> - 6.2.1.4-4.git095f59c.0.1
changelog:
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Print vital iscsid messages on console using rsyslog facility. This
    is particularly useful when using iscsi boot and there is a connection
    or session issue. [Orabug: 29503805]
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot. [Orabug: 29653342]
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted. [Orabug: 29851447]
  - Modify patches 0007 and 0032-0035 to apply cleanly
  - Tune TimeoutSec of iscsid service to 10 minutes [Orabug: 29869817]


author: Darren Archibald <darren.archibald@oracle.com> - 6.2.1.4-8.git095f59c.0.1
changelog:
  - Remove 0039-idbm-Change-mkdir-permissions-to-0770.patch
  - Change mkdir permissions to 0770 [Orabug: 35480395]
  - Log error when auth debug status is set [Orabug: 32831167]
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Print vital iscsid messages on console using rsyslog facility. This
    is particularly useful when using iscsi boot and there is a connection
    or session issue. [Orabug: 29503805]
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot. [Orabug: 29653342]
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted. [Orabug: 29851447]
  - Modify patches 0007 and 0032-0035 to apply cleanly
  - Tune TimeoutSec of iscsid service to 10 minutes [Orabug: 29869817]


author: Akshata Konala <akshata.konala@oracle.com> - 6.2.1.4-8.git095f59c.0.1
changelog:
  - 2131090 fix idbm patch to not overwrite upstream changes in file mode
  - Remove 0039-idbm-Change-mkdir-permissions-to-0770.patch


author: Chris Leech <cleech@redhat.com> - 0.94-1
changelog:
  - new upstream location, update to 0.94
  - new devel package, upstream open-iscsi is dropping it's internal copy


author: Herton R. Krzesinski <herton@redhat.com> - 20180524-84.git2a9b2cf5
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update Intel Omni-Path Architecture (OPA) Firmware (rhbz 1483737)
  - Drop separate microcode_amd_fam17h.bin, same file is now included in linux-firmware
    upstream


author: Herton R. Krzesinski <herton@redhat.com> - 20180524-85.git2a9b2cf5
changelog:
  - Add Obsoletes for conflicting ivtv-firmware versions (rhbz 1589055)
  - Add Obsoletes for iwl7265-firmware which is shipped with RHEL 7 (rhbz 1589056)


author: Herton R. Krzesinski <herton@redhat.com> - 20180706-86.gitd1147327
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - qed: Add firmware 8.37.2.0 (rhbz 1584853)


author: Herton R. Krzesinski <herton@redhat.com> - 20180717-87.git8d69bab7
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - cxgb4: update firmware to revision 1.20.8.0 (rhbz 1503622)


author: Herton R. Krzesinski <herton@redhat.com> - 20181011-88.gitc6b6265d
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Include latest firmware for Nvidia Graphics (rhbz 1504667)


author: Herton R. Krzesinski <herton@redhat.com> - 20181015-89.gitc6b6265d
changelog:
  - Remove liquidio/lio_23xx_vsw.bin from linux-firmware until GPL violation is
    fully resolved (rhbz 1637694)


author: Herton R. Krzesinski <herton@redhat.com> - 20181109-90.git1baa3486
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Include BPF version of Netronome firmware (rhbz 1637558)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20200124-999.4.git1eb2408c.el8
changelog:
  - Rebase to latest upstream firmware (Orabug: 30762405).
  - Create symlinks from WHENCE file (Orabug: 30762405).


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20201217-999.7.git7455a360.el8
changelog:
  - Sync to latest to get fix for CVE-2020-12321 linux-firmware: hardware: buffer overflow in bluetooth firmware (bz# 62321)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20211203-999.9.gitb0e898fb.el8
changelog:
  - Move the build env to latest OL chroot.
  - Split Intel wireless AX2xx series to a separate package
  - Rebase to latest upstream linux-firmware


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20220304-999.12.gitf011ccb4.el8
changelog:
  - Make iwl7260-firmware to depend on iwlax2xx-firmware (Orabug: 33861186)
  - Rebase to upstream (Orabug: 33850583)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20230227-999.16.git60971a64.el8
changelog:
  - Fix rpm install issue due to directory replaced by symlink (Orabug: 35112753)
  - Rebase to upstream


author: Ethan Zhao <ethan.zhao@oracle.com> - 20171027-56.gitbf042913.0.3.el7
changelog:
  - Update linux-firmware-base.list with ls_fw.sh and UEK5 dev build (Orabug 27026301)
  - For UEK5 kernel-uek-base-4.14.0-1.el7uek.x86_64.rpm and later build.


author: Ethan Zhao <ethan.zhao@oracle.com> - 20171128-58.git17e62881.0.1.el7
changelog:
  - Update ql2600_fw.bin ql2700_fw.bin ql8300_fw.bin to 8.07.00 (Orabug: 27160935)
  - Merge latest upstream change (Orabug: 27210871)
  - Fix cxgb4 symlinks (Orabug: 27223984)
  - Pack iwl* FW files as separate packages (Orabug: 27174930)
  - Bump release number to avoid conflict with existing product build (Orabug: 27256604)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20180507-63.git0df406af.0.1.el7
changelog:
  - Rebase to latest upstream linux-firmware.
  - Don't add linux-nano-firmware.list to rpm.
  - Remove the temporary files at the cleanup
  - Bump release number.


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20180906-999.git85c5d90f.el7
changelog:
  - Rebase to latest upstream linux-firmware.
  - Sync with RHEL linux-firmware-20180529-66.git7518922.el7


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20181031-999.git1baa3486.el7
changelog:
  - Rebase to latest upstream linux-firmware.
  - Sync with RHEL linux-firmware-20180911-69.git85c5d90.el7


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20230516-999.20.git6c9e0ed5.el8
changelog:
  - cd72938cb480 linux-firmware: Update AMD fam17h cpu microcode
  - 92624e57af69 linux-firmware: Update AMD cpu microcode


author: Jack Vogel <jack.vogel@oracle.com> - 20230516-999.22.git6c9e0ed5.el8
changelog:
  - remove amd-ucode/README (Orabug: 35645306)
  - Resolves "Zenbleed" (Orabug: 35650345) {CVE-2023-20593}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20230516-999.25.git6c9e0ed5.el8
changelog:
  - Add missing amd-ucode/ files to nano and core rpm (Orabug: 35642190)
  - Add posttrans scriptlet to reload microcode on AMD (Orabug: 35636951)
  - Recreate initramfs for AMD systems (Orabug: 35636951)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20230516-999.26.git6c9e0ed5.el8
changelog:
  - Run dracut -f in %posttrans instead of %post (Orabug: 35661938)
  - Drop latest AMD microcode commits to family 19 file to include Milan microcode but not Genoa (Orabug: 35708511)


author: Samasth Norway Ananda <samasth.norway.ananda@oracle.com> - 20231025-999.28.git4ee01756.el8
changelog:
  - Rebase to upstream and contains AMD fix (Orabug: 35933859)
  - Add some iwlwifi-gl* files to be included to rpm package (Orabug: 35933859)


author: Samasth Norway Ananda <samasth.norway.ananda@oracle.com> - 20231102-999.29.git2b304bfe.el8
changelog:
  - Rebase to latest upstream (Orabug: 35978299)
  - Update AMD Genoa microcode from upstream commit (Orabug: 35965948)


author: Jack Vogel <jack.vogel@oracle.com> - 20230516-999.22.git6c9e0ed5.el8
changelog:
  - remove amd-ucode/README [Orabug: 35645306]
  - Resolves "Zenbleed" [Orabug: 35650345] {CVE-2023-20593}


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20230516-999.25.git6c9e0ed5.el8
changelog:
  - Add missing amd-ucode/ files to nano and core rpm [Orabug: 35642190]
  - Add posttrans scriptlet to reload microcode on AMD [Orabug: 35636951]
  - Recreate initramfs for AMD systems [Orabug: 35636951]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20230516-999.26.git6c9e0ed5.el8
changelog:
  - Run dracut -f in %posttrans instead of %post [Orabug: 35661938]
  - Drop latest AMD microcode commits to family 19 file to include Milan microcode but not Genoa [Orabug: 35708511]


author: Samasth Norway Ananda <samasth.norway.ananda@oracle.com> - 20231025-999.28.git4ee01756.el8
changelog:
  - Rebase to upstream and contains AMD fix [Orabug: 35933859]
  - Add some iwlwifi-gl* files to be included to rpm package [Orabug: 35933859]


author: Samasth Norway Ananda <samasth.norway.ananda@oracle.com> - 20231102-999.29.git2b304bfe.el8
changelog:
  - Rebase to latest upstream [Orabug: 35978299]
  - Update AMD Genoa microcode from upstream commit [Orabug: 35965948]


author: Samasth Norway Ananda <samasth.norway.ananda@oracle.com> - 20240122-999.31.gitbf0987d3.el8
changelog:
  - Rebase to latest upstream [Orabug: 36174455]
  - Remove python3 dependency for linux-firmware [Orabug: 36067969]
  - Ignore duplicates as we don't have rdfind installed [Orabug: 36242384]
  - Avoid conflicts when upgrading from OL7 to OL8 [Orabug: 36077380]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20201016-999.6.git58d41d0f.el8
changelog:
  - BUILDINFO: commit=35dfe8d14ecd8d2488be7528619672227a57cb08
  - Rebase to latest upstream linux-firmware


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20201217-999.7.git7455a360.el8
changelog:
  - BUILDINFO: commit=b23c4760f2ebe58829ad905dc3bf471df0128066
  - Sync to latest to get fix for CVE-2020-12321 linux-firmware: hardware: buffer overflow in bluetooth firmware (bz# 62321)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> - 20211203-999.9.1.gitb0e898fb.el8
changelog:
  - Make iwl7260-firmware to depend on iwlax2xx-firmware
  - Update AMD family 19h microcode for SPAMD-8000-24 and SPAMD-8001-MP CPU faults (Orabug: 33850583)


author: Jie Kang <jkang@redhat.com> - 1.2.1-3
changelog:
  - Remove osgiversion-maven-plugin build requirement
  - Remove javadoc plugin not needed in Fedora builds


author: Xin Long <lxin@redhat.com> - 2.11-3
changelog:
  - Deal with warnings under gcc 8
  - Call va_end after va_copy in json_vsprintf
  - Fix bogus date in jansson.spec


author: Björn Esser <besser82@fedoraproject.org> - 0.13-3
changelog:
  - Add upstream patch for adding size_t json_c_object_sizeof()
  - Enable partial multi-threaded support


author: Anna Khaitovich <akhaitov@redhat.com> - 0.13.1-0.3
changelog:
  - Don't package empty /usr/share/doc/json-c
  - Resolves: rhbz#1741076
  - Do not use --enable-rdrand
  - Resolves: rhbz#1806532


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.2.1.el8uek]
changelog:
  - x86/mce: Restart the system when LMCE UE error occurs (Thomas Tai)  [Orabug: 31218859]  
  - media: xirlink_cit: add missing descriptor sanity checks (Johan Hovold)  [Orabug: 31213764]  {CVE-2020-11668} 
  - media: ov519: add missing endpoint sanity checks (Johan Hovold)  [Orabug: 31213755]  {CVE-2020-11608} 
  - x86/microcode/AMD: Increase microcode PATCH_MAX_SIZE (John Allen)  [Orabug: 31213533]  
  - media: stv06xx: add missing descriptor sanity checks (Johan Hovold)  [Orabug: 31200576]  {CVE-2020-11609} 
  - rds: Fix use-after-free in rds_ib_free_caches (Hans Westgaard Ry)  [Orabug: 31200768]  
  - net/rds: Fix MR reference counting problem (Ka-Cheong Poon)  [Orabug: 31130194]  
  - net/rds: Replace struct rds_mr's r_refcount with struct kref (Ka-Cheong Poon)  [Orabug: 31130194]  
  - ctf: discard CTF from the vDSO (Nick Alcock)  [Orabug: 31194036]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.2.2.el8uek]
changelog:
  - scsi: qla2xxx: Move free of fcport out of interrupt context (Joe Carnuccio)  [Orabug: 31225231]  
  - xfs: move inode flush to the sync workqueue (Darrick J. Wong)  [Orabug: 31132665]  
  - arm64: Kconfig: Enable NODES_SPAN_OTHER_NODES config for NUMA (Hoan Tran)  [Orabug: 31049202]  
  - scsi: bnx2fc: timeout calculation invalid for bnx2fc_eh_abort() (Laurence Oberman)  [Orabug: 31207643]  
  - jbd2: disable CONFIG_JBD2_DEBUG (Junxiao Bi)  [Orabug: 31264694]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.3.0.el8uek]
changelog:
  - NFSv4.0: nfs4_do_fsinfo() should not do implicit lease renewals (Robert Milkowski)  [Orabug: 31304406]  
  - NFSv4: try lease recovery on NFS4ERR_EXPIRED (Robert Milkowski)  [Orabug: 31304406]  
  - btrfs: Don't submit any btree write bio if the fs has errors (Qu Wenruo)  [Orabug: 31265336]  {CVE-2019-19377} {CVE-2019-19377}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.3.1.el8uek]
changelog:
  - intel_idle: Use ACPI _CST for processor models without C-state tables (Rafael J. Wysocki)  [Orabug: 31332120]  
  - ACPI: processor: Export acpi_processor_evaluate_cst() (Rafael J. Wysocki)  [Orabug: 31332120]  
  - ACPI: processor: Clean up acpi_processor_evaluate_cst() (Rafael J. Wysocki)  [Orabug: 31332120]  
  - ACPI: processor: Introduce acpi_processor_evaluate_cst() (Rafael J. Wysocki)  [Orabug: 31332120]  
  - ACPI: processor: Export function to claim _CST control (Rafael J. Wysocki)  [Orabug: 31332120]  
  - rds: ib: Fix dysfunctional long address resolve timeout (Håkon Bugge)  [Orabug: 31302704]  
  - KVM: x86: Revert "KVM: X86: Fix fpu state crash in kvm guest" (Sean Christopherson)  [Orabug: 31333676]  
  - KVM: x86: Ensure guest's FPU state is loaded when accessing for emulation (Sean Christopherson)  [Orabug: 31333676]  
  - KVM: x86: Handle TIF_NEED_FPU_LOAD in kvm_{load,put}_guest_fpu() (Sean Christopherson)  [Orabug: 31333676]  
  - net: dsa: Do not leave DSA master with NULL netdev_ops (Florian Fainelli)  [Orabug: 30456791]  
  - Revert "dsa: disable module unloading for ARM64" (Allen Pais)  [Orabug: 30456791]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.3.2.el8uek]
changelog:
  - USB: core: Fix free-while-in-use bug in the USB S-Glibrary (Alan Stern)  [Orabug: 31350962]  {CVE-2020-12464} 
  - mt76: fix array overflow on receiving too many fragments for a packet (Felix Fietkau)  [Orabug: 31350952]  {CVE-2020-12465} 
  - mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Qing Xu)  [Orabug: 31350929]  {CVE-2020-12653} 
  - block, bfq: fix use-after-free in bfq_idle_slice_timer_body (Zhiqiang Liu)  [Orabug: 31350910]  {CVE-2020-12657} 
  - xsk: Add missing check on user supplied headroom size (Magnus Karlsson)  [Orabug: 31350732]  {CVE-2020-12659} 
  - mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Qing Xu)  [Orabug: 31350513]  {CVE-2020-12654} 
  - xen/manage: enable C_A_D to force reboot (Dongli Zhang)  [Orabug: 31387411]  
  - KVM: x86: Fixes posted interrupt check for IRQs delivery modes (Suravee Suthikulpanit)  [Orabug: 31316437]  
  - Revert "Revert "nvme_fc: add module to ops template to allow module references"" (James Smart)  [Orabug: 31377552]  
  - uek-rpm: Move grub boot menu update to posttrans stage. (Somasundaram Krishnasamy)  [Orabug: 31358097]  
  - KVM: SVM: Fix potential memory leak in svm_cpu_init() (Miaohe Lin)  [Orabug: 31350455]  {CVE-2020-12768}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.4.0.el8uek]
changelog:
  - bnxt_en: Fix accumulation of bp->net_stats_prev. (Vijayendra Suman)  [Orabug: 31390687]  
  - xfs: add agf freeblocks verify in xfs_agf_verify (Zheng Bin)  [Orabug: 31350920]  {CVE-2020-12655} 
  - scsi: sg: add sg_remove_request in sg_write (Wu Bo)  [Orabug: 31350695]  {CVE-2020-12770} 
  - PCI/AER: Enable reporting for ports enumerated after AER driver registration (Thomas Tai)  [Orabug: 31401801]  
  - A/A Bonding: No need to call flush rdmaip_wq in rdmaip_cleanup() (Ka-Cheong Poon)  [Orabug: 31378706]  
  - net/rds: suppress memory allocation failure reports (Manjunath Patil)  [Orabug: 31398437]  
  - locks: reinstate locks_delete_block optimization (Linus Torvalds)  [Orabug: 31356246]  {CVE-2019-19769} 
  - locks: fix a potential use-after-free problem when wakeup a waiter (yangerkun)  [Orabug: 31356246]  {CVE-2019-19769} {CVE-2019-19769}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.4.1.el8uek]
changelog:
  - uek-rpm: disable CONFIG_IP_PNP (Anjali Kulkarni)  [Orabug: 31454844]  
  - netfilter: ipset: Fix forceadd evaluation path (Jozsef Kadlecsik)  [Orabug: 31104176]  
  - scsi: megaraid_sas: Update driver version to 07.714.04.00-rc1 (Chandrakanth Patil)  [Orabug: 31481642]  
  - scsi: megaraid_sas: TM command refire leads to controller firmware crash (Sumit Saxena)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Replace undefined MFI_BIG_ENDIAN macro with __BIG_ENDIAN_BITFIELD macro (Shivasharan S)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Remove IO buffer hole detection logic (Sumit Saxena)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Limit device queue depth to controller queue depth (Kashyap Desai)  [Orabug: 31481642]  
  - scsi: megaraid: make two symbols static in megaraid_sas_base.c (Jason Yan)  [Orabug: 31481642]  
  - scsi: megaraid: make some symbols static in megaraid_sas_fusion.c (Jason Yan)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 31481642]  
  - scsi: megaraid_sas: fix indentation issue (Colin Ian King)  [Orabug: 31481642]  
  - scsi: megaraid_sas: fixup MSIx interrupt setup during resume (Hannes Reinecke)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Update driver version to 07.713.01.00-rc1 (Anand Lodnoor)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Limit the number of retries for the IOCTLs causing firmware fault (Anand Lodnoor)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Re-Define enum DCMD_RETURN_STATUS (Anand Lodnoor)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Do not set HBA Operational if FW is not in operational state (Anand Lodnoor)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Do not kill HBA if JBOD Seqence map or RAID map is disabled (Anand Lodnoor)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Do not kill host bus adapter, if adapter is already dead (Anand Lodnoor)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Update optimal queue depth for SAS and NVMe devices (Anand Lodnoor)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Set no_write_same only for Virtual Disk (Anand Lodnoor)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Reset adapter if FW is not in READY state after device resume (Anand Lodnoor)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Make poll_aen_lock static (YueHaibing)  [Orabug: 31481642]  
  - scsi: megaraid_sas: remove unused variables 'debugBlk','fusion' (zhengbin)  [Orabug: 31481642]  
  - scsi: megaraid_sas: Unique names for MSI-X vectors (Chandrakanth Patil)  [Orabug: 31481642]  
  - x86/speculation: Add Ivy Bridge to affected list (Josh Poimboeuf)  [Orabug: 31352779]  {CVE-2020-0543} 
  - x86/speculation: Add SRBDS vulnerability and mitigation documentation (Mark Gross)  [Orabug: 31352779]  {CVE-2020-0543} 
  - x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Mark Gross)  [Orabug: 31352779]  {CVE-2020-0543} 
  - x86/cpu: Add 'table' argument to cpu_matches() (Mark Gross)  [Orabug: 31352779]  {CVE-2020-0543} 
  - x86/cpu: Add a steppings field to struct x86_cpu_id (Mark Gross)  [Orabug: 31352779]  {CVE-2020-0543} 
  - x86/speculation/spectre_v2: Exclude Zhaoxin CPUs from SPECTRE_V2 (Tony W Wang-oc)  [Orabug: 31352779]  {CVE-2020-0543} 
  - netlabel: cope with NULL catmap (Paolo Abeni)  [Orabug: 31350489]  {CVE-2020-10711} 
  - xfs: fix freeze hung (Junxiao Bi)  [Orabug: 31430850]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.4.2.el8uek]
changelog:
  - UEK6 compiler warning for /net/rds/ib.c (Sharath Srinivasan)  [Orabug: 31489529]  
  - UEK6 compiler warning for /net/rds/send.c (Sharath Srinivasan)  [Orabug: 31489529]  
  - Fix up two build warnings in the UEK6 GA tree (Jack Vogel)  [Orabug: 31489333]  
  - drivers/scsi/scsi_scan.c Fix the compiler warning. (Sudhakar Panneerselvam)  [Orabug: 31489322]  
  - x86/retpoline: Fix retpoline unwind (Peter Zijlstra)  [Orabug: 31077463] [Orabug: 31489320]  
  - x86: Change {JMP,CALL}_NOSPEC argument (Peter Zijlstra)  [Orabug: 31077463] [Orabug: 31489320]  
  - x86: Simplify retpoline declaration (Peter Zijlstra)  [Orabug: 31077463] [Orabug: 31489320]  
  - x86/speculation: Change STUFF_RSB to work with objtool (Alexandre Chartre)  [Orabug: 31077463] [Orabug: 31489320]  
  - x86/speculation: Change FILL_RETURN_BUFFER to work with objtool (Peter Zijlstra)  [Orabug: 31077463] [Orabug: 31489320]  
  - x86/unwind: Introduce UNWIND_HINT_EMPTY_ASM (Alexandre Chartre)  [Orabug: 31077463] [Orabug: 31489320]  
  - objtool: Add support for intra-function calls (Alexandre Chartre)  [Orabug: 31077463] [Orabug: 31489320]  
  - objtool: Remove INSN_STACK (Peter Zijlstra)  [Orabug: 31077463] [Orabug: 31489320]  
  - objtool: Make handle_insn_ops() unconditional (Peter Zijlstra)  [Orabug: 31077463] [Orabug: 31489320]  
  - objtool: Rework allocating stack_ops on decode (Peter Zijlstra)  [Orabug: 31077463] [Orabug: 31489320]  
  - objtool: UNWIND_HINT_RET_OFFSET should not check registers (Alexandre Chartre)  [Orabug: 31077463] [Orabug: 31489320]  
  - objtool: is_fentry_call() crashes if call has no destination (Alexandre Chartre)  [Orabug: 31077463] [Orabug: 31489320]  
  - objtool: Uniquely identify alternative instruction groups (Alexandre Chartre)  [Orabug: 31077463] [Orabug: 31489320]  
  - objtool: Remove check preventing branches within alternative (Julien Thierry)  [Orabug: 31077463] [Orabug: 31489320]  
  - objtool: Introduce HINT_RET_OFFSET (Peter Zijlstra)  [Orabug: 31077463] [Orabug: 31489320]  
  - objtool: Support multiple stack_op per instruction (Julien Thierry)  [Orabug: 31077463] [Orabug: 31489320]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.4.3.el8uek]
changelog:
  - NFS: replace cross device check in copy_file_range (Olga Kornievskaia)  [Orabug: 31507615]  
  - rds: Fix potential use after free in rds_ib_inc_free (Hans Westgaard Ry)  [Orabug: 31504052]  
  - perf/smmuv3: Allow sharing MMIO registers with the SMMU driver (Jean-Philippe Brucker)  [Orabug: 31422283]  
  - perf/smmuv3: use devm_platform_ioremap_resource() to simplify code (YueHaibing)  [Orabug: 31422283]  
  - ACPI/IORT: Fix PMCG node single ID mapping handling (Tuan Phan)  [Orabug: 31422283]  
  - uek-rpm: Increase CONFIG_NODES_SHIFT from 2 to 3 (Dave Kleikamp)  [Orabug: 31422283]  
  - perf: avoid breaking KABI by reusing enum (Dave Kleikamp)  [Orabug: 31422283]  
  - uek-rpm: update aarch64 configs for Ampere eMAG2 (Dave Kleikamp)  [Orabug: 31422283]  
  - perf: arm_dmc620: Update ACPI ID. (Tuan Phan)  [Orabug: 31422283]  
  - perf: arm_dsu: Support ACPI mode. (Tuan Phan)  [Orabug: 31422283]  
  - perf: arm_dsu: Allow IRQ to be shared among devices. (Tuan Phan)  [Orabug: 31422283]  
  - perf: arm_cmn: improve and make it work on 2P. (Tuan Phan)  [Orabug: 31422283]  
  - Perf: arm-cmn: Allow irq to be shared. (Tuan Phan)  [Orabug: 31422283]  
  - BACKPORT: arm64: acpi: Make apei_claim_sea() synchronise with APEI's irq work (James Morse)  [Orabug: 31422283]  
  - BACKPORT: ACPI / APEI: Kick the memory_failure() queue for synchronous errors (James Morse)  [Orabug: 31422283]  
  - BACKPORT: mm/memory-failure: Add memory_failure_queue_kick() (James Morse)  [Orabug: 31422283]  
  - perf: Add ARM DMC-620 PMU driver. (Tuan Phan)  [Orabug: 31422283]  
  - BACKPORT: WIP: perf/arm-cmn: Add ACPI support (Robin Murphy)  [Orabug: 31422283]  
  - BACKPORT: WIP: perf: Add Arm CMN-600 PMU driver (Robin Murphy)  [Orabug: 31422283]  
  - BACKPORT: perf: Add Arm CMN-600 DT binding (Robin Murphy)  [Orabug: 31422283]  
  - net/rds: NULL pointer de-reference in rds_ib_add_one() (Ka-Cheong Poon)  [Orabug: 30984983]  
  - mm: Fix mremap not considering huge pmd devmap (Fan Yang)  [Orabug: 31452396]  {CVE-2020-10757} {CVE-2020-10757}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.4.4.el8uek]
changelog:
  - KVM: VMX: Explicitly clear RFLAGS.CF and RFLAGS.ZF in VM-Exit RSB path (Sean Christopherson)  [Orabug: 31536904]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.4.5.el8uek]
changelog:
  - IB/sa: Resolv use-after-free in ib_nl_make_request() (Divya Indi)  [Orabug: 31631527]  
  - certs: Remove Oracle cert compiled into the kernel (Eric Snowberg)  [Orabug: 31555595]  
  - acpi: disallow loading configfs acpi tables when locked down (Jason A. Donenfeld)  [Orabug: 31642981]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.4.6.el8uek]
changelog:
  - Revert "uek-rpm: Move grub boot menu update to posttrans stage." (Somasundaram Krishnasamy)  [Orabug: 31358097]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.5.0.el8uek]
changelog:
  - ctf: support ld --ctf-variables, if available (Nick Alcock)  [Orabug: 31535069]  
  - ctf: adjust to upcoming binutils ctf_link_add_ctf API change (Nick Alcock)  [Orabug: 31535069]  
  - bpf: Fix up bpf_skb_adjust_room helper's skb csum setting (Daniel Borkmann)  [Orabug: 31519461]  
  - aarch64: Enable thermal config for RPi4 (Vijay Kumar)  [Orabug: 31518062]  
  - thermal: Add BCM2711 thermal driver (Stefan Wahren)  [Orabug: 31518062]  
  - x86/mitigations: reset default value for srbds_mitigation (Mihai Carabas)  [Orabug: 31515046]  
  - x86/cpu: clear X86_BUG_SRBDS before late loading (Mihai Carabas)  [Orabug: 31515046]  
  - x86/mitigations: update MSRs on all CPUs for SRBDS (Mihai Carabas)  [Orabug: 31515046]  
  - acpi: disallow loading configfs acpi tables when locked down (Jason A. Donenfeld)  [Orabug: 31493185]  
  - media: rc: prevent memory leak in cx23888_ir_probe (Navid Emamdoost)  [Orabug: 31351669]  {CVE-2019-19054}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.5.1.el8uek]
changelog:
  - x86/microcode: do not modify sibling mask during late update (Mihai Carabas)  [Orabug: 31605044]  
  - x86/speculation: Prevent rogue cross-process SSBD shutdown (Anthony Steinhauser)  [Orabug: 31557900]  {CVE-2020-10768} 
  - x86/kvm/hyper-v: move VMX controls sanitization out of nested_enable_evmcs() (Vitaly Kuznetsov)  [Orabug: 31553477]  
  - x86/kvm/hyper-v: remove stale evmcs_already_enabled check from nested_enable_evmcs() (Vitaly Kuznetsov)  [Orabug: 31553477]  
  - USB: pci-quirks: Add Raspberry Pi 4 quirk (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - PCI: brcmstb: Wait for Raspberry Pi's firmware when present (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - firmware: raspberrypi: Introduce vl805 init routine (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - soc: bcm2835: Add notify xHCI reset property (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - PCI: brcmstb: Disable L0s component of ASPM if requested (Jim Quinlan)  [Orabug: 31527659]  
  - PCI: brcmstb: Fix window register offset from 4 to 8 (Jim Quinlan)  [Orabug: 31527659]  
  - PCI: brcmstb: Don't clk_put() a managed clock (Jim Quinlan)  [Orabug: 31527659]  
  - PCI: brcmstb: Assert fundamental reset on initialization (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - i2c: brcmstb: Fix handling of optional interrupt (Dave Stevenson)  [Orabug: 31527659]  
  - ARM: dts: bcm283x: Disable dsi0 node (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - pwm: bcm2835: Dynamically allocate base (Florian Fainelli)  [Orabug: 31527659]  
  - ARM: bcm2835_defconfig: Enable fixed-regulator (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - ARM: dts: bcm2711: Add vmmc regulator in emmc2 (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - ARM: dts: bcm2711: Update expgpio's GPIO labels (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - i2c: drivers: Use generic definitions for bus frequencies (Andy Shevchenko)  [Orabug: 31527659]  
  - i2c: core: Provide generic definitions for bus frequencies (Andy Shevchenko)  [Orabug: 31527659]  
  - mmc: sdhci: iproc: Add custom set_power() callback for bcm2711 (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - mmc: sdhci: am654: Use sdhci_set_power_and_voltage() (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - mmc: sdhci: at91: Use sdhci_set_power_and_voltage() (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - mmc: sdhci: arasan: Use sdhci_set_power_and_voltage() (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - mmc: sdhci: Introduce sdhci_set_power_and_bus_voltage() (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - irqchip/bcm2835: Quiesce IRQs left enabled by bootloader (Lukas Wunner)  [Orabug: 31527659]  
  - usb: xhci: Enable LPM for VIA LABS VL805 (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - arm64: bcm2835: Drop select of nonexistent HAVE_ARM_ARCH_TIMER (Geert Uytterhoeven)  [Orabug: 31527659]  
  - ARM: dts: bcm2711: Move emmc2 into its own bus (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - ARM: dts: bcm2711-rpi-4-b: Add SoC GPIO labels (Stefan Wahren)  [Orabug: 31527659]  
  - ARM: bcm2835_defconfig: add support for Raspberry Pi4 (Marek Szyprowski)  [Orabug: 31527659]  
  - ARM: bcm2835_defconfig: Explicitly restore CONFIG_DEBUG_FS (Stefan Wahren)  [Orabug: 31527659]  
  - ARM: dts: bcm2711: Add pcie0 alias (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - ARM: dts: bcm283x: Add missing properties to the PWR LED (Stefan Wahren)  [Orabug: 31527659]  
  - PCI: brcmstb: Fix build on 32bit ARM platforms with older compilers (Marek Szyprowski)  [Orabug: 31527659]  
  - net: bcmgenet: Clear ID_MODE_DIS in EXT_RGMII_OOB_CTRL when not needed (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - net: bcmgenet: reduce severity of missing clock warnings (Jeremy Linton)  [Orabug: 31527659]  
  - pinctrl: bcm2835: Add support for all GPIOs on BCM2711 (Stefan Wahren)  [Orabug: 31527659]  
  - pinctrl: bcm2835: Refactor platform data (Stefan Wahren)  [Orabug: 31527659]  
  - pinctrl: bcm2835: Drop unused define (Stefan Wahren)  [Orabug: 31527659]  
  - dma-contiguous: CMA: give precedence to cmdline (Nicolas Saenz Julienne)  [Orabug: 31527659]  
  - dt-bindings: brcm,avs-ro-thermal: Fix binding check issues (Stefan Wahren)  [Orabug: 31527659]  
  - dt-bindings: Add Broadcom AVS RO thermal (Stefan Wahren)  [Orabug: 31527659]  
  - serial: 8250_bcm2835aux: Document struct bcm2835aux_data (Lukas Wunner)  [Orabug: 31527659]  
  - serial: 8250_bcm2835aux: Use generic remapping code (Lukas Wunner)  [Orabug: 31527659]  
  - serial: 8250_bcm2835aux: Allocate uart_8250_port on stack (Lukas Wunner)  [Orabug: 31527659]  
  - serial: 8250_bcm2835aux: Suppress register_port error on -EPROBE_DEFER (Lukas Wunner)  [Orabug: 31527659]  
  - serial: 8250_bcm2835aux: Suppress clk_get error on -EPROBE_DEFER (Phil Elwell)  [Orabug: 31527659]  
  - spi: bcm2835: Raise maximum number of slaves to 4 (Lukas Wunner)  [Orabug: 31527659]  
  - Bluetooth: hci_bcm: Drive RTS only for BCM43438 (Stefan Wahren)  [Orabug: 31527659]  
  - Bluetooth: hci_bcm: Add device-tree compatible for BCM4329 (Dmitry Osipenko)  [Orabug: 31527659]  
  - iommu/dma: Rationalise types for DMA masks (Robin Murphy)  [Orabug: 31527659]  
  - hwrng: iproc-rng200 - Add support for BCM2711 (Stefan Wahren)  [Orabug: 31527659]  
  - dt-bindings: rng: add BCM2711 RNG compatible (Stefan Wahren)  [Orabug: 31527659]  
  - Bluetooth: hci_bcm: Support pcm params in dts (Abhishek Pandit-Subedi)  [Orabug: 31527659]  
  - Bluetooth: btbcm: Support pcm configuration (Abhishek Pandit-Subedi)  [Orabug: 31527659]  
  - Bluetooth: hci_bcm: Disallow set_baudrate for BCM4354 (Abhishek Pandit-Subedi)  [Orabug: 31527659]  
  - Bluetooth: btbcm: Add entry for BCM4335A0 UART bluetooth (Mohammad Rasim)  [Orabug: 31527659]  
  - Bluetooth: hci_bcm: Add compatible string for BCM43540 (Abhishek Pandit-Subedi)  [Orabug: 31527659]  
  - iommu/dma-iommu: Use the dev->coherent_dma_mask (Tom Murphy)  [Orabug: 31527659]  
  - KEYS: Increase system_extra_certificate size to 8192 bytes (Stephen Brennan)  [Orabug: 31512725]  
  - vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson)  [Orabug: 31439668]  {CVE-2020-12888} 
  - vfio-pci: Invalidate mmaps and block MMIO access on disabled memory (Alex Williamson)  [Orabug: 31439668]  {CVE-2020-12888} {CVE-2020-12888} 
  - vfio-pci: Fault mmaps to enable vma tracking (Alex Williamson)  [Orabug: 31439668]  {CVE-2020-12888} 
  - vfio/type1: Support faulting PFNMAP vmas (Alex Williamson)  [Orabug: 31439668]  {CVE-2020-12888} 
  - vfio/type1: Fix VA->PA translation for PFNMAP VMAs in vaddr_get_pfn() (Sean Christopherson)  [Orabug: 31439668]  {CVE-2020-12888} 
  - scsi: smartpqi: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 31595670]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.5.2.el8uek]
changelog:
  - drm/i915/gt: Correct mistake in cherry-pick (Jack Vogel)  [Orabug: 31211659]  
  - efi/x86: Add TPM related EFI tables to unencrypted mapping checks (Tom Lendacky)  [Orabug: 31627285]  
  - ocfs2: change slot number type s16 to u16 (Junxiao Bi)  [Orabug: 31480603]  
  - ocfs2: fix value of OCFS2_INVALID_SLOT (Junxiao Bi)  [Orabug: 31480603]  
  - ocfs2: fix panic on nfs server over ocfs2 (Junxiao Bi)  [Orabug: 31480603]  
  - ocfs2: load global_inode_alloc (Junxiao Bi)  [Orabug: 31480603]  
  - ocfs2: avoid inode removal while nfsd is accessing it (Junxiao Bi)  [Orabug: 31480603]  
  - scsi: qla2xxx: Fix a condition in qla2x00_find_all_fabric_devs() (Dan Carpenter)  [Orabug: 31610239]  
  - scsi: qla2xxx: Keep initiator ports after RSCN (Roman Bolshakov)  [Orabug: 31610239]  
  - scsi: qla2xxx: Set NVMe status code for failed NVMe FCP request (Daniel Wagner)  [Orabug: 31610239]  
  - scsi: qla2xxx: Remove return value from qla_nvme_ls() (Daniel Wagner)  [Orabug: 31610239]  
  - scsi: qla2xxx: Remove an unused function (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix endianness annotations in source files (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix endianness annotations in header files (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Use make_handle() instead of open-coding it (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Cast explicitly to uint16_t / uint32_t (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Change {RD,WRT}_REG_*() function names from upper case into lower case (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix the code that reads from mailbox registers (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Use register names instead of register offsets (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Change two hardcoded constants into offsetof() / sizeof() expressions (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Increase the size of struct qla_fcp_prio_cfg to FCP_PRIO_CFG_SIZE (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Make a gap in struct qla2xxx_offld_chain explicit (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Add more BUILD_BUG_ON() statements (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Sort BUILD_BUG_ON() statements alphabetically (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Simplify the functions for dumping firmware (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix spelling of a variable name (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Make qlafx00_process_aen() return void (Jason Yan)  [Orabug: 31610239]  
  - scsi: qla2xxx: Use true, false for ha->fw_dumped (Jason Yan)  [Orabug: 31610239]  
  - scsi: qla2xxx: Use true, false for need_mpi_reset (Jason Yan)  [Orabug: 31610239]  
  - scsi: qla2xxx: Make qla_set_ini_mode() return void (Jason Yan)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix failure message in qlt_disable_vha() (Viacheslav Dubeyko)  [Orabug: 31610239]  
  - scsi: qla2xxx: make 1-bit bit-fields unsigned int (Colin Ian King)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix MPI failure AEN (8200) handling (Arun Easi)  [Orabug: 31610239]  
  - scsi: qla2xxx: Use ARRAY_SIZE() instead of open-coding it (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Split qla2x00_configure_local_loop() (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix regression warnings (Nilesh Javali)  [Orabug: 31610239]  
  - scsi: qla2xxx: Remove non functional code (Daniel Wagner)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix I/Os being passed down when FC device is being deleted (Arun Easi)  [Orabug: 31610239]  
  - scsi: qla2xxx: add ring buffer for tracing debug logs (Rajan Shanmugavelu)  [Orabug: 31610239]  
  - scsi: qla2xxx: Update driver version to 10.01.00.25-k (Himanshu Madhani)  [Orabug: 31610239]  
  - scsi: qla2xxx: Set Nport ID for N2N (Quinn Tran)  [Orabug: 31610239]  
  - scsi: qla2xxx: Handle NVME status iocb correctly (Arun Easi)  [Orabug: 31610239]  
  - scsi: qla2xxx: Remove restriction of FC T10-PI and FC-NVMe (Quinn Tran)  [Orabug: 31610239]  
  - scsi: qla2xxx: Serialize fc_port alloc in N2N (Quinn Tran)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix NPIV instantiation after FW dump (Quinn Tran)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix RDP respond data format (Quinn Tran)  [Orabug: 31610239]  
  - scsi: qla2xxx: Force semaphore on flash validation failure (Quinn Tran)  [Orabug: 31610239]  
  - scsi: qla2xxx: add more FW debug information (Quinn Tran)  [Orabug: 31610239]  
  - scsi: qla2xxx: Update BPM enablement semantics. (Andrew Vasquez)  [Orabug: 31610239]  
  - scsi: qla2xxx: fix FW resource count values (Quinn Tran)  [Orabug: 31610239]  
  - scsi: qla2xxx: Use a dedicated interrupt handler for 'handshake-required' ISPs (Andrew Vasquez)  [Orabug: 31610239]  
  - scsi: qla2xxx: Return appropriate failure through BSG Interface (Michael Hernandez)  [Orabug: 31610239]  
  - scsi: qla2xxx: Improved secure flash support messages (Michael Hernandez)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix FCP-SCSI FC4 flag passing error (Quinn Tran)  [Orabug: 31610239]  
  - scsi: qla2xxx: Use FC generic update firmware options routine for ISP27xx (Giridhar Malavali)  [Orabug: 31610239]  
  - scsi: qla2xxx: Avoid setting firmware options twice in 24xx_update_fw_options. (Giridhar Malavali)  [Orabug: 31610239]  
  - scsi: qla2xxx: Add 16.0GT for PCI String (Himanshu Madhani)  [Orabug: 31610239]  
  - scsi: qla2xxx: Convert MAKE_HANDLE() from a define into an inline function (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix sparse warnings triggered by the PCI state checking code (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Suppress endianness complaints in qla2x00_configure_local_loop() (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Simplify the code for aborting SCSI commands (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix sparse warning reported by kbuild bot (Himanshu Madhani)  [Orabug: 31610239]  
  - scsi: qla2xxx: Update driver version to 10.01.00.24-k (Himanshu Madhani)  [Orabug: 31610239]  
  - scsi: qla2xxx: Use QLA_FW_STOPPED macro to propagate flag (Himanshu Madhani)  [Orabug: 31610239]  
  - scsi: qla2xxx: Add fixes for mailbox command (Himanshu Madhani)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix control flags for login/logout IOCB (Himanshu Madhani)  [Orabug: 31610239]  
  - scsi: qla2xxx: Save rscn_gen for new fcport (Himanshu Madhani)  [Orabug: 31610239]  
  - scsi: qla2xxx: Use correct ISP28xx active FW region (Quinn Tran)  [Orabug: 31610239]  
  - scsi: qla2xxx: Print portname for logging in qla24xx_logio_entry() (Joe Carnuccio)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix qla2x00_echo_test() based on ISP type (Joe Carnuccio)  [Orabug: 31610239]  
  - scsi: qla2xxx: Correction to selection of loopback/echo test (Joe Carnuccio)  [Orabug: 31610239]  
  - scsi: qla2xxx: Use endian macros to assign static fields in fwdump header (Joe Carnuccio)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix RDP response size (Himanshu Madhani)  [Orabug: 31610239]  
  - scsi: qla2xxx: Handle cases for limiting RDP response payload length (Joe Carnuccio)  [Orabug: 31610239]  
  - scsi: qla2xxx: Add deferred queue for processing ABTS and RDP (Joe Carnuccio)  [Orabug: 31610239]  
  - scsi: qla2xxx: Cleanup ELS/PUREX iocb fields (Joe Carnuccio)  [Orabug: 31610239]  
  - scsi: qla2xxx: Show correct port speed capabilities for RDP command (Himanshu Madhani)  [Orabug: 31610239]  
  - scsi: qla2xxx: Display message for FCE enabled (Himanshu Madhani)  [Orabug: 31610239]  
  - scsi: qla2xxx: Add vendor extended FDMI commands (Joe Carnuccio)  [Orabug: 31610239]  
  - scsi: qla2xxx: Add ql2xrdpenable module parameter for RDP (Joe Carnuccio)  [Orabug: 31610239]  
  - scsi: qla2xxx: Add vendor extended RDP additions and amendments (Joe Carnuccio)  [Orabug: 31610239]  
  - scsi: qla2xxx: Add changes in preparation for vendor extended FDMI/RDP (Joe Carnuccio)  [Orabug: 31610239]  
  - scsi: qla2xxx: Add endianizer macro calls to fc host stats (Joe Carnuccio)  [Orabug: 31610239]  
  - scsi: qla2xxx: Add sysfs node for D-Port Diagnostics AEN data (Joe Carnuccio)  [Orabug: 31610239]  
  - scsi: qla2xxx: Add beacon LED config sysfs interface (Joe Carnuccio)  [Orabug: 31610239]  
  - scsi: qla2xxx: Check locking assumptions at runtime in qla2x00_abort_srb() (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix a NULL pointer dereference in an error path (Bart Van Assche)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix warning after FC target reset (Viacheslav Dubeyko)  [Orabug: 31610239]  
  - scsi: qla2xxx: Fix issue with adapter's stopping state (Viacheslav Dubeyko)  [Orabug: 31610239]  
  - scsi: qla2xxx: Do not log message when reading port speed via sysfs (Ewan D. Milne)  [Orabug: 31610239]  
  - scsi: qla2xxx: Delete all sessions before unregister local nvme port (Quinn Tran)  [Orabug: 31610239]  
  - scsi: qla2xxx: check UNLOADING before posting async work (Martin Wilck)  [Orabug: 31610239]  
  - scsi: qla2xxx: set UNLOADING before waiting for session deletion (Martin Wilck)  [Orabug: 31610239]  
  - x86/{mce,mm}: Unmap the entire page if the whole page is affected and poisoned (Tony Luck)  [Orabug: 31601130]  
  - uek-rpm: aarch64: Streamline building 4K pages size kernel (Dave Kleikamp)  [Orabug: 31500678]  
  - kernel/relay.c: handle alloc_percpu returning NULL in relay_open (Daniel Axtens)  [Orabug: 31183397]  {CVE-2019-19462}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.5.3.el8uek]
changelog:
  - misc: pvpanic: add crash loaded event (zhenwei pi)  [Orabug: 31677096]  
  - misc: pvpanic: move bit definition to uapi header file (zhenwei pi)  [Orabug: 31677096]  
  - RDMA/netlink: Do not always generate an ACK for some netlink operations (Håkon Bugge)  [Orabug: 31666971]  
  - bnxt_en: Fix statistics counters issue during ifdown with older firmware. (Michael Chan)  [Orabug: 31660919]  
  - bnxt_en: Do not enable legacy TX push on older firmware. (Michael Chan)  [Orabug: 31660919]  
  - bnxt_en: Store the running firmware version code. (Michael Chan)  [Orabug: 31660919]  
  - uek-rpm: Disable secureboot signing for OL7 aarch64 (Somasundaram Krishnasamy)  [Orabug: 31645596]  
  - PCI: pciehp: Fix indefinite wait on sysfs requests (Lukas Wunner)  [Orabug: 31580249]  
  - x86/speculation: Avoid force-disabling IBPB based on STIBP and enhanced IBRS. (Anthony Steinhauser)  [Orabug: 31557802]  {CVE-2020-10767} 
  - fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Alexander Potapenko)  [Orabug: 31350635]  {CVE-2020-10732} 
  - rds/ib: Make i_{recv,send}_hdrs non-contigious (Hans Westgaard Ry)  [Orabug: 31648239]  
  - uek-rpm: disable CONFIG_CRYPTO_DEV_CAVIUM_ZIP (Dave Kleikamp)  [Orabug: 31667368]  
  - vfio-pci: protect remap_pfn_range() from simultaneous calls (Ankur Arora)  [Orabug: 31663628]  {CVE-2020-12888} {CVE-2020-12888} 
  - uek-rpm: drivers: enable VMD PCIe controller (Todd Vierling)  [Orabug: 31636283]  
  - Revert "uek-rpm: Move grub boot menu update to posttrans stage." (Somasundaram Krishnasamy)  [Orabug: 31689621]  
  - IB/sa: Resolv use-after-free in ib_nl_make_request() (Divya Indi)  [Orabug: 31689703]  
  - certs: Remove Oracle cert compiled into the kernel (Eric Snowberg)  [Orabug: 31689566]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.6.0.el8uek]
changelog:
  - RDMA/mlx5: Set MR cache limit for both PF and VF (Nikhil Krishna)  [Orabug: 31358080]  
  - rds: ib: Revert "net/rds: Avoid stalled connection due to CM REQ retries" (Håkon Bugge)  [Orabug: 31648138]  
  - rds: Clear reconnect pending bit (Håkon Bugge)  [Orabug: 31648138]  
  - RDMA/cm: Spurious WARNING triggered in cm_destroy_id() (Ka-Cheong Poon)  [Orabug: 31483278]  
  - RDMA/cm: Make sure the cm_id is in the IB_CM_IDLE state in destroy (Jason Gunthorpe)  [Orabug: 31483278]  
  - RDMA/cm: Allow ib_send_cm_sidr_rep() to be done under lock (Jason Gunthorpe)  [Orabug: 31483278]  
  - RDMA/cm: Allow ib_send_cm_rej() to be done under lock (Jason Gunthorpe)  [Orabug: 31483278]  
  - RDMA/cm: Allow ib_send_cm_drep() to be done under lock (Jason Gunthorpe)  [Orabug: 31483278]  
  - RDMA/cm: Allow ib_send_cm_dreq() to be done under lock (Jason Gunthorpe)  [Orabug: 31483278]  
  - RDMA/cm: Add some lockdep assertions for cm_id_priv->lock (Jason Gunthorpe)  [Orabug: 31483278]  
  - RDMA/cm: Add missing locking around id.state in cm_dup_req_handler (Jason Gunthorpe)  [Orabug: 31483278]  
  - RDMA/cm: Make the destroy_id flow more robust (Jason Gunthorpe)  [Orabug: 31483278]  
  - RDMA/cm: Remove a race freeing timewait_info (Jason Gunthorpe)  [Orabug: 31483278]  
  - RDMA/cm: Use refcount_t type for refcount variable (Danit Goldberg)  [Orabug: 31483278]  
  - bnxt_en: allow firmware to disable VLAN offloads (Michael Chan)   
  - bnxt_en: clean up VLAN feature bit handling (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Fix VLAN acceleration handling in bnxt_fix_features(). (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Implement ethtool -X to set indirection table. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Return correct RSS indirection table entries to ethtool -x. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Fill HW RSS table from the RSS logical indirection table. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Add helper function to return the number of RSS contexts. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Add logical RSS indirection table structure. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Fix up bnxt_get_rxfh_indir_size(). (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Set up the chip specific RSS table size. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: fix firmware message length endianness (Michael Chan)  [Orabug: 31663185]  
  - net: bnxt: Remove Comparison to bool in bnxt_ethtool.c (Jason Yan)  [Orabug: 31663185]  
  - bnxt_en: show only relevant ethtool stats for a TX or RX ring (Rajesh Ravi)  [Orabug: 31663185]  
  - bnxt_en: Split HW ring statistics strings into RX and TX parts. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Refactor the software ring counters. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Do not include ETH_FCS_LEN in the max packet length sent to fw. (Vasundhara Volam)  [Orabug: 31663185]  
  - bnxt_en: Improve TQM ring context memory sizing formulas. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Allocate TQM ring context memory according to fw specification. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Update firmware spec. to 1.10.1.33. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Return error when allocating zero size context memory. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Reset rings if ring reservation fails during open() (Vasundhara Volam)  [Orabug: 31663185]  
  - bnxt_en: Return error if bnxt_alloc_ctx_mem() fails. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Fix Priority Bytes and Packets counters in ethtool -S. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Process the NQ under NAPI continuous polling. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Simplify __bnxt_poll_cqs_done(). (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Handle all NQ notifications in bnxt_poll_p5(). (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Disable workaround for lost interrupts on 575XX B0 and newer chips. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Periodically check and remove aged-out ntuple filters (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Do not accept fragments for aRFS flow steering. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Remove the setting of dev_port. (Michael Chan)  [Orabug: 31663185]  
  - bnxt_en: Improve link up detection. (Michael Chan)  [Orabug: 31663185]  
  - RDMA/nldev: Provide MR statistics (Erez Alfasi)  [Orabug: 31079901]  
  - RDMA/mlx5: Return ODP type per MR (Erez Alfasi)  [Orabug: 31079901]  
  - RDMA/nldev: Allow different fill function per resource (Erez Alfasi)  [Orabug: 31079901]  
  - IB/mlx5: Introduce ODP diagnostic counters (Erez Alfasi)  [Orabug: 31079901]  
  - x86/reboot: Move up iommu_shutdown() before stop_other_cpus() (Saeed Mirzamohammadi)  [Orabug: 31542630]  
  - bcache: fix potential deadlock problem in btree_gc_coalesce (Zhiqiang Liu)  [Orabug: 31350643]  {CVE-2020-12771} 
  - selinux: properly handle multiple messages in selinux_netlink_send() (Paul Moore)  [Orabug: 31439365]  {CVE-2020-10751} 
  - Revert "zram: convert remaining CLASS_ATTR() to CLASS_ATTR_RO()" (Wade Mealing)  [Orabug: 31510722]  {CVE-2020-10781} 
  - Enable config option CONFIG_NFSD_V4_2_INTER_SSC (Dai Ngo)  [Orabug: 31535947]  
  - NFSD: Fix NFS server build errors (Chuck Lever)  [Orabug: 31535947]  
  - nfsd4: fix double free in nfsd4_do_async_copy() (Dan Carpenter)  [Orabug: 31535947]  
  - NFSD fixing possible null pointer derefering in copy offload (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFSD fix nfserro errno mismatch (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFSD: fix seqid in copy stateid (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFSv4.2 fix memory leak in nfs42_ssc_open (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFSv4: Make _nfs42_proc_copy_notify() static (YueHaibing)  [Orabug: 31535947]  
  - nfsv4: Move NFSPROC4_CLNT_COPY_NOTIFY to end of list (Trond Myklebust)  [Orabug: 31535947]  
  - NFSD: allow inter server COPY to have a STALE source server fh (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFSD add nfs4 inter ssc to nfsd4_copy (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFSD check stateids against copy stateids (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFSD fix mismatching type in nfsd4_set_netaddr (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFSD fill-in netloc4 structure (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFSD add COPY_NOTIFY operation (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFSD add ca_source_server<> to COPY (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFSD COPY_NOTIFY xdr (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFSv4.2 fix kfree in __nfs42_copy_file_range (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFS based on file size issue sync copy or fallback to generic copy offload (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFS: handle source server reboot (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFS: skip recovery of copy open on dest server (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFS: inter ssc open (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFS: add ca_source_server<> to COPY (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFS: add COPY_NOTIFY operation (Olga Kornievskaia)  [Orabug: 31535947]  
  - NFS NFSD: defining nl4_servers structure needed by both (Olga Kornievskaia)  [Orabug: 31535947]  
  - kvm: svm: Introduce GA Log tracepoint for AVIC (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - KVM: SVM: Inhibit APIC virtualization for X2APIC guest (Oliver Upton)  [Orabug: 31631367]  
  - KVM: SVM: allocate AVIC data structures based on kvm_amd module parameter (Paolo Bonzini)  [Orabug: 31631367]  
  - kvm: x86: svm: Fix NULL pointer dereference when AVIC not enabled (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - KVM: SVM: allow AVIC without split irqchip (Paolo Bonzini)  [Orabug: 31631367]  
  - kvm: ioapic: Lazy update IOAPIC EOI (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - kvm: ioapic: Refactor kvm_ioapic_update_eoi() (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - kvm: i8254: Deactivate APICv when using in-kernel PIT re-injection mode. (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - svm: Temporarily deactivate AVIC during ExtINT handling (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - svm: Deactivate AVIC when launching guest with nested SVM support (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - kvm: x86: hyperv: Use APICv update request interface (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - svm: Add support for dynamic APICv (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - kvm: x86: Introduce x86 ops hook for pre-update APICv (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - kvm: x86: Introduce APICv x86 ops for checking APIC inhibit reasons (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - KVM: svm: avic: Add support for dynamic setup/teardown of virtual APIC backing page (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - kvm: x86: svm: Add support to (de)activate posted interrupts (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - kvm: x86: Add APICv (de)activate request trace points (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - kvm: x86: Add support for dynamic APICv activation (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - KVM: x86: remove get_enable_apicv from kvm_x86_ops (Paolo Bonzini)  [Orabug: 31631367]  
  - kvm: x86: Introduce APICv inhibit reason bits (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - kvm: lapic: Introduce APICv update helper function (Suravee Suthikulpanit)  [Orabug: 31631367]  
  - KVM: X86: Drop KVM_APIC_SHORT_MASK and KVM_APIC_DEST_MASK (Peter Xu)  [Orabug: 31631367]  
  - KVM: SVM: Remove check if APICv enabled in SVM update_cr8_intercept() handler (Liran Alon)  [Orabug: 31631367]  
  - kvm: x86: Modify kvm_x86_ops.get_enable_apicv() to use struct kvm parameter (Suthikulpanit, Suravee)  [Orabug: 31631367]  
  - kvm: Increase KVM_USER_MEM_SLOTS for dense memory hotplug (Eric DeVolder)  [Orabug: 31694365]  
  - random32: update the net random state on interrupt and activity (Willy Tarreau)  [Orabug: 31698078]  {CVE-2020-16166} 
  - vgacon: Fix for missing check in scrollback handling (Yunhai Zhang)  [Orabug: 31705117]  {CVE-2020-14331} {CVE-2020-14331} 
  - net/rds: Incorrect WARN_ON() (Ka-Cheong Poon)  [Orabug: 31718014]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.6.1.el8uek]
changelog:
  - nfsd: apply umask on fs without ACL support (J. Bruce Fields)  [Orabug: 31779884]  {CVE-2020-24394} 
  - arm64/elf: Disable automatic READ_IMPLIES_EXEC for 64-bit address spaces (Kees Cook)  [Orabug: 31776626]  
  - arm32/64/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK (Kees Cook)  [Orabug: 31776626]  
  - arm32/64/elf: Add tables to document READ_IMPLIES_EXEC (Kees Cook)  [Orabug: 31776626]  
  - x86/elf: Disable automatic READ_IMPLIES_EXEC on 64-bit (Kees Cook)  [Orabug: 31776626]  
  - x86/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK (Kees Cook)  [Orabug: 31776626]  
  - x86/elf: Add table to document READ_IMPLIES_EXEC (Kees Cook)  [Orabug: 31776626]  
  - x86/mm: use max memory block size on bare metal (Daniel Jordan)  [Orabug: 31771277]  
  - drivers/base/memory.c: cache memory blocks in xarray to accelerate lookup (Scott Cheloha)  [Orabug: 31771277]  
  - net/rds: Incorrect pointer used in rds_getname() (Ka-Cheong Poon)  [Orabug: 31755752]  
  - RDMA/mlx5: Fix Shared PD prefetch of ODP memory region (Mark Haywood)  [Orabug: 31688620]  
  - arm64/dts: Serial console fix for RPi4 (Vijay Kumar)  [Orabug: 31562971]  
  - md: get sysfs entry after redundancy attr group create (Junxiao Bi)  [Orabug: 31682033]  
  - md: fix deadlock causing by sysfs_notify (Junxiao Bi)  [Orabug: 31682033]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.6.2.el8uek]
changelog:
  - Revert "aarch64/BM: config failed, hub doesn't have any ports" (Thomas Tai)  [Orabug: 31838351] [Orabug: 31844671]  
  - kvm: ioapic: Restrict lazy EOI update to edge-triggered interrupts (Paolo Bonzini)  [Orabug: 31839185] [Orabug: 31844556]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.7.0.el8uek]
changelog:
  - sample-trace-array: Fix sleeping function called from invalid context (Kefeng Wang)  [Orabug: 31543029]  
  - sample-trace-array: Remove trace_array 'sample-instance' (Kefeng Wang)  [Orabug: 31543029]  
  - tracing: Sample module to demonstrate kernel access to Ftrace instances. (Divya Indi)  [Orabug: 31543029]  
  - tracing: Adding new functions for kernel access to Ftrace instances (Divya Indi)  [Orabug: 31543029]  
  - tracing: Adding NULL checks for trace_array descriptor pointer (Divya Indi)  [Orabug: 31543029]  
  - tracing: Verify if trace array exists before destroying it. (Divya Indi)  [Orabug: 31543029]  
  - tracing: Declare newly exported APIs in include/linux/trace.h (Divya Indi)  [Orabug: 31543029]  
  - RDMA/cm: Fix missing RDMA_CM_EVENT_REJECTED event after receiving REJ message (Leon Romanovsky)  [Orabug: 31784656]  
  - RDMA/cm: Protect access to remote_sidr_table (Maor Gottlieb)  [Orabug: 31784889]  
  - rename kABI whitelists to lockedlists (Dan Duval)  [Orabug: 31783146]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.7.1.el8uek]
changelog:
  - IB/mlx5: Expose RoCE accelerator counters (Avihai Horon)  [Orabug: 31621895]  
  - net/mlx5: Add RoCE accelerator counters (Leon Romanovsky)  [Orabug: 31621895]  
  - cgroup: Fix sock_cgroup_data on big-endian. (Cong Wang)  [Orabug: 31779795]  {CVE-2020-14356} 
  - cgroup: fix cgroup_sk_alloc() for sk_clone_lock() (Cong Wang)  [Orabug: 31779795]  {CVE-2020-14356} 
  - Revert "aarch64/BM: config failed, hub doesn't have any ports" (Thomas Tai)  [Orabug: 31838351]  
  - kvm: ioapic: Restrict lazy EOI update to edge-triggered interrupts (Paolo Bonzini)  [Orabug: 31839185]  
  - iavf: use generic power management (Vaibhav Gupta)  [Orabug: 31700015]  
  - iavf: Fix updating statistics (Tony Nguyen)  [Orabug: 31700015]  
  - iavf: fix error return code in iavf_init_get_resources() (Wei Yongjun)  [Orabug: 31700015]  
  - iavf: increase reset complete wait time (Paul Greenwalt)  [Orabug: 31700015]  
  - iavf: Fix reporting 2.5 Gb and 5Gb speeds (Brett Creeley)  [Orabug: 31700015]  
  - iavf: use appropriate enum for comparison (Aleksandr Loktionov)  [Orabug: 31700015]  
  - iavf: Enable support for up to 16 queues (Mitch Williams)  [Orabug: 31700015]  
  - iavf: fix speed reporting over virtchnl (Brett Creeley)  [Orabug: 31700015]  
  - iavf: remove current MAC address filter on VF reset (Stefan Assmann)  [Orabug: 31700015]  
  - i40e: Fix crash during removing i40e driver (Grzegorz Szczurek)  [Orabug: 31700015]  
  - i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Przemyslaw Patynowski)  [Orabug: 31700015]  
  - i40e: introduce new dump desc XDP command (Ciara Loftus)  [Orabug: 31700015]  
  - i40e: add XDP ring statistics to dump VSI debug output (Ciara Loftus)  [Orabug: 31700015]  
  - i40e: add XDP ring statistics to VSI stats (Ciara Loftus)  [Orabug: 31700015]  
  - i40e: move check of full Tx ring to outside of send loop (Magnus Karlsson)  [Orabug: 31700015]  
  - i40e: eliminate division in napi_poll data path (Magnus Karlsson)  [Orabug: 31700015]  
  - i40e: optimize AF_XDP Tx completion path (Magnus Karlsson)  [Orabug: 31700015]  
  - i40e: Add support for a new feature Total Port Shutdown (Arkadiusz Kubalewski)  [Orabug: 31700015]  
  - i40e: Remove scheduling while atomic possibility (Aleksandr Loktionov)  [Orabug: 31700015]  
  - i40e: Add support for 5Gbps cards (Aleksandr Loktionov)  [Orabug: 31700015]  
  - i40e: Add a check to see if MFS is set (Todd Fujinaka)  [Orabug: 31700015]  
  - i40e: detect and log info about pre-recovery mode (Piotr Kwapulinski)  [Orabug: 31700015]  
  - i40e: make PF wait reset loop reliable (Piotr Kwapulinski)  [Orabug: 31700015]  
  - i40e: remove unused defines (Jesse Brandeburg)  [Orabug: 31700015]  
  - i40e: Move client header location (Shiraz Saleem)  [Orabug: 31700015]  
  - i40e: fix crash when Rx descriptor count is changed (Björn Töpel)  [Orabug: 31700015]  
  - i40e: Make i40e_shutdown_adminq() return void (Jason Yan)  [Orabug: 31700015]  
  - i40e: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 31700015]  
  - i40e: Separate kernel allocated rx_bi rings from AF_XDP rings (Björn Töpel)  [Orabug: 31700015]  
  - i40e: Refactor rx_bi accesses (Björn Töpel)  [Orabug: 31700015]  
  - i40e: Remove unneeded conversion to bool (Jason Yan)  [Orabug: 31700015]  
  - i40e: fix spelling mistake "to" -> "too" (Colin Ian King)  [Orabug: 31700015]  
  - i40e: Set PHY Access flag on X722 (Adam Ludkiewicz)  [Orabug: 31700015]  
  - i40e: implement VF stats NDO (Jesse Brandeburg)  [Orabug: 31700015]  
  - i40e: enable X710 support (Alice Michael)  [Orabug: 31700015]  
  - i40e: Add UDP segmentation offload support (Josh Hunt)  [Orabug: 31700015]  
  - i40e: Refactoring VF MAC filters counting to make more reliable (Aleksandr Loktionov)  [Orabug: 31700015]  
  - i40e: Fix LED blinking flow for X710T*L devices (Damian Milosek)  [Orabug: 31700015]  
  - i40e: allow ethtool to report SW and FW versions in recovery mode (Piotr Kwapulinski)  [Orabug: 31700015]  
  - i40e: Extend PHY access with page change flag (Piotr Azarewicz)  [Orabug: 31700015]  
  - i40e: Extract detection of HW flags into a function (Piotr Azarewicz)  [Orabug: 31700015]  
  - i40e: Fix for persistent lldp support (Sylwia Wnuczko)  [Orabug: 31700015]  
  - i40e: protect ring accesses with READ- and WRITE_ONCE (Ciara Loftus)  [Orabug: 31700015]  
  - i40e: Fix the conditional for i40e_vc_validate_vqs_bitmaps (Brett Creeley)  [Orabug: 31700015]  
  - i40e: Relax i40e_xsk_wakeup's return value when PF is busy (Maciej Fijalkowski)  [Orabug: 31700015]  
  - i40e: Fix virtchnl_queue_select bitmap validation (Brett Creeley)  [Orabug: 31700015]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.7.2.el8uek]
changelog:
  - net/packet: fix overflow in tpacket_rcv (Or Cohen)  [Orabug: 31866487]  {CVE-2020-14386} {CVE-2020-14386} 
  - block: better deal with the delayed not supported case in blk_cloned_rq_check_limits (Ritika Srivastava)  [Orabug: 31850341]  
  - block: Return blk_status_t instead of errno codes (Ritika Srivastava)  [Orabug: 31850341]  
  - iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE (Suravee Suthikulpanit)  [Orabug: 31849530]  
  - uek-rpm: ol8: config-aarch64: add *_MEMORY_HOTPLUG (Mihai Carabas)  [Orabug: 31848696]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2011.7.3.el8uek]
changelog:
  - xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen)  [Orabug: 31895365]  {CVE-2020-14385} 
  - ext4: fix potential negative array index in do_split() (Eric Sandeen)  [Orabug: 31895327]  {CVE-2020-14314} 
  - mm/hugetlb: fix a race between hugetlb sysctl handlers (Muchun Song)  [Orabug: 31884234]  {CVE-2020-25285} 
  - rbd: require global CAP_SYS_ADMIN for mapping and unmapping (Ilya Dryomov)  [Orabug: 31884154]  {CVE-2020-25284} 
  - nfs: Fix getxattr kernel panic and memory overflow (Jeffrey Mitchell)  [Orabug: 31872895]  {CVE-2020-25212} 
  - libnvdimm/security: ensure sysfs poll thread woke up and fetch updated attr (Jane Chu)  [Orabug: 31861296]  
  - libnvdimm/security: the 'security' attr never (Jane Chu)  [Orabug: 31861296]  
  - libnvdimm/security: fix a typo (Jane Chu)  [Orabug: 31861296]  
  - mmc: sdhci: Silence MMC warnings (Maxime Ripard)  [Orabug: 31746382]  
  - bcm2835-dma: Add support for per-channel flags (Phil Elwell)  [Orabug: 31746382]  
  - mmc: sdhci-iproc: Fix vmmc regulators on iProc (Phil Elwell)  [Orabug: 31746382]  
  - KVM: x86: minor code refactor and comments fixup around dirty logging (Anthony Yznaga)  [Orabug: 31722763]  
  - KVM: x86: avoid unnecessary rmap walks when creating/moving slots (Anthony Yznaga)  [Orabug: 31722763]  
  - KVM: x86: remove unnecessary rmap walk of read-only memslots (Anthony Yznaga)  [Orabug: 31722763]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [5.4.17-2011.7.4.el8uek]
changelog:
  - iommu/amd: Restore IRTE.RemapEn bit for amd_iommu_activate_guest_mode (Suravee Suthikulpanit)  [Orabug: 31931369]  
  - iommu/amd: Fix potential @entry null deref (Joao Martins)  [Orabug: 31931369]  
  - iommu/amd: Restore IRTE.RemapEn bit after programming IRTE (Suravee Suthikulpanit)  [Orabug: 31931369]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2033.el8uek]
changelog:
  - iavf: use generic power management (Vaibhav Gupta)  [Orabug: 31700007]  
  - iavf: Fix updating statistics (Tony Nguyen)  [Orabug: 31700007]  
  - iavf: fix error return code in iavf_init_get_resources() (Wei Yongjun)  [Orabug: 31700007]  
  - iavf: increase reset complete wait time (Paul Greenwalt)  [Orabug: 31700007]  
  - iavf: Fix reporting 2.5 Gb and 5Gb speeds (Brett Creeley)  [Orabug: 31700007]  
  - iavf: use appropriate enum for comparison (Aleksandr Loktionov)  [Orabug: 31700007]  
  - iavf: Enable support for up to 16 queues (Mitch Williams)  [Orabug: 31700007]  
  - i40e: introduce new dump desc XDP command (Ciara Loftus)  [Orabug: 31700007]  
  - i40e: add XDP ring statistics to dump VSI debug output (Ciara Loftus)  [Orabug: 31700007]  
  - i40e: add XDP ring statistics to VSI stats (Ciara Loftus)  [Orabug: 31700007]  
  - i40e: move check of full Tx ring to outside of send loop (Magnus Karlsson)  [Orabug: 31700007]  
  - i40e: eliminate division in napi_poll data path (Magnus Karlsson)  [Orabug: 31700007]  
  - i40e: optimize AF_XDP Tx completion path (Magnus Karlsson)  [Orabug: 31700007]  
  - i40e: Add support for a new feature Total Port Shutdown (Arkadiusz Kubalewski)  [Orabug: 31700007]  
  - i40e: Remove scheduling while atomic possibility (Aleksandr Loktionov)  [Orabug: 31700007]  
  - i40e: Add support for 5Gbps cards (Aleksandr Loktionov)  [Orabug: 31700007]  
  - i40e: Add a check to see if MFS is set (Todd Fujinaka)  [Orabug: 31700007]  
  - i40e: detect and log info about pre-recovery mode (Piotr Kwapulinski)  [Orabug: 31700007]  
  - i40e: make PF wait reset loop reliable (Piotr Kwapulinski)  [Orabug: 31700007]  
  - i40e: remove unused defines (Jesse Brandeburg)  [Orabug: 31700007]  
  - i40e: Move client header location (Shiraz Saleem)  [Orabug: 31700007]  
  - i40e: fix crash when Rx descriptor count is changed (Björn Töpel)  [Orabug: 31700007]  
  - i40e: Make i40e_shutdown_adminq() return void (Jason Yan)  [Orabug: 31700007]  
  - i40e: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 31700007]  
  - i40e: Separate kernel allocated rx_bi rings from AF_XDP rings (Björn Töpel)  [Orabug: 31700007]  
  - i40e: Refactor rx_bi accesses (Björn Töpel)  [Orabug: 31700007]  
  - i40e: Remove unneeded conversion to bool (Jason Yan)  [Orabug: 31700007]  
  - i40e: fix spelling mistake "to" -> "too" (Colin Ian King)  [Orabug: 31700007]  
  - i40e: Set PHY Access flag on X722 (Adam Ludkiewicz)  [Orabug: 31700007]  
  - i40e: implement VF stats NDO (Jesse Brandeburg)  [Orabug: 31700007]  
  - i40e: enable X710 support (Alice Michael)  [Orabug: 31700007]  
  - i40e: Add UDP segmentation offload support (Josh Hunt)  [Orabug: 31700007]  
  - i40e: Refactoring VF MAC filters counting to make more reliable (Aleksandr Loktionov)  [Orabug: 31700007]  
  - i40e: Fix LED blinking flow for X710T*L devices (Damian Milosek)  [Orabug: 31700007]  
  - i40e: allow ethtool to report SW and FW versions in recovery mode (Piotr Kwapulinski)  [Orabug: 31700007]  
  - i40e: Extend PHY access with page change flag (Piotr Azarewicz)  [Orabug: 31700007]  
  - i40e: Extract detection of HW flags into a function (Piotr Azarewicz)  [Orabug: 31700007]  
  - i40e: Fix for persistent lldp support (Sylwia Wnuczko)  [Orabug: 31700007]  
  - Revert "net/mlx4_core: Add masking for a few queries on HCA caps" (Sharath Srinivasan)  [Orabug: 31716965]  
  - net/rds: Incorrect WARN_ON() (Ka-Cheong Poon)  [Orabug: 31718013]  
  - random32: update the net random state on interrupt and activity (Willy Tarreau)  [Orabug: 31698077]  {CVE-2020-16166} 
  - perf script report: Fix SEGFAULT when using DWARF mode (Andreas Gerstmayr)  [Orabug: 31687958]  
  - perf vendor events amd: Update Zen1 events to V2 (Vijay Thakkar)  [Orabug: 31687958]  
  - perf vendor events amd: Add Zen2 events (Vijay Thakkar)  [Orabug: 31687958]  
  - perf vendor events amd: Restrict model detection for zen1 based processors (Vijay Thakkar)  [Orabug: 31687958]  
  - perf/amd/uncore: Add support for Family 19h L3 PMU (Kim Phillips)  [Orabug: 31687958]  
  - perf/amd/uncore: Make L3 thread mask code more readable (Kim Phillips)  [Orabug: 31687958]  
  - perf/amd/uncore: Prepare L3 thread mask code for Family 19h (Kim Phillips)  [Orabug: 31687958]  
  - perf symbols: Don't try to find a vmlinux file when looking for kernel modules (Arnaldo Carvalho de Melo)  [Orabug: 31687958]  
  - perf symbols: Convert symbol__is_idle() to use strlist (Kim Phillips)  [Orabug: 31687958]  
  - perf symbols: Update the list of kernel idle symbols (Kim Phillips)  [Orabug: 31687958]  
  - perf/x86/amd: Remove set but not used variable 'active' (Zheng Yongjun)  [Orabug: 31687958]  
  - hwmon: (k10temp) Swap Tdie and Tctl on Family 17h CPUs (Guenter Roeck)  [Orabug: 31687958]  
  - hwmon: (k10temp) Display up to eight sets of CCD temperatures (Guenter Roeck)  [Orabug: 31687958]  
  - hwmon: (k10temp) Add debugfs support (Guenter Roeck)  [Orabug: 31687958]  
  - hwmon: (k10temp) Don't show temperature limits on Ryzen (Zen) CPUs (Guenter Roeck)  [Orabug: 31687958]  
  - hwmon: (k10temp) Show core and SoC current and voltages on Ryzen CPUs (Guenter Roeck)  [Orabug: 31687958]  
  - hwmon: (k10temp) Report temperatures per CPU die (Guenter Roeck)  [Orabug: 31687958]  
  - hmon: (k10temp) Convert to use devm_hwmon_device_register_with_info (Guenter Roeck)  [Orabug: 31687958]  
  - hwmon: (k10temp) Use bitops (Guenter Roeck)  [Orabug: 31687958]  
  - cpupower: mperf_monitor: Update cpupower to use the RDPRU instruction (Janakarajan Natarajan)  [Orabug: 31687958]  
  - cpupower: mperf_monitor: Introduce per_cpu_schedule flag (Janakarajan Natarajan)  [Orabug: 31687958]  
  - cpupower: Move needs_root variable into a sub-struct (Janakarajan Natarajan)  [Orabug: 31687958]  
  - cpupower: ToDo: Update ToDo with ideas for per_cpu_schedule handling (Janakarajan Natarajan)  [Orabug: 31687958]  
  - uek-rpm: Enable AMD TEE driver (Dave Kleikamp)  [Orabug: 31687958]  
  - crypto: ccp - use file mode for sev ioctl permissions (Connor Kuehl)  [Orabug: 31687958]  
  - crypto: ccp - Cleanup sp_dev_master in psp_dev_destroy() (John Allen)  [Orabug: 31687958]  
  - crypto: ccp - Cleanup misc_dev on sev_exit() (John Allen)  [Orabug: 31687958]  
  - tee: amdtee: check TEE status during driver initialization (Rijo Thomas)  [Orabug: 31687958]  
  - Documentation: tee: add AMD-TEE driver details (Rijo Thomas)  [Orabug: 31687958]  
  - tee: add AMD-TEE driver (Rijo Thomas)  [Orabug: 31687958]  
  - tee: allow compilation of tee subsystem for AMD CPUs (Rijo Thomas)  [Orabug: 31687958]  
  - crypto: ccp - provide in-kernel API to submit TEE commands (Rijo Thomas)  [Orabug: 31687958]  
  - crypto: ccp - add TEE support for Raven Ridge (Rijo Thomas)  [Orabug: 31687958]  
  - crypto: ccp - check whether PSP supports SEV or TEE before initialization (Rijo Thomas)  [Orabug: 31687958]  
  - crypto: ccp - move SEV vdata to a dedicated data structure (Rijo Thomas)  [Orabug: 31687958]  
  - crypto: ccp - create a generic psp-dev file (Rijo Thomas)  [Orabug: 31687958]  
  - crypto: ccp - rename psp-dev files to sev-dev (Rijo Thomas)  [Orabug: 31687958]  
  - crypto: ccp - add SEV command privilege separation (Brijesh Singh)  [Orabug: 31687958]  
  - crypto: ccp - switch from ablkcipher to skcipher (Ard Biesheuvel)  [Orabug: 31687958]  
  - crypto: ccp - Retry SEV INIT command in case of integrity check failure. (Ashish Kalra)  [Orabug: 31687958]  
  - crypto: ccp - Change a message to reflect status instead of failure (Hook, Gary)  [Orabug: 31687958]  
  - crypto: ccp - Verify access to device registers before initializing (Hook, Gary)  [Orabug: 31687958]  
  - iommu/amd: Remove the unnecessary assignment (Adrian Huang)  [Orabug: 31687958]  
  - iommu/amd: Replace two consecutive readl calls with one readq (Adrian Huang)  [Orabug: 31687958]  
  - iommu/amd: Remove local variables (Adrian Huang)  [Orabug: 31687958]  
  - iommu/amd: Fix typos for PPR macros (Adrian Huang)  [Orabug: 31687958]  
  - iommu/amd: Remove unused variable (Joerg Roedel)  [Orabug: 31687958]  
  - iommu/amd: Treat per-device exclusion ranges as r/w unity-mapped regions (Adrian Huang)  [Orabug: 31687958]  
  - iommu/amd: Do not re-fetch iommu->cmd_buf_tail (Denys Vlasenko)  [Orabug: 31687958]  
  - iommu/amd: Switch to use acpi_dev_hid_uid_match() (Andy Shevchenko)  [Orabug: 31687958]  
  - iommu/amd: Simpify decoding logic for INVALID_PPR_REQUEST event (Suthikulpanit, Suravee)  [Orabug: 31687958]  
  - iommu/amd: Remove unnecessary locking from AMD iommu driver (Tom Murphy)  [Orabug: 31687958]  
  - KVM: SVM: Issue WBINVD after deactivating an SEV guest (Tom Lendacky)  [Orabug: 31687958]  
  - KVM: SVM: document KVM_MEM_ENCRYPT_OP, let userspace detect if SEV is available (Paolo Bonzini)  [Orabug: 31687958]  
  - KVM: nSVM: check for EFER.SVME=1 before entering guest (Paolo Bonzini)  [Orabug: 31687958]  
  - KVM: nSVM: Remove an obsolete comment. (Miaohe Lin)  [Orabug: 31687958]  
  - KVM: nSVM: avoid loss of pending IRQ/NMI before entering L2 (Paolo Bonzini)  [Orabug: 31687958]  
  - KVM: nSVM: implement check_nested_events for interrupts (Paolo Bonzini)  [Orabug: 31687958]  
  - KVM: nSVM: ignore L1 interrupt window while running L2 with V_INTR_MASKING=1 (Paolo Bonzini)  [Orabug: 31687958]  
  - KVM: nSVM: do not change host intercepts while nested VM is running (Paolo Bonzini)  [Orabug: 31687958]  
  - KVM: x86: Explicitly pass an exception struct to check_intercept (Sean Christopherson)  [Orabug: 31687958]  
  - KVM: x86: Consolidate VM allocation and free for VMX and SVM (Sean Christopherson)  [Orabug: 31687958]  
  - KVM: x86: Directly return __vmalloc() result in ->vm_alloc() (Sean Christopherson)  [Orabug: 31687958]  
  - KVM: SVM: Fix the svm vmexit code for WRMSR (Haiwei Li)  [Orabug: 31687958]  
  - KVM: x86: allow compiling as non-module with W=1 (Valdis Kletnieks)  [Orabug: 31687958]  
  - KVM: nVMX: Emulate MTF when performing instruction emulation (Oliver Upton)  [Orabug: 31687958]  
  - KVM: fix error handling in svm_hardware_setup (Li RongQing)  [Orabug: 31687958]  
  - KVM: x86: do not reset microcode version on INIT or RESET (Paolo Bonzini)  [Orabug: 31687958]  
  - KVM: SVM: relax conditions for allowing MSR_IA32_SPEC_CTRL accesses (Paolo Bonzini)  [Orabug: 31687958]  
  - KVM: SVM: Use direct vcpu pointer during vCPU create/free (Sean Christopherson)  [Orabug: 31687958]  
  - KVM: x86: avoid incorrect writes to host MSR_IA32_SPEC_CTRL (Paolo Bonzini)  [Orabug: 31687958]  
  - KVM: VMX: FIXED+PHYSICAL mode single target IPI fastpath (Wanpeng Li)  [Orabug: 31687958]  
  - KVM: x86: Move IA32_XSS-swapping on VM-entry/VM-exit to common x86 code (Aaron Lewis)  [Orabug: 31687958]  
  - KVM: VMX: Use wrmsr for switching between guest and host IA32_XSS on Intel (Aaron Lewis)  [Orabug: 31687958]  
  - KVM: x86: Remove unneeded kvm_vcpu variable, guest_xcr0_loaded (Aaron Lewis)  [Orabug: 31687958]  
  - KVM: VMX: Fix conditions for guest IA32_XSS support (Aaron Lewis)  [Orabug: 31687958]  
  - KVM x86: Move kvm cpuid support out of svm (Peter Gonda)  [Orabug: 31687958]  
  - kvm: svm: Update svm_xsaves_supported (Aaron Lewis)  [Orabug: 31687958]  
  - KVM: SVM: Reduce WBINVD/DF_FLUSH invocations (Tom Lendacky)  [Orabug: 31687958]  
  - KVM: SVM: Use wrmsr for switching between guest and host IA32_XSS on AMD (Aaron Lewis)  [Orabug: 31687958]  
  - KVM: x86: Introduce vcpu->arch.xsaves_enabled (Aaron Lewis)  [Orabug: 31687958]  
  - KVM: SVM: Remove unneeded WBINVD and DF_FLUSH when starting SEV guests (Tom Lendacky)  [Orabug: 31687958]  
  - x86/mce/amd: Add PPIN support for AMD MCE (Wei Huang)  [Orabug: 31687958]  
  - x86/amd_nb, char/amd64-agp: Use amd_nb_num() accessor (Borislav Petkov)  [Orabug: 31687958]  
  - x86/cpu/amd: Call init_amd_zn() om Family 19h processors too (Kim Phillips)  [Orabug: 31687958]  
  - x86/CPU/AMD: Remove amd_get_topology_early() (Borislav Petkov)  [Orabug: 31687958]  
  - docs/zh_CN: add Chinese version of embargoed hardware issues (Alex Shi)  [Orabug: 31687958]  
  - tools arch x86: Sync asm/cpufeatures.h with the kernel sources (Arnaldo Carvalho de Melo)  [Orabug: 31687958]  
  - x86/kdump: Remove the backup region handling (Lianbo Jiang)  [Orabug: 31687958]  
  - x86/kdump: Always reserve the low 1M when the crashkernel option is specified (Lianbo Jiang)  [Orabug: 31687958]  
  - Documentation/process: Add AMD contact for embargoed hardware issues (Tom Lendacky)  [Orabug: 31687958]  
  - EDAC/amd64: Get rid of the ECC disabled long message (Borislav Petkov)  [Orabug: 31687958]  
  - x86/Kconfig: Rename UMIP config parameter (Babu Moger)  [Orabug: 31687958]  
  - x86/umip: Make the comments vendor-agnostic (Babu Moger)  [Orabug: 31687958]  
  - x86/vmlinux: Move EXCEPTION_TABLE to RO_DATA segment (Kees Cook)  [Orabug: 31687958]  
  - x86/mm: Report actual image regions in /proc/iomem (Kees Cook)  [Orabug: 31687958]  
  - x86/vmlinux: Use INT3 instead of NOP for linker fill bytes (Kees Cook)  [Orabug: 31687958]  
  - x86/vmlinux: Actually use _etext for the end of the text segment (Kees Cook)  [Orabug: 31687958]  
  - x86/kdump: Remove the unused crash_copy_backup_region() (Lianbo Jiang)  [Orabug: 31687958]  
  - ACPI / utils: Introduce acpi_dev_hid_uid_match() helper (Andy Shevchenko)  [Orabug: 31687958]  
  - x86/mce/amd: Make disable_err_thresholding() static (Borislav Petkov)  [Orabug: 31687958]  
  - x86/cpufeatures: Add feature bit RDPRU on AMD (Babu Moger)  [Orabug: 31687958]  
  - x86/rdrand: Sanity-check RDRAND output (Borislav Petkov)  [Orabug: 31687958]  
  - Add WireGuard support to UEK6 kernel (William Kucharski)  [Orabug: 31678138]  
  - IB/mlx5: Do reverse sequence during device removal (Parav Pandit)  [Orabug: 31644707]  
  - Enable config option CONFIG_NFSD_V4_2_INTER_SSC (Dai Ngo)  [Orabug: 31535968]  
  - NFSD: Fix NFS server build errors (Chuck Lever)  [Orabug: 31535968]  
  - nfsd4: fix double free in nfsd4_do_async_copy() (Dan Carpenter)  [Orabug: 31535968]  
  - NFSD fixing possible null pointer derefering in copy offload (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFSD fix nfserro errno mismatch (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFSD: fix seqid in copy stateid (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFSv4.2 fix memory leak in nfs42_ssc_open (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFSv4: Make _nfs42_proc_copy_notify() static (YueHaibing)  [Orabug: 31535968]  
  - nfsv4: Move NFSPROC4_CLNT_COPY_NOTIFY to end of list (Trond Myklebust)  [Orabug: 31535968]  
  - NFSD: allow inter server COPY to have a STALE source server fh (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFSD add nfs4 inter ssc to nfsd4_copy (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFSD check stateids against copy stateids (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFSD fix mismatching type in nfsd4_set_netaddr (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFSD fill-in netloc4 structure (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFSD add COPY_NOTIFY operation (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFSD add ca_source_server<> to COPY (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFSD COPY_NOTIFY xdr (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFSv4.2 fix kfree in __nfs42_copy_file_range (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFS based on file size issue sync copy or fallback to generic copy offload (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFS: handle source server reboot (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFS: skip recovery of copy open on dest server (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFS: inter ssc open (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFS: add ca_source_server<> to COPY (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFS: add COPY_NOTIFY operation (Olga Kornievskaia)  [Orabug: 31535968]  
  - NFS NFSD: defining nl4_servers structure needed by both (Olga Kornievskaia)  [Orabug: 31535968]  
  - ath9k_htc: release allocated buffer if timed out (Navid Emamdoost)  [Orabug: 31351566]  {CVE-2019-19073} 
  - x86/reboot: Move up iommu_shutdown() before stop_other_cpus() (Saeed Mirzamohammadi)  [Orabug: 31710873]  
  - rds: ib: Revert "net/rds: Avoid stalled connection due to CM REQ retries" (Håkon Bugge)  [Orabug: 31648137]  
  - rds: Clear reconnect pending bit (Håkon Bugge)  [Orabug: 31648137]  
  - rds: Deregister all FRWR mr with free_mr (Hans Westgaard Ry)  [Orabug: 31472999]  
  - RDMA/nldev: Provide MR statistics (Erez Alfasi)  [Orabug: 30729403]  
  - RDMA/mlx5: Return ODP type per MR (Erez Alfasi)  [Orabug: 30729403]  
  - RDMA/nldev: Allow different fill function per resource (Erez Alfasi)  [Orabug: 30729403]  
  - IB/mlx5: Introduce ODP diagnostic counters (Erez Alfasi)  [Orabug: 30729403]  
  - Linux 5.4.55 (Greg Kroah-Hartman)   
  - Revert "dpaa_eth: fix usage as DSA master, try 3" (Vladimir Oltean)   
  - PM: wakeup: Show statistics for deleted wakeup sources again (zhuguangqing)   
  - regmap: debugfs: check count when read regmap file (Peng Fan)   
  - udp: Improve load balancing for SO_REUSEPORT. (Kuniyuki Iwashima)   
  - udp: Copy has_conns in reuseport_grow(). (Kuniyuki Iwashima)   
  - sctp: shrink stream outq when fails to do addstream reconf (Xin Long)   
  - sctp: shrink stream outq only when new outcnt < old outcnt (Xin Long)   
  - AX.25: Prevent integer overflows in connect and sendmsg (Dan Carpenter)   
  - tcp: allow at most one TLP probe per flight (Yuchung Cheng)   
  - rxrpc: Fix sendmsg() returning EPIPE due to recvmsg() returning ENODATA (David Howells)   
  - rtnetlink: Fix memory(net_device) leak when ->newlink fails (Weilong Chen)   
  - qrtr: orphan socket in qrtr_release() (Cong Wang)   
  - net: udp: Fix wrong clean up for IS_UDPLITE macro (Miaohe Lin)   
  - net-sysfs: add a newline when printing 'tx_timeout' by sysfs (Xiongfeng Wang)   
  - ip6_gre: fix null-ptr-deref in ip6gre_init_net() (Wei Yongjun)   
  - drivers/net/wan/x25_asy: Fix to make it work (Xie He)   
  - dev: Defer free of skbs in flush_backlog (Subash Abhinov Kasiviswanathan)   
  - AX.25: Prevent out-of-bounds read in ax25_sendmsg() (Peilin Ye)   
  - AX.25: Fix out-of-bounds read in ax25_connect() (Peilin Ye)


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2033.1.el8uek]
changelog:
  - rds: Test parameter in rds_ib_recv_cache_put (Hans Westgaard Ry)  [Orabug: 31737036]  
  - RDMA/mlx5: Fix Shared PD prefetch of ODP memory region (Mark Haywood)  [Orabug: 31688619]  
  - RDMA/cm: Spurious WARNING triggered in cm_destroy_id() (Ka-Cheong Poon)  [Orabug: 31483277]  
  - RDMA/cm: Make sure the cm_id is in the IB_CM_IDLE state in destroy (Jason Gunthorpe)  [Orabug: 31483277]  
  - RDMA/cm: Allow ib_send_cm_sidr_rep() to be done under lock (Jason Gunthorpe)  [Orabug: 31483277]  
  - RDMA/cm: Allow ib_send_cm_rej() to be done under lock (Jason Gunthorpe)  [Orabug: 31483277]  
  - RDMA/cm: Allow ib_send_cm_drep() to be done under lock (Jason Gunthorpe)  [Orabug: 31483277]  
  - RDMA/cm: Allow ib_send_cm_dreq() to be done under lock (Jason Gunthorpe)  [Orabug: 31483277]  
  - RDMA/cm: Add some lockdep assertions for cm_id_priv->lock (Jason Gunthorpe)  [Orabug: 31483277]  
  - RDMA/cm: Add missing locking around id.state in cm_dup_req_handler (Jason Gunthorpe)  [Orabug: 31483277]  
  - RDMA/cm: Make the destroy_id flow more robust (Jason Gunthorpe)  [Orabug: 31483277]  
  - RDMA/cm: Remove a race freeing timewait_info (Jason Gunthorpe)  [Orabug: 31483277]  
  - RDMA/cm: Use refcount_t type for refcount variable (Danit Goldberg)  [Orabug: 31483277]  
  - Revert "aarch64/BM: config failed, hub doesn't have any ports" (Thomas Tai)  [Orabug: 31678684]  
  - RDMA/mlx5: Set MR cache limit for both PF and VF (Nikhil Krishna)  [Orabug: 31358079]  
  - Linux 5.4.58 (Greg Kroah-Hartman)   
  - nfsd: Fix NFSv4 READ on RDMA when using readv (Chuck Lever)   
  - ima: move APPRAISE_BOOTPARAM dependency on ARCH_POLICY to runtime (Bruno Meneguele)   
  - tcp: apply a floor of 1 for RTT samples from TCP timestamps (Jianfeng Wang)   
  - selftests/net: relax cpu affinity requirement in msg_zerocopy test (Willem de Bruijn)   
  - Revert "vxlan: fix tos value before xmit" (Hangbin Liu)   
  - openvswitch: Prevent kernel-infoleak in ovs_ct_put_key() (Peilin Ye)   
  - net: thunderx: use spin_lock_bh in nicvf_set_rx_mode_task() (Xin Long)   
  - net: gre: recompute gre csum for sctp over gre tunnels (Lorenzo Bianconi)   
  - hv_netvsc: do not use VF device if link is down (Stephen Hemminger)   
  - dpaa2-eth: Fix passing zero to 'PTR_ERR' warning (YueHaibing)   
  - appletalk: Fix atalk_proc_init() return path (Vincent Duvert)   
  - net: lan78xx: replace bogus endpoint lookup (Johan Hovold)   
  - vxlan: Ensure FDB dump is performed under RCU (Ido Schimmel)   
  - rxrpc: Fix race between recvmsg and sendmsg on immediate call failure (David Howells)   
  - net: ethernet: mtk_eth_soc: fix MTU warnings (Landen Chao)   
  - ipv6: Fix nexthop refcnt leak when creating ipv6 route info (Xiyu Yang)   
  - ipv6: fix memory leaks on IPV6_ADDRFORM path (Cong Wang)   
  - ipv4: Silence suspicious RCU usage warning (Ido Schimmel)   
  - PCI: tegra: Revert tegra124 raw_violation_fixup (Nicolas Chauvet)   
  - Revert "powerpc/kasan: Fix shadow pages allocation failure" (Christophe Leroy)   
  - xattr: break delegations in {set,remove}xattr (Frank van der Linden)   
  - Drivers: hv: vmbus: Ignore CHANNELMSG_TL_CONNECT_RESULT(23) (Dexuan Cui)   
  - tools lib traceevent: Fix memory leak in process_dynamic_array_len (Philippe Duplessis-Guindon)   
  - atm: fix atm_dev refcnt leaks in atmtcp_remove_persistent (Xin Xiong)   
  - igb: reinit_locked() should be called with rtnl_lock (Francesco Ruggeri)   
  - cfg80211: check vendor command doit pointer before use (Julian Squires)   
  - firmware: Fix a reference count leak. (Qiushi Wu)   
  - ALSA: hda: fix NULL pointer dereference during suspend (Ranjani Sridharan)   
  - net: ethernet: mtk_eth_soc: Always call mtk_gmac0_rgmii_adjust() for mt7623 (René van Dorst)   
  - usb: hso: check for return value in hso_serial_common_create() (Rustam Kovhaev)   
  - i2c: slave: add sanity check when unregistering (Wolfram Sang)   
  - i2c: slave: improve sanity check when registering (Wolfram Sang)   
  - drm/drm_fb_helper: fix fbdev with sparc64 (Sam Ravnborg)   
  - nvme-pci: prevent SK hynix PC400 from using Write Zeroes command (Kai-Heng Feng)   
  - drm/nouveau/fbcon: zero-initialise the mode_cmd2 structure (Ben Skeggs)   
  - drm/nouveau/fbcon: fix module unload when fbcon init has failed for some reason (Ben Skeggs)   
  - net/9p: validate fds in p9_fd_open (Christoph Hellwig)   
  - leds: 88pm860x: fix use-after-free on unbind (Johan Hovold)   
  - leds: lm3533: fix use-after-free on unbind (Johan Hovold)   
  - leds: da903x: fix use-after-free on unbind (Johan Hovold)   
  - leds: lm36274: fix use-after-free on unbind (Johan Hovold)   
  - leds: wm831x-status: fix use-after-free on unbind (Johan Hovold)   
  - mtd: properly check all write ioctls for permissions (Greg Kroah-Hartman)   
  - vgacon: Fix for missing check in scrollback handling (Yunhai Zhang)   {CVE-2020-14331} 
  - scripts: add dummy report mode to add_namespace.cocci (Matthias Maennich)   
  - Smack: fix use-after-free in smk_write_relabel_self() (Eric Biggers)   
  - binder: Prevent context manager from incrementing ref 0 (Jann Horn)   
  - omapfb: dss: Fix max fclk divider for omap36xx (Adam Ford)   
  - Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt() (Peilin Ye)   
  - Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_evt() (Peilin Ye)   
  - Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt() (Peilin Ye)   
  - Staging: rtl8188eu: rtw_mlme: Fix uninitialized variable authmode (Dinghao Liu)   
  - staging: rtl8712: handle firmware load failure (Rustam Kovhaev)   
  - staging: android: ashmem: Fix lockdep warning for write operation (Suren Baghdasaryan)   
  - ALSA: seq: oss: Serialize ioctls (Takashi Iwai)   
  - ALSA: hda/ca0132 - Fix AE-5 microphone selection commands. (Connor McAdams)   
  - ALSA: hda/ca0132 - Fix ZxR Headphone gain control get value. (Connor McAdams)   
  - ALSA: hda/ca0132 - Add new quirk ID for Recon3D. (Connor McAdams)   
  - ALSA: hda/realtek: Add alc269/alc662 pin-tables for Loongson-3 laptops (Huacai Chen)   
  - Revert "ALSA: hda: call runtime_allow() for all hda controllers" (Hui Wang)   
  - io_uring: Fix use-after-free in io_sq_wq_submit_work() (Guoyu Huang)   
  - io_uring: prevent re-read of sqe->opcode (Jens Axboe)   
  - usb: xhci: Fix ASMedia ASM1142 DMA addressing (Forest Crossman)   
  - usb: xhci: define IDs for various ASMedia host controllers (Forest Crossman)   
  - USB: iowarrior: fix up report size handling for some devices (Greg Kroah-Hartman)   
  - perf/core: Fix endless multiplex timer (Peter Zijlstra)   
  - USB: serial: qcserial: add EM7305 QDL product ID (Erik Ekman)   
  - Linux 5.4.57 (Greg Kroah-Hartman)   
  - bpf: sockmap: Require attach_bpf_fd when detaching a program (Lorenz Bauer)   
  - selftests: bpf: Fix detach from sockmap tests (Lorenz Bauer)   
  - ext4: fix direct I/O read error (Jiang Ying)   
  - arm64: Workaround circular dependency in pointer_auth.h (Marc Zyngier)   
  - random32: move the pseudo-random 32-bit definitions to prandom.h (Linus Torvalds)   
  - random32: remove net_rand_state from the latent entropy gcc plugin (Linus Torvalds)   
  - random: fix circular include dependency on arm64 after addition of percpu.h (Willy Tarreau)   
  - ARM: percpu.h: fix build error (Grygorii Strashko)   
  - random32: update the net random state on interrupt and activity (Willy Tarreau)   
  - Linux 5.4.56 (Greg Kroah-Hartman)   
  - perf bench: Share some global variables to fix build with gcc 10 (Arnaldo Carvalho de Melo)   
  - perf env: Do not return pointers to local variables (Arnaldo Carvalho de Melo)   
  - perf tests bp_account: Make global variable static (Arnaldo Carvalho de Melo)   
  - x86/i8259: Use printk_deferred() to prevent deadlock (Thomas Gleixner)   
  - KVM: LAPIC: Prevent setting the tscdeadline timer if the lapic is hw disabled (Wanpeng Li)   
  - KVM: arm64: Don't inherit exec permission across page-table levels (Will Deacon)   
  - drivers/net/wan: lapb: Corrected the usage of skb_cow (Xie He)   
  - RISC-V: Set maximum number of mapped pages correctly (Atish Patra)   
  - xen-netfront: fix potential deadlock in xennet_remove() (Andrea Righi)   
  - cxgb4: add missing release on skb in uld_send() (Navid Emamdoost)   
  - x86/stacktrace: Fix reliable check for empty user task stacks (Josh Poimboeuf)   
  - x86/unwind/orc: Fix ORC for newly forked tasks (Josh Poimboeuf)   
  - Revert "i2c: cadence: Fix the hold bit setting" (Raviteja Narayanam)   
  - net: ethernet: ravb: exit if re-initialization fails in tx timeout (Yoshihiro Shimoda)   
  - parisc: add support for cmpxchg on u8 pointers (Liam Beguin)   
  - scsi: core: Run queue in case of I/O resource contention failure (Ming Lei)   
  - nfc: s3fwrn5: add missing release on skb in s3fwrn5_recv_frame (Navid Emamdoost)   
  - selftests: net: ip_defrag: modprobe missing nf_defrag_ipv6 support (Paolo Pisati)   
  - qed: Disable "MFW indication via attention" SPAM every 5 minutes (Laurence Oberman)   
  - selftests: fib_nexthop_multiprefix: fix cleanup() netns deletion (Paolo Pisati)   
  - usb: hso: Fix debug compile warning on sparc32 (Geert Uytterhoeven)   
  - vxlan: fix memleak of fdb (Taehee Yoo)   
  - perf tools: Fix record failure when mixed with ARM SPE event (Wei Li)   
  - net/mlx5e: fix bpf_prog reference count leaks in mlx5e_alloc_rq (Xin Xiong)   
  - net: gemini: Fix missing clk_disable_unprepare() in error path of gemini_ethernet_port_probe() (Wang Hai)   
  - net: nixge: fix potential memory leak in nixge_probe() (Lu Wei)   
  - Bluetooth: fix kernel oops in store_pending_adv_report (Alain Michaud)   
  - arm64: csum: Fix handling of bad packets (Robin Murphy)   
  - arm64/alternatives: move length validation inside the subsection (Sami Tolvanen)   
  - mac80211: mesh: Free pending skb when destroying a mpath (Remi Pommarel)   
  - mac80211: mesh: Free ie data when leaving mesh (Remi Pommarel)   
  - bpf: Fix map leak in HASH_OF_MAPS map (Andrii Nakryiko)   
  - ibmvnic: Fix IRQ mapping disposal in error path (Thomas Falcon)   
  - mlxsw: core: Free EMAD transactions using kfree_rcu() (Ido Schimmel)   
  - mlxsw: core: Increase scope of RCU read-side critical section (Ido Schimmel)   
  - mlx4: disable device on shutdown (Jakub Kicinski)   
  - rhashtable: Fix unprotected RCU dereference in __rht_ptr (Herbert Xu)   
  - net: lan78xx: fix transfer-buffer memory leak (Johan Hovold)   
  - net: lan78xx: add missing endpoint sanity check (Johan Hovold)   
  - net/mlx5e: Fix kernel crash when setting vf VLANID on a VF dev (Alaa Hleihel)   
  - net/mlx5e: Modify uplink state on interface up/down (Ron Diskin)   
  - net/mlx5: Verify Hardware supports requested ptp function on a given pin (Eran Ben Elisha)   
  - net/mlx5e: Fix error path of device attach (Aya Levin)   
  - net/mlx5: E-switch, Destroy TSAR when fail to enable the mode (Parav Pandit)   
  - net: hns3: fix aRFS FD rules leftover after add a user FD rule (Guojia Liao)   
  - net: hns3: fix a TX timeout issue (Yonglong Liu)   
  - sh: Fix validation of system call number (Michael Karcher)   
  - sh/tlb: Fix PGTABLE_LEVELS > 2 (Peter Zijlstra)   
  - selftests/net: so_txtime: fix clang issues for target arch PowerPC (Tanner Love)   
  - selftests/net: psock_fanout: fix clang issues for target arch PowerPC (Tanner Love)   
  - selftests/net: rxtimestamp: fix clang issues for target arch PowerPC (Tanner Love)   
  - nvme-tcp: fix possible hang waiting for icresp response (Sagi Grimberg)   
  - ARM: dts: armada-38x: fix NETA lockup when repeatedly switching speeds (Russell King)   
  - xfrm: Fix crash when the hold queue is used. (Steffen Klassert)   
  - ARM: dts sunxi: Relax a bit the CMA pool allocation range (Maxime Ripard)   
  - xfrm: policy: match with both mark and mask on user interfaces (Xin Long)   
  - net/x25: Fix null-ptr-deref in x25_disconnect (YueHaibing)   
  - net/x25: Fix x25_neigh refcnt leak when x25 disconnect (Xiyu Yang)   
  - libtraceevent: Fix build with binutils 2.35 (Ben Hutchings)   
  - rds: Prevent kernel-infoleak in rds_notify_queue_get() (Peilin Ye)   
  - drm: hold gem reference until object is no longer accessed (Steve Cohen)   
  - drm/dbi: Fix SPI Type 1 (9-bit) transfer (Paul Cercueil)   
  - drm/amdgpu: Prevent kernel-infoleak in amdgpu_info_ioctl() (Peilin Ye)   
  - drm/amd/display: Clear dm_state for fast updates (Mazin Rezk)   
  - Revert "drm/amdgpu: Fix NULL dereference in dpm sysfs handlers" (Alex Deucher)   
  - virtio_balloon: fix up endian-ness for free cmd id (Michael S. Tsirkin)   
  - ARM: dts: imx6qdl-icore: Fix OTG_ID pin and sdcard detect (Michael Trimarchi)   
  - ARM: dts: imx6sx-sdb: Fix the phy-mode on fec2 (Fabio Estevam)   
  - ARM: dts: imx6sx-sabreauto: Fix the phy-mode on fec2 (Fabio Estevam)   
  - ARM: 8986/1: hw_breakpoint: Don't invoke overflow handler on uaccess watchpoints (Will Deacon)   
  - wireless: Use offsetof instead of custom macro. (Pi-Hsun Shih)   
  - 9p/trans_fd: Fix concurrency del of req_list in p9_fd_cancelled/p9_read_work (Wang Hai)   
  - vhost/scsi: fix up req type endian-ness (Michael S. Tsirkin)   
  - IB/rdmavt: Fix RQ counting issues causing use of an invalid RWQE (Mike Marciniszyn)   
  - ALSA: hda/hdmi: Fix keep_power assignment for non-component devices (Takashi Iwai)   
  - ALSA: hda/realtek - Fixed HP right speaker no sound (Kailang Yang)   
  - ALSA: hda/realtek: Fix add a "ultra_low_power" function for intel reference board (alc256) (PeiSen Hou)   
  - ALSA: hda/realtek: typo_fix: enable headset mic of ASUS ROG Zephyrus G14(GA401) series with ALC289 (Armas Spann)   
  - ALSA: hda/realtek: enable headset mic of ASUS ROG Zephyrus G15(GA502) series with ALC289 (Armas Spann)   
  - ALSA: usb-audio: Add implicit feedback quirk for SSL2 (Laurence Tratt)   
  - mm/filemap.c: don't bother dropping mmap_sem for zero size readahead (Jan Kara)   
  - PCI/ASPM: Disable ASPM on ASMedia ASM1083/1085 PCIe-to-PCI bridge (Robert Hancock)   
  - ath10k: enable transmit data ack RSSI for QCA9884 (Abhishek Ambure)   
  - sunrpc: check that domain table is empty at module unload. (Sasha Levin)   
  - media: rc: prevent memory leak in cx23888_ir_probe (Navid Emamdoost)   
  - crypto: ccp - Release all allocated memory if sha type is invalid (Navid Emamdoost)


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2035.el8uek]
changelog:
  - arm64/elf: Disable automatic READ_IMPLIES_EXEC for 64-bit address spaces (Kees Cook)  [Orabug: 31776976]  
  - arm32/64/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK (Kees Cook)  [Orabug: 31776976]  
  - arm32/64/elf: Add tables to document READ_IMPLIES_EXEC (Kees Cook)  [Orabug: 31776976]  
  - x86/elf: Disable automatic READ_IMPLIES_EXEC on 64-bit (Kees Cook)  [Orabug: 31776976]  
  - x86/elf: Split READ_IMPLIES_EXEC from executable PT_GNU_STACK (Kees Cook)  [Orabug: 31776976]  
  - x86/elf: Add table to document READ_IMPLIES_EXEC (Kees Cook)  [Orabug: 31776976]  
  - Linux 5.4.60 (Greg Kroah-Hartman)   
  - drm/amd/display: dchubbub p-state warning during surface planes switch (hersen wu)   
  - drm/amdgpu: Fix bug where DPM is not enabled after hibernate and resume (Sandeep Raghuraman)   
  - drm: fix drm_dp_mst_port refcount leaks in drm_dp_mst_allocate_vcpi (Xin Xiong)   
  - drm: Added orientation quirk for ASUS tablet model T103HAF (Marius Iacob)   
  - drm/panfrost: Use kvfree() to free bo->sgts (Denis Efremov)   
  - arm64: dts: marvell: espressobin: add ethernet alias (Tomasz Maciej Nowak)   
  - khugepaged: retract_page_tables() remember to test exit (Hugh Dickins)   
  - sh: landisk: Add missing initialization of sh_io_port_base (Geert Uytterhoeven)   
  - perf/x86/rapl: Fix missing psys sysfs attributes (Zhang Rui)   
  - tools build feature: Quote CC and CXX for their arguments (Daniel Díaz)   
  - perf bench mem: Always memset source before memcpy (Vincent Whitchurch)   
  - ALSA: echoaudio: Fix potential Oops in snd_echo_resume() (Dinghao Liu)   
  - crypto: algif_aead - fix uninitialized ctx->init (Ondrej Mosnacek)   
  - mfd: dln2: Run event handler loop under spinlock (Andy Shevchenko)   
  - i2c: iproc: fix race between client unreg and isr (Dhananjay Phadke)   
  - test_kmod: avoid potential double free in trigger_config_run_type() (Tiezhu Yang)   
  - fs/ufs: avoid potential u32 multiplication overflow (Colin Ian King)   
  - fs/minix: remove expected error message in block_to_path() (Eric Biggers)   
  - fs/minix: fix block limit check for V1 filesystems (Eric Biggers)   
  - fs/minix: set s_maxbytes correctly (Eric Biggers)   
  - nfs: Fix getxattr kernel panic and memory overflow (Jeffrey Mitchell)   
  - net: qcom/emac: add missed clk_disable_unprepare in error path of emac_clks_phase1_init (Wang Hai)   
  - drm/vmwgfx: Fix two list_for_each loop exit tests (Dan Carpenter)   
  - drm/vmwgfx: Use correct vmw_legacy_display_unit pointer (Dan Carpenter)   
  - recordmcount: Fix build failure on non arm64 (Christophe Leroy)   
  - Input: sentelic - fix error return when fsp_reg_write fails (Colin Ian King)   
  - x86/tsr: Fix tsc frequency enumeration bug on Lightning Mountain SoC (Dilip Kota)   
  - md-cluster: Fix potential error pointer dereference in resize_bitmaps() (Dan Carpenter)   
  - watchdog: initialize device before misc_register (Krzysztof Sobota)   
  - nfs: nfs_file_write() should check for writeback errors (Scott Mayhew)   
  - scsi: lpfc: nvmet: Avoid hang / use-after-free again when destroying targetport (Ewan D. Milne)   
  - openrisc: Fix oops caused when dumping stack (Stafford Horne)   
  - libnvdimm/security: ensure sysfs poll thread woke up and fetch updated attr (Jane Chu)   
  - libnvdimm/security: fix a typo (Jane Chu)   
  - clk: bcm2835: Do not use prediv with bcm2711's PLLs (Nicolas Saenz Julienne)   
  - ubifs: Fix wrong orphan node deletion in ubifs_jnl_update|rename (Zhihao Cheng)   
  - nfs: ensure correct writeback errors are returned on close() (Scott Mayhew)   
  - i2c: rcar: avoid race when unregistering slave (Wolfram Sang)   
  - tools build feature: Use CC and CXX from parent (Thomas Hebb)   
  - pwm: bcm-iproc: handle clk_get_rate() return (Rayagonda Kokatanur)   
  - clk: clk-atlas6: fix return value check in atlas6_clk_init() (Xu Wang)   
  - clk: qcom: gcc-sdm660: Fix up gcc_mss_mnoc_bimc_axi_clk (Konrad Dybcio)   
  - i2c: rcar: slave: only send STOP event when we have been addressed (Wolfram Sang)   
  - iommu/vt-d: Enforce PASID devTLB field mask (Liu Yi L)   
  - clk: qcom: clk-alpha-pll: remove unused/incorrect PLL_CAL_VAL (Jonathan Marek)   
  - clk: qcom: gcc: fix sm8150 GPU and NPU clocks (Jonathan Marek)   
  - iommu/omap: Check for failure of a call to omap_iommu_dump_ctx (Colin Ian King)   
  - selftests/powerpc: ptrace-pkey: Don't update expected UAMOR value (Aneesh Kumar K.V)   
  - selftests/powerpc: ptrace-pkey: Update the test to mark an invalid pkey correctly (Aneesh Kumar K.V)   
  - selftests/powerpc: ptrace-pkey: Rename variables to make it easier to follow code (Aneesh Kumar K.V)   
  - clk: actions: Fix h_clk for Actions S500 SoC (Cristian Ciocaltea)   
  - dm rq: don't call blk_mq_queue_stopped() in dm_stop_queue() (Ming Lei)   
  - gpu: ipu-v3: image-convert: Wait for all EOFs before completing a tile (Steve Longerbeam)   
  - gpu: ipu-v3: image-convert: Combine rotate/no-rotate irq handlers (Steve Longerbeam)   
  - crypto: caam - Remove broken arc4 support (Herbert Xu)   
  - mmc: renesas_sdhi_internal_dmac: clean up the code for dma complete (Yoshihiro Shimoda)   
  - RDMA/counter: Allow manually bind QPs with different pids to same counter (Mark Zhang)   
  - RDMA/counter: Only bind user QPs in auto mode (Mark Zhang)   
  - devres: keep both device name and resource name in pretty name (Vladimir Oltean)   
  - crypto: af_alg - Fix regression on empty requests (Herbert Xu)   
  - USB: serial: ftdi_sio: clean up receive processing (Johan Hovold)   
  - USB: serial: ftdi_sio: make process-packet buffer unsigned (Johan Hovold)   
  - selftests/bpf: test_progs use another shell exit on non-actions (Jesper Dangaard Brouer)   
  - selftests/bpf: Test_progs indicate to shell on non-actions (Jesper Dangaard Brouer)   
  - IB/uverbs: Set IOVA on IB MR in uverbs layer (Yishai Hadas)   
  - media: rockchip: rga: Only set output CSC mode for RGB input (Paul Kocialkowski)   
  - media: rockchip: rga: Introduce color fmt macros and refactor CSC mode logic (Paul Kocialkowski)   
  - RDMA/ipoib: Fix ABBA deadlock with ipoib_reap_ah() (Jason Gunthorpe)   
  - RDMA/ipoib: Return void from ipoib_ib_dev_stop() (Kamal Heib)   
  - platform/chrome: cros_ec_ishtp: Fix a double-unlock issue (Qiushi Wu)   
  - mtd: rawnand: fsl_upm: Remove unused mtd var (Boris Brezillon)   
  - octeontx2-af: change (struct qmem)->entry_sz from u8 to u16 (Eric Dumazet)   
  - mfd: arizona: Ensure 32k clock is put on driver unbind and error (Charles Keepax)   
  - crypto: algif_aead - Only wake up when ctx->more is zero (Herbert Xu)   
  - pinctrl: ingenic: Properly detect GPIO direction when configured for IRQ (Paul Cercueil)   
  - orangefs: get rid of knob code... (Mike Marshall)   
  - drm/imx: imx-ldb: Disable both channels for split mode in enc->disable() (Liu Ying)   
  - remoteproc: qcom_q6v5_mss: Validate modem blob firmware size before load (Sibi Sankar)   
  - remoteproc: qcom_q6v5_mss: Validate MBA firmware size before load (Sibi Sankar)   
  - remoteproc: qcom: q6v5: Update running state before requesting stop (Sibi Sankar)   
  - perf intel-pt: Fix duplicate branch after CBR (Adrian Hunter)   
  - perf intel-pt: Fix FUP packet state (Adrian Hunter)   
  - module: Correctly truncate sysfs sections output (Kees Cook)   
  - pseries: Fix 64 bit logical memory block panic (Anton Blanchard)   
  - ceph: handle zero-length feature mask in session messages (Jeff Layton)   
  - ceph: set sec_context xattr on symlink creation (Jeff Layton)   
  - watchdog: f71808e_wdt: clear watchdog timeout occurred flag (Ahmad Fatoum)   
  - watchdog: f71808e_wdt: remove use of wrong watchdog_info option (Ahmad Fatoum)   
  - watchdog: f71808e_wdt: indicate WDIOF_CARDRESET support in watchdog_info.options (Ahmad Fatoum)   
  - tracing: Move pipe reference to trace array instead of current_tracer (Steven Rostedt (VMware))   
  - tracing: Use trace_sched_process_free() instead of exit() for pid tracing (Steven Rostedt (VMware))   
  - tracing/hwlat: Honor the tracing_cpumask (Kevin Hao)   
  - kprobes: Fix NULL pointer dereference at kprobe_ftrace_handler (Muchun Song)   
  - ftrace: Setup correct FTRACE_FL_REGS flags for module (Chengming Zhou)   
  - mm/memory_hotplug: fix unpaired mem_hotplug_begin/done (Jia He)   
  - mm/page_counter.c: fix protection usage propagation (Michal Koutný)   
  - ocfs2: change slot number type s16 to u16 (Junxiao Bi)   
  - khugepaged: collapse_pte_mapped_thp() protect the pmd lock (Hugh Dickins)   
  - khugepaged: collapse_pte_mapped_thp() flush the right range (Hugh Dickins)   
  - ext2: fix missing percpu_counter_inc (Mikulas Patocka)   
  - MIPS: qi_lb60: Fix routing to audio amplifier (Paul Cercueil)   
  - MIPS: CPU#0 is not hotpluggable (Huacai Chen)   
  - driver core: Avoid binding drivers to dead devices (Lukas Wunner)   
  - mac80211: fix misplaced while instead of if (Johannes Berg)   
  - bcache: fix overflow in offset_to_stripe() (Coly Li)   
  - bcache: allocate meta data pages as compound pages (Coly Li)   
  - md/raid5: Fix Force reconstruct-write io stuck in degraded raid5 (ChangSyun Peng)   
  - net/compat: Add missing sock updates for SCM_RIGHTS (Kees Cook)   
  - net: stmmac: dwmac1000: provide multicast filter fallback (Jonathan McDowell)   
  - net: ethernet: stmmac: Disable hardware multicast filter (Jonathan McDowell)   
  - media: vsp1: dl: Fix NULL pointer dereference on unbind (Eugeniu Rosca)   
  - pinctrl: ingenic: Enhance support for IRQ_TYPE_EDGE_BOTH (Paul Cercueil)   
  - powerpc: Fix circular dependency between percpu.h and mmu.h (Michael Ellerman)   
  - powerpc: Allow 4224 bytes of stack expansion for the signal frame (Michael Ellerman)   
  - powerpc/ptdump: Fix build failure in hashpagetable.c (Christophe Leroy)   
  - cifs: Fix leak when handling lease break for cached root fid (Paul Aurich)   
  - xtensa: fix xtensa_pmu_setup prototype (Max Filippov)   
  - xtensa: add missing exclusive access state management (Max Filippov)   
  - iio: dac: ad5592r: fix unbalanced mutex unlocks in ad5592r_read_raw() (Alexandru Ardelean)   
  - dt-bindings: iio: io-channel-mux: Fix compatible string in example code (Christian Eggers)   
  - arm64: perf: Correct the event index in sysfs (Shaokun Zhang)   
  - btrfs: fix return value mixup in btrfs_get_extent (Pavel Machek)   
  - btrfs: make sure SB_I_VERSION doesn't get unset by remount (Josef Bacik)   
  - btrfs: fix memory leaks after failure to lookup checksums during inode logging (Filipe Manana)   
  - btrfs: inode: fix NULL pointer dereference if inode doesn't need compression (Qu Wenruo)   
  - btrfs: only search for left_info if there is no right_info in try_merge_free_space (Josef Bacik)   {CVE-2019-19448} 
  - btrfs: fix messages after changing compression level by remount (David Sterba)   
  - btrfs: fix race between page release and a fast fsync (Filipe Manana)   
  - btrfs: don't WARN if we abort a transaction with EROFS (Josef Bacik)   
  - btrfs: sysfs: use NOFS for device creation (Josef Bacik)   
  - btrfs: avoid possible signal interruption of btrfs_drop_snapshot() on relocation tree (Qu Wenruo)   
  - btrfs: add missing check for nocow and compression inode flags (David Sterba)   
  - btrfs: relocation: review the call sites which can be interrupted by signal (Qu Wenruo)   
  - btrfs: move the chunk_mutex in btrfs_read_chunk_tree (Josef Bacik)   
  - btrfs: open device without device_list_mutex (Josef Bacik)   
  - btrfs: don't traverse into the seed devices in show_devname (Anand Jain)   
  - btrfs: remove no longer needed use of log_writers for the log root tree (Filipe Manana)   
  - btrfs: stop incremening log_batch for the log root tree when syncing log (Filipe Manana)   
  - btrfs: ref-verify: fix memory leak in add_block_entry (Tom Rix)   
  - btrfs: don't allocate anonymous block device for user invisible roots (Qu Wenruo)   
  - btrfs: free anon block device right after subvolume deletion (Qu Wenruo)   
  - btrfs: allow use of global block reserve for balance item deletion (David Sterba)   
  - PCI: qcom: Add support for tx term offset for rev 2.1.0 (Ansuel Smith)   
  - PCI: qcom: Define some PARF params needed for ipq8064 SoC (Ansuel Smith)   
  - PCI: Add device even if driver attach failed (Rajat Jain)   
  - PCI: Mark AMD Navi10 GPU rev 0x00 ATS as broken (Kai-Heng Feng)   
  - PCI: hotplug: ACPI: Fix context refcounting in acpiphp_grab_context() (Rafael J. Wysocki)   
  - genirq/PM: Always unlock IRQ descriptor in rearm_wake_irq() (Guenter Roeck)   
  - genirq/affinity: Make affinity setting if activated opt-in (Thomas Gleixner)   
  - smb3: warn on confusing error scenario with sec=krb5 (Steve French)   
  - scsi: mpt3sas: Fix memset() in non-RDPQ mode (Suganath Prabu S)  [Orabug: 31741029]  
  - scsi: mpt3sas: Fix reply queue count in non RDPQ mode (Suganath Prabu S)  [Orabug: 31741029]  
  - scsi: mpt3sas: Remove unused including <linux/version.h> (Samuel Zou)  [Orabug: 31741029]  
  - scsi: mpt3sas: Disable DIF when prot_mask set to zero (Sreekanth Reddy)  [Orabug: 31741029]  
  - scsi: mpt3sas: Capture IOC data for debugging purposes (Suganath Prabu)  [Orabug: 31741029]  
  - scsi: mpt3sas: Use true, false for ioc->use_32bit_dma (Jason Yan)  [Orabug: 31741029]  
  - scsi: mpt3sas: Remove NULL check before freeing function (Jason Yan)  [Orabug: 31741029]  
  - scsi: mpt3sas: Update mpt3sas version to 33.101.00.00 (Suganath Prabu)  [Orabug: 31741029]  
  - scsi: mpt3sas: Handle RDPQ DMA allocation in same 4G region (Suganath Prabu)  [Orabug: 31741029]  
  - scsi: mpt3sas: Separate out RDPQ allocation to new function (Suganath Prabu)  [Orabug: 31741029]  
  - scsi: mpt3sas: Rename function name is_MSB_are_same (Suganath Prabu)  [Orabug: 31741029]  
  - scsi: mpt3sas: Don't change the DMA coherent mask after allocations (Christoph Hellwig)  [Orabug: 31741029]  
  - scsi: mpt3sas: use true,false for bool variables (Jason Yan)  [Orabug: 31741029]  
  - x86/mm: use max memory block size on bare metal (Daniel Jordan)  [Orabug: 31765311]  
  - drivers/base/memory.c: cache memory blocks in xarray to accelerate lookup (Scott Cheloha)  [Orabug: 31765311]  
  - sched/core: remove undesired trace_printk from core scheduling backport (chris hyser)  [Orabug: 31757863]  
  - libnvdimm/security: ensure sysfs poll thread woke up and fetch updated attr (Jane Chu)  [Orabug: 30501507]  
  - libnvdimm/security: the 'security' attr never (Jane Chu)  [Orabug: 30501507]  
  - libnvdimm/security: fix a typo (Jane Chu)  [Orabug: 30501507]  
  - net/rds: Incorrect pointer used in rds_getname() (Ka-Cheong Poon)  [Orabug: 31755710]  
  - Linux 5.4.59 (Greg Kroah-Hartman)   
  - io_uring: Fix NULL pointer dereference in loop_rw_iter() (Guoyu Huang)   
  - s390/gmap: improve THP splitting (Gerald Schaefer)   
  - s390/dasd: fix inability to use DASD with DIAG driver (Stefan Haberland)   
  - xen/gntdev: Fix dmabuf import with non-zero sgt offset (Oleksandr Andrushchenko)   
  - xen/balloon: make the balloon wait interruptible (Roger Pau Monne)   
  - xen/balloon: fix accounting in alloc_xenballooned_pages error path (Roger Pau Monne)   
  - fs/minix: reject too-large maximum file size (Eric Biggers)   
  - fs/minix: don't allow getting deleted inodes (Eric Biggers)   
  - fs/minix: check return value of sb_getblk() (Eric Biggers)   
  - bitfield.h: don't compile-time validate _val in FIELD_FIT (Jakub Kicinski)   
  - crypto: cpt - don't sleep of CRYPTO_TFM_REQ_MAY_SLEEP was not specified (Mikulas Patocka)   
  - crypto: ccp - Fix use of merged scatterlists (John Allen)   
  - crypto: qat - fix double free in qat_uclo_create_batch_init_list (Tom Rix)   
  - crypto: hisilicon - don't sleep of CRYPTO_TFM_REQ_MAY_SLEEP was not specified (Mikulas Patocka)   
  - pstore: Fix linking when crypto API disabled (Matteo Croce)   
  - tpm: Unify the mismatching TPM space buffer sizes (Jarkko Sakkinen)   
  - ALSA: usb-audio: add quirk for Pioneer DDJ-RB (Hector Martin)   
  - irqdomain/treewide: Free firmware node after domain removal (Jon Derrick)   
  - ARM: 8992/1: Fix unwind_frame for clang-built kernels (Nathan Huckleberry)   
  - parisc: mask out enable and reserved bits from sba imask (Sven Schnelle)   
  - parisc: Implement __smp_store_release and __smp_load_acquire barriers (John David Anglin)   
  - parisc: Do not use an ordered store in pa_tlb_lock() (John David Anglin)   
  - Revert "parisc: Revert "Release spinlocks using ordered store"" (Helge Deller)   
  - Revert "parisc: Use ldcw instruction for SMP spinlock release barrier" (Helge Deller)   
  - Revert "parisc: Drop LDCW barrier in CAS code when running UP" (Helge Deller)   
  - erofs: fix extended inode could cross boundary (Gao Xiang)   
  - mtd: rawnand: qcom: avoid write to unavailable register (Sivaprakash Murugesan)   
  - spi: spidev: Align buffers for DMA (Christian Eggers)   
  - include/asm-generic/vmlinux.lds.h: align ro_after_init (Romain Naour)   
  - cpufreq: dt: fix oops on armada37xx (Ivan Kokshaysky)   
  - cpufreq: Fix locking issues with governors (Viresh Kumar)   
  - NFS: Don't return layout segments that are in use (Trond Myklebust)   
  - NFS: Don't move layouts to plh_return_segs list while in use (Trond Myklebust)   
  - io_uring: set ctx sq/cq entry count earlier (Jens Axboe)   
  - drm/ttm/nouveau: don't call tt destroy callback on alloc failure. (Dave Airlie)   
  - media: media-request: Fix crash if memory allocation fails (Tuomas Tynkkynen)   
  - 9p: Fix memory leak in v9fs_mount (Zheng Bin)   
  - ALSA: usb-audio: work around streaming quirk for MacroSilicon MS2109 (Hector Martin)   
  - ALSA: usb-audio: fix overeager device match for MacroSilicon MS2109 (Hector Martin)   
  - ALSA: usb-audio: Creative USB X-Fi Pro SB1095 volume knob support (Mirko Dietrich)   
  - ALSA: hda - fix the micmute led status for Lenovo ThinkCentre AIO (Hui Wang)   
  - USB: serial: cp210x: enable usb generic throttle/unthrottle (Brant Merryman)   
  - USB: serial: cp210x: re-enable auto-RTS on open (Brant Merryman)   
  - net: initialize fastreuse on inet_inherit_port (Tim Froidcoeur)   
  - net: refactor bind_bucket fastreuse into helper (Tim Froidcoeur)   
  - vmxnet3: use correct tcp hdr length when packet is encapsulated (Ronak Doshi)   
  - tcp: correct read of TFO keys on big endian systems (Jason Baron)   
  - net/tls: Fix kmap usage (Ira Weiny)   
  - net: Set fput_needed iff FDPUT_FPUT is set (Miaohe Lin)   
  - net: phy: fix memory leak in device-create error path (Johan Hovold)   
  - net/nfc/rawsock.c: add CAP_NET_RAW check. (Qingyu Li)   
  - net: Fix potential memory leak in proto_register() (Miaohe Lin)   
  - drivers/net/wan/lapbether: Added needed_headroom and a skb->len check (Xie He)   
  - af_packet: TPACKET_V3: fix fill status rwlock imbalance (John Ogness)   
  - crypto: aesni - add compatibility with IAS (Jian Cai)   
  - x86/fsgsbase/64: Fix NULL deref in 86_fsgsbase_read_task (Eric Dumazet)   
  - SUNRPC: Fix ("SUNRPC: Add "@len" parameter to gss_unwrap()") (Chuck Lever)   
  - svcrdma: Fix page leak in svc_rdma_recv_read_chunk() (Chuck Lever)   
  - pinctrl-single: fix pcs_parse_pinconf() return value (Drew Fustini)   
  - ocfs2: fix unbalanced locking (Pavel Machek)   
  - dlm: Fix kobject memleak (Wang Hai)   
  - net: thunderx: initialize VF's mailbox mutex before first usage (Dean Nelson)   
  - fsl/fman: fix eth hash table allocation (Florinel Iordache)   
  - fsl/fman: check dereferencing null pointer (Florinel Iordache)   
  - fsl/fman: fix unreachable code (Florinel Iordache)   
  - fsl/fman: fix dereference null return value (Florinel Iordache)   
  - fsl/fman: use 32-bit unsigned integer (Florinel Iordache)   
  - net: spider_net: Fix the size used in a 'dma_free_coherent()' call (Christophe JAILLET)   
  - liquidio: Fix wrong return value in cn23xx_get_pf_num() (Tianjia Zhang)   
  - net: ethernet: aquantia: Fix wrong return value (Tianjia Zhang)   
  - net/mlx5: Delete extra dump stack that gives nothing (Leon Romanovsky)   
  - net/mlx5: DR, Change push vlan action sequence (Alex Vesker)   
  - tools, bpftool: Fix wrong return value in do_dump() (Tianjia Zhang)   
  - tools, build: Propagate build failures from tools/build/Makefile.build (Andrii Nakryiko)   
  - wl1251: fix always return 0 error (Wang Hai)   
  - rtw88: coex: only skip coex triggered by BT info (Yan-Hsuan Chuang)   
  - rtw88: fix short GI capability based on current bandwidth (Tsang-Shian Lin)   
  - rtw88: fix LDPC field for RA info (Tsang-Shian Lin)   
  - ice: Graceful error handling in HW table calloc failure (Surabhi Boob)   
  - s390/qeth: don't process empty bridge port events (Julian Wiedmann)   
  - ASoC: fsl_sai: Fix value of FSL_SAI_CR1_RFW_MASK (Shengjiu Wang)   
  - ASoC: meson: axg-tdm-formatters: fix sclk inversion (Jerome Brunet)   
  - ASoC: meson: axg-tdmin: fix g12a skew (Jerome Brunet)   
  - ASoC: meson: axg-tdm-interface: fix link fmt setup (Jerome Brunet)   
  - selftests/powerpc: Fix online CPU selection (Sandipan Das)   
  - cpufreq: ap806: fix cpufreq driver needs ap cpu clk (Sven Auhagen)   
  - PCI: Release IVRS table in AMD ACS quirk (Hanjun Guo)   
  - RDMA/netlink: Remove CAP_NET_RAW check when dump a raw QP (Mark Zhang)   
  - selftests/powerpc: Fix CPU affinity for child process (Harish)   
  - powerpc/boot: Fix CONFIG_PPC_MPC52XX references (Michael Ellerman)   
  - powerpc/32s: Fix CONFIG_BOOK3S_601 uses (Michael Ellerman)   
  - selftests/powerpc: Squash spurious errors due to device removal (Oliver O'Halloran)   
  - xfs: fix inode allocation block res calculation precedence (Brian Foster)   
  - net: dsa: rtl8366: Fix VLAN set-up (Linus Walleij)   
  - net: dsa: rtl8366: Fix VLAN semantics (Linus Walleij)   
  - Bluetooth: hci_serdev: Only unregister device if it was registered (Nicolas Boichat)   
  - Bluetooth: hci_h5: Set HCI_UART_RESET_ON_INIT to correct flags (Nicolas Boichat)   
  - power: supply: check if calc_soc succeeded in pm860x_init_battery (Tom Rix)   
  - Smack: prevent underflow in smk_set_cipso() (Dan Carpenter)   
  - Smack: fix another vsscanf out of bounds (Dan Carpenter)   
  - RDMA/core: Fix return error value in _ib_modify_qp() to negative (Li Heng)   
  - PCI: cadence: Fix updating Vendor ID and Subsystem Vendor ID register (Kishon Vijay Abraham I)   
  - macintosh/via-macii: Access autopoll_devs when inside lock (Finn Thain)   
  - net: dsa: mv88e6xxx: MV88E6097 does not support jumbo configuration (Chris Packham)   
  - scsi: mesh: Fix panic after host or bus reset (Finn Thain)   
  - scsi: megaraid_sas: Clear affinity hint (Tomas Henzl)   
  - usb: gadget: f_uac2: fix AC Interface Header Descriptor wTotalLength (Ruslan Bilovol)   
  - usb: dwc2: Fix error path in gadget registration (Marek Szyprowski)   
  - MIPS: OCTEON: add missing put_device() call in dwc3_octeon_device_init() (Yu Kuai)   
  - phy: armada-38x: fix NETA lockup when repeatedly switching speeds (Russell King)   
  - mt76: mt7615: fix potential memory leak in mcu message handler (Sean Wang)   
  - powerpc/perf: Fix missing is_sier_aviable() during build (Madhavan Srinivasan)   
  - coresight: tmc: Fix TMC mode read in tmc_read_unprepare_etb() (Sai Prakash Ranjan)   
  - thermal: ti-soc-thermal: Fix reversed condition in ti_thermal_expose_sensor() (Dan Carpenter)   
  - usb: core: fix quirks_param_set() writing to a const pointer (Kars Mulder)   
  - USB: serial: iuu_phoenix: fix led-activity helpers (Johan Hovold)   
  - spi: lantiq-ssc: Fix warning by using WQ_MEM_RECLAIM (Hauke Mehrtens)   
  - gpu: ipu-v3: Restore RGB32, BGR32 (Steve Longerbeam)   
  - drm/imx: tve: fix regulator_disable error path (Marco Felsch)   
  - drm/imx: fix use after free (Philipp Zabel)   
  - powerpc/book3s64/pkeys: Use PVR check instead of cpu feature (Aneesh Kumar K.V)   
  - phy: renesas: rcar-gen3-usb2: move irq registration to init (Yoshihiro Shimoda)   
  - PCI/ASPM: Add missing newline in sysfs 'policy' (Xiongfeng Wang)   
  - ASoC: meson: fixes the missed kfree() for axg_card_add_tdm_loopback (Jing Xiangfeng)   
  - staging: rtl8192u: fix a dubious looking mask before a shift (Colin Ian King)   
  - ima: Have the LSM free its audit rule (Tyler Hicks)   
  - RDMA/rxe: Prevent access to wr->next ptr afrer wr is posted to send queue (Mikhail Malygin)   
  - RDMA/qedr: SRQ's bug fixes (Yuval Basson)   
  - powerpc/vdso: Fix vdso cpu truncation (Milton Miller)   
  - powerpc/rtas: don't online CPUs for partition suspend (Nathan Lynch)   
  - kernfs: do not call fsnotify() with name without a parent (Amir Goldstein)   
  - mwifiex: Prevent memory corruption handling keys (Dan Carpenter)   
  - scsi: scsi_debug: Add check for sdebug_max_queue during module init (John Garry)   
  - drm/bridge: sil_sii8620: initialize return of sii8620_readb (Tom Rix)   
  - phy: exynos5-usbdrd: Calibrating makes sense only for USB2.0 PHY (Marek Szyprowski)   
  - drm: panel: simple: Fix bpc for LG LB070WV8 panel (Laurent Pinchart)   
  - leds: core: Flush scheduled work for system suspend (Kai-Heng Feng)   
  - kobject: Avoid premature parent object freeing in kobject_cleanup() (Heikki Krogerus)   
  - drm/stm: repair runtime power management (Marek Vasut)   
  - PCI: Fix pci_cfg_wait queue locking problem (Bjorn Helgaas)   
  - RDMA/rxe: Skip dgid check in loopback mode (Zhu Yanjun)   
  - xfs: fix reflink quota reservation accounting error (Darrick J. Wong)   
  - xfs: don't eat an EIO/ENOSPC writeback error when scrubbing data fork (Darrick J. Wong)   
  - media: cros-ec-cec: do not bail on device_init_wakeup failure (Dariusz Marcinkiewicz)   
  - media: exynos4-is: Add missed check for pinctrl_lookup_state() (Chuhong Yuan)   
  - media: firewire: Using uninitialized values in node_probe() (Dan Carpenter)   
  - ipvs: allow connection reuse for unconfirmed conntrack (Julian Anastasov)   
  - scsi: eesox: Fix different dev_id between request_irq() and free_irq() (Christophe JAILLET)   
  - scsi: powertec: Fix different dev_id between request_irq() and free_irq() (Christophe JAILLET)   
  - RDMA/core: Fix bogus WARN_ON during ib_unregister_device_queued() (Jason Gunthorpe)   
  - iavf: Fix updating statistics (Tony Nguyen)   
  - iavf: fix error return code in iavf_init_get_resources() (Wei Yongjun)   
  - staging: vchiq_arm: Add a matching unregister call (Phil Elwell)   
  - drm/radeon: fix array out-of-bounds read and write issues (Colin Ian King)   
  - cxl: Fix kobject memleak (Wang Hai)   
  - drm/mipi: use dcs write for mipi_dsi_dcs_set_tear_scanline (Emil Velikov)   
  - scsi: cumana_2: Fix different dev_id between request_irq() and free_irq() (Christophe JAILLET)   
  - ASoC: Intel: bxt_rt298: add missing .owner field (Pierre-Louis Bossart)   
  - ASoC: SOF: nocodec: add missing .owner field (Pierre-Louis Bossart)   
  - media: omap3isp: Add missed v4l2_ctrl_handler_free() for preview_init_entities() (Chuhong Yuan)   
  - media: marvell-ccic: Add missed v4l2_async_notifier_cleanup() (Chuhong Yuan)   
  - media: cxusb-analog: fix V4L2 dependency (Arnd Bergmann)   
  - Bluetooth: btmtksdio: fix up firmware download sequence (Sean Wang)   
  - Bluetooth: btusb: fix up firmware download sequence (Sean Wang)   
  - leds: lm355x: avoid enum conversion warning (Arnd Bergmann)   
  - clk: bcm63xx-gate: fix last clock availability (Álvaro Fernández Rojas)   
  - drm/arm: fix unintentional integer overflow on left shift (Colin Ian King)   
  - drm/etnaviv: Fix error path on failure to enable bus clk (Lubomir Rintel)   
  - iio: improve IIO_CONCENTRATION channel type description (Tomasz Duszynski)   
  - ath10k: Acquire tx_lock in tx error paths (Evan Green)   
  - video: pxafb: Fix the function used to balance a 'dma_alloc_coherent()' call (Christophe JAILLET)   
  - console: newport_con: fix an issue about leak related system resources (Dejin Zheng)   
  - video: fbdev: sm712fb: fix an issue about iounmap for a wrong address (Dejin Zheng)   
  - btmrvl: Fix firmware filename for sd8997 chipset (Pali Rohár)   
  - btmrvl: Fix firmware filename for sd8977 chipset (Pali Rohár)   
  - mwifiex: Fix firmware filename for sd8997 chipset (Pali Rohár)   
  - mwifiex: Fix firmware filename for sd8977 chipset (Pali Rohár)   
  - agp/intel: Fix a memory leak on module initialisation failure (Qiushi Wu)   
  - drm/bridge: ti-sn65dsi86: Clear old error bits before AUX transfers (Douglas Anderson)   
  - drm/gem: Fix a leak in drm_gem_objects_lookup() (Dan Carpenter)   
  - drm/msm: ratelimit crtc event overflow error (Rob Clark)   
  - ACPICA: Do not increment operation_region reference counts for field units (Erik Kaneda)   
  - bcache: fix super block seq numbers comparision in register_cache_set() (Coly Li)   
  - dyndbg: fix a BUG_ON in ddebug_describe_flags (Jim Cromie)   
  - usb: bdc: Halt controller on suspend (Danesh Petigara)   
  - bdc: Fix bug causing crash after multiple disconnects (Sasi Kumar)   
  - usb: gadget: net2280: fix memory leak on probe error handling paths (Evgeny Novikov)   
  - mmc: sdhci-pci-o2micro: Bug fix for O2 host controller Seabird1 (shirley her)   
  - ionic: update eid test for overflow (Shannon Nelson)   
  - gpu: host1x: debug: Fix multiple channels emitting messages simultaneously (Dmitry Osipenko)   
  - iwlegacy: Check the return value of pcie_capability_read_*() (Bolarinwa Olayemi Saheed)   
  - platform/x86: asus-nb-wmi: add support for ASUS ROG Zephyrus G14 and G15 (Armas Spann)   
  - brcmfmac: set state of hanger slot to FREE when flushing PSQ (Wright Feng)   
  - brcmfmac: To fix Bss Info flag definition Bug (Prasanna Kerekoppa)   
  - brcmfmac: keep SDIO watchdog running when console_interval is non-zero (Wright Feng)   
  - bpf: Fix fds_example SIGSEGV error (Wenbo Zhang)   
  - drm/amd/powerplay: fix compile error with ARCH=arc (Evan Quan)   
  - drm/amdgpu/display bail early in dm_pp_get_static_clocks (Alex Deucher)   
  - mm/mmap.c: Add cond_resched() for exit_mmap() CPU stalls (Paul E. McKenney)   
  - irqchip/irq-mtk-sysirq: Replace spinlock with raw_spinlock (Bartosz Golaszewski)   
  - drm/radeon: disable AGP by default (Christian König)   
  - drm/debugfs: fix plain echo to connector "force" attribute (Michael Tretter)   
  - drm/msm: Fix a null pointer access in msm_gem_shrinker_count() (Akhil P Oommen)   
  - drm: msm: a6xx: fix gpu failure after system resume (Akhil P Oommen)   
  - usb: mtu3: clear dual mode of u3port when disable device (Chunfeng Yun)   
  - btrfs: fix lockdep splat from btrfs_dump_space_info (Josef Bacik)   
  - mmc: sdhci-cadence: do not use hardware tuning for SD mode (Masahiro Yamada)   
  - drm/nouveau: fix multiple instances of reference count leaks (Aditya Pakki)   
  - drm/nouveau: fix reference count leak in nouveau_debugfs_strap_peek (Aditya Pakki)   
  - drm/etnaviv: fix ref count leak via pm_runtime_get_sync (Navid Emamdoost)   
  - arm64: dts: hisilicon: hikey: fixes to comply with adi, adv7533 DT binding (Ricardo Cañuelo)   
  - drm/nouveau/kms/nv50-: Fix disabling dithering (Lyude Paul)   
  - md-cluster: fix wild pointer of unlock_all_bitmaps() (Zhao Heming)   
  - bus: ti-sysc: Add missing quirk flags for usb_host_hs (Tony Lindgren)   
  - video: fbdev: neofb: fix memory leak in neo_scan_monitor() (Evgeny Novikov)   
  - video: fbdev: savage: fix memory leak on error handling path in probe (Evgeny Novikov)   
  - crypto: aesni - Fix build with LLVM_IAS=1 (Sedat Dilek)   
  - drm/radeon: Fix reference count leaks caused by pm_runtime_get_sync (Aditya Pakki)   
  - drm/amdgpu: avoid dereferencing a NULL pointer (Jack Xiao)   
  - fs/btrfs: Add cond_resched() for try_release_extent_mapping() stalls (Paul E. McKenney)   
  - loop: be paranoid on exit and prevent new additions / removals (Luis Chamberlain)   
  - Bluetooth: add a mutex lock to avoid UAF in do_enale_set (Lihong Kou)   
  - soc: qcom: rpmh-rsc: Set suppress_bind_attrs flag (Maulik Shah)   
  - drm/tilcdc: fix leak & null ref in panel_connector_get_modes (Tomi Valkeinen)   
  - nvme-multipath: do not fall back to __nvme_find_path() for non-optimized paths (Hannes Reinecke)   
  - nvme-multipath: fix logic for non-optimized paths (Martin Wilck)   
  - nvme-rdma: fix controller reset hang during traffic (Sagi Grimberg)   
  - nvme-tcp: fix controller reset hang during traffic (Sagi Grimberg)   
  - md: raid0/linear: fix dereference before null check on pointer mddev (Colin Ian King)   
  - seccomp: Fix ioctl number for SECCOMP_IOCTL_NOTIF_ID_VALID (Kees Cook)   
  - irqchip/ti-sci-inta: Fix return value about devm_ioremap_resource() (Tiezhu Yang)   
  - iocost: Fix check condition of iocg abs_vdebt (Chengming Zhou)   
  - ARM: socfpga: PM: add missing put_device() call in socfpga_setup_ocram_self_refresh() (Yu Kuai)   
  - spi: rockchip: Fix error in SPI slave pio read (Jon Lin)   
  - io_uring: fix sq array offset calculation (Dmitry Vyukov)   
  - regulator: fix memory leak on error path of regulator_register() (Vladimir Zapolskiy)   
  - recordmcount: only record relocation of type R_AARCH64_CALL26 on arm64. (Gregory Herrero)   
  - tpm: Require that all digests are present in TCG_PCR_EVENT2 structures (Tyler Hicks)   
  - spi: lantiq: fix: Rx overflow error in full duplex mode (Dilip Kota)   
  - ARM: dts: sunxi: bananapi-m2-plus-v1.2: Fix CPU supply voltages (Chen-Yu Tsai)   
  - ARM: dts: sunxi: bananapi-m2-plus-v1.2: Add regulator supply to all CPU cores (Chen-Yu Tsai)   
  - ARM: at91: pm: add missing put_device() call in at91_pm_sram_init() (yu kuai)   
  - ARM: dts: gose: Fix ports node name for adv7612 (Niklas Söderlund)   
  - ARM: dts: gose: Fix ports node name for adv7180 (Niklas Söderlund)   
  - platform/x86: intel-vbtn: Fix return value check in check_acpi_dev() (Lu Wei)   
  - platform/x86: intel-hid: Fix return value check in check_acpi_dev() (Lu Wei)   
  - m68k: mac: Fix IOP status/control register writes (Finn Thain)   
  - m68k: mac: Don't send IOP message until channel is idle (Finn Thain)   
  - clk: scmi: Fix min and max rate when registering clocks with discrete rates (Sudeep Holla)   
  - sched/uclamp: Fix initialization of struct uclamp_rq (Qais Yousef)   
  - arm64: dts: exynos: Fix silent hang after boot on Espresso (Alim Akhtar)   
  - firmware: arm_scmi: Fix SCMI genpd domain probing (Cristian Marussi)   
  - ARM: exynos: MCPM: Restore big.LITTLE cpuidle support (Marek Szyprowski)   
  - crypto: ccree - fix resource leak on error path (Gilad Ben-Yossef)   
  - blktrace: fix debugfs use after free (Luis Chamberlain)   {CVE-2019-19770} 
  - arm64: dts: qcom: msm8916: Replace invalid bias-pull-none property (Stephan Gerhold)   
  - crc-t10dif: Fix potential crypto notify dead-lock (Herbert Xu)   
  - EDAC: Fix reference count leaks (Qiushi Wu)   
  - arm64: dts: rockchip: fix rk3399-puma gmac reset gpio (Heiko Stuebner)   
  - arm64: dts: rockchip: fix rk3399-puma vcc5v0-host gpio (Heiko Stuebner)   
  - arm64: dts: rockchip: fix rk3368-lion gmac reset gpio (Heiko Stuebner)   
  - sched: correct SD_flags returned by tl->sd_flags() (Peng Liu)   
  - sched/fair: Fix NOHZ next idle balance (Vincent Guittot)   
  - x86/mce/inject: Fix a wrong assignment of i_mce.status (Zhenzhong Duan)   
  - clk: qcom: clk-rpmh: Wait for completion when enabling clocks (Mike Tipton)   
  - fs/io_uring.c: Fix uninitialized variable is referenced in io_submit_sqe (Liu Yong)   
  - nvme: add a Identify Namespace Identification Descriptor list quirk (Christoph Hellwig)   
  - HID: input: Fix devices that return multiple bytes in battery report (Grant Likely)   
  - tracepoint: Mark __tracepoint_string's __used (Nick Desaulniers)   
  - uek-rpm: Enable CONFIG_EDAC_I10NM (Thomas Tai)  [Orabug: 31644938]  
  - EDAC/i10nm: Update driver to support different bus number config register offsets (Qiuxu Zhuo)  [Orabug: 31644938]  
  - EDAC, {skx,i10nm}: Make some configurations CPU model specific (Qiuxu Zhuo)  [Orabug: 31644938]  
  - EDAC: Convert to new X86 CPU match macros (Thomas Gleixner)  [Orabug: 31644938]  
  - arm64/dts: Serial console fix for RPi4 (Vijay Kumar)  [Orabug: 31747726]  
  - md: get sysfs entry after redundancy attr group create (Junxiao Bi)  [Orabug: 31682031]  
  - md: fix deadlock causing by sysfs_notify (Junxiao Bi)  [Orabug: 31682031]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.el8uek]
changelog:
  - RDMA/bnxt_re: Do not add user qps to flushlist (Selvin Xavier)  [Orabug: 31820672]  
  - RDMA/bnxt_re: Update maintainers for Broadcom rdma driver (Devesh Sharma)  [Orabug: 31820672]  
  - RDMA/bnxt_re: Change wr posting logic to accommodate variable wqes (Devesh Sharma)  [Orabug: 31820672]  
  - RDMA/bnxt_re: Add helper data structures (Devesh Sharma)  [Orabug: 31820672]  
  - RDMA/bnxt_re: Pull psn buffer dynamically based on prod (Devesh Sharma)  [Orabug: 31820672]  
  - RDMA/bnxt_re: introduce a function to allocate swq (Devesh Sharma)  [Orabug: 31820672]  
  - RDMA/bnxt_re: introduce wqe mode to select execution path (Devesh Sharma)  [Orabug: 31820672]  
  - RDMA/cm: Protect access to remote_sidr_table (Maor Gottlieb)  [Orabug: 31784883]  
  - RDMA/cm: Fix missing RDMA_CM_EVENT_REJECTED event after receiving REJ message (Leon Romanovsky)  [Orabug: 31784651]  
  - sample-trace-array: Fix sleeping function called from invalid context (Kefeng Wang)  [Orabug: 31712849]  
  - sample-trace-array: Remove trace_array 'sample-instance' (Kefeng Wang)  [Orabug: 31712849]  
  - tracing: Sample module to demonstrate kernel access to Ftrace instances. (Divya Indi)  [Orabug: 31712849]  
  - tracing: Adding new functions for kernel access to Ftrace instances (Aruna Ramakrishna)  [Orabug: 31712849]  
  - tracing: Adding NULL checks for trace_array descriptor pointer (Divya Indi)  [Orabug: 31712849]  
  - tracing: Verify if trace array exists before destroying it. (Divya Indi)  [Orabug: 31712849]  
  - tracing: Declare newly exported APIs in include/linux/trace.h (Divya Indi)  [Orabug: 31712849]  
  - sched/core: cleanup kABI for struct rq (chris hyser)  [Orabug: 31776423]  
  - Revert "scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe" (Quinn Tran)  [Orabug: 31798223]  
  - Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Saurav Kashyap)  [Orabug: 31798223]  
  - scsi: qla2xxx: Fix null pointer access during disconnect from subsystem (Quinn Tran)  [Orabug: 31798223]  
  - scsi: qla2xxx: Check if FW supports MQ before enabling (Saurav Kashyap)  [Orabug: 31798223]  
  - scsi: qla2xxx: Fix WARN_ON in qla_nvme_register_hba (Arun Easi)  [Orabug: 31798223]  
  - scsi: qla2xxx: Allow ql2xextended_error_logging special value 1 to be set anytime (Arun Easi)  [Orabug: 31798223]  
  - scsi: qla2xxx: Reduce noisy debug message (Quinn Tran)  [Orabug: 31798223]  
  - scsi: qla2xxx: Fix login timeout (Quinn Tran)  [Orabug: 31798223]  
  - scsi: qla2xxx: Indicate correct supported speeds for Mezz card (Quinn Tran)  [Orabug: 31798223]  
  - scsi: qla2xxx: Flush I/O on zone disable (Quinn Tran)  [Orabug: 31798223]  
  - scsi: qla2xxx: Flush all sessions on zone disable (Quinn Tran)  [Orabug: 31798223]  
  - scsi: qla2xxx: Use MBX_TOV_SECONDS for mailbox command timeout values (Enzo Matsumiya)  [Orabug: 31798223]  
  - rename kABI whitelists to lockedlists (Dan Duval)  [Orabug: 31783145]  
  - x86/vmlinux: Restore "text" Program Header with dummy section (Kees Cook)  [Orabug: 31781680]  
  - bnxt: don't enable NAPI until rings are ready (Jakub Kicinski)  [Orabug: 31541567]  
  - bnxt_en: Setup default RSS map in all scenarios. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: init RSS table for Minimal-Static VF reservation (Edwin Peer)  [Orabug: 31541567]  
  - bnxt_en: fix HWRM error when querying VF temperature (Edwin Peer)  [Orabug: 31541567]  
  - bnxt_en: Fix possible crash in bnxt_fw_reset_task(). (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Fix PCI AER error recovery flow (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Fix ethtool -S statitics with XDP or TCs enabled. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Check for zero dir entries in NVRAM. (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Don't query FW when netif_running() is false. (Pavan Chebbi)  [Orabug: 31541567]  
  - bnxt_en: Remove superfluous memset() (Li Heng)  [Orabug: 31541567]  
  - bnxt_en: Add support for 'ethtool -d' (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Switch over to use the 64-bit software accumulated counters. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Accumulate all counters. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Retrieve hardware masks for port counters. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Retrieve hardware counter masks from firmware if available. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Allocate additional memory for all statistics blocks. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Refactor statistics code and structures. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Use macros to define port statistics size and offset. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Update firmware interface to 1.10.1.54. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Remove PCIe non-counters from ethtool statistics (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Init ethtool link settings after reading updated PHY configuration. (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Fix AER reset logic on 57500 chips. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Re-enable SRIOV during resume. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Simplify bnxt_resume(). (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Fix return code to "flash_device". (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Call devlink_port_type_clear() in remove() (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Return -EAGAIN if fw command returns BUSY (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Register devlink irrespective of firmware spec version (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Refactor bnxt_dl_register() (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Improve bnxt_probe_phy(). (Michael Chan)  [Orabug: 31541567]  
  - rcu: Upgrade rcu_swap_protected() to rcu_replace_pointer() (Paul E. McKenney)  [Orabug: 31474973]  
  - nvme: explicitly update mpath disk capacity on revalidation (Anthony Iliopoulos)  [Orabug: 31474973]  
  - nvme: fix possible deadlock when I/O is blocked (Sagi Grimberg)  [Orabug: 31474973]  
  - nvmet: fail outstanding host posted AEN req (Chaitanya Kulkarni)  [Orabug: 31474973]  
  - nvmet: cleanups the loop in nvmet_async_events_process (David Milburn)  [Orabug: 31474973]  
  - nvme-fc: don't call nvme_cleanup_cmd() for AENs (Daniel Wagner)  [Orabug: 31474973]  
  - nvmet: fix memory leak when removing namespaces and controllers concurrently (Sagi Grimberg)  [Orabug: 31474973]  
  - nvme-pci: make sure write/poll_queues less or equal then cpu count (Weiping Zhang)  [Orabug: 31474973]  
  - nvme-fc: avoid gcc-10 zero-length-bounds warning (Arnd Bergmann)  [Orabug: 31474973]  
  - nvme-pci: avoid race between nvme_reap_pending_cqes() and nvme_poll() (Dongli Zhang)  [Orabug: 31474973]  
  - nvme-pci: dma read memory barrier for completions (Keith Busch)  [Orabug: 31474973]  
  - nvme-pci: fix "slimmer CQ head update" (Alexey Dobriyan)  [Orabug: 31474973]  
  - nvmet-rdma: fix double free of rdma queue (Israel Rukshin)  [Orabug: 31474973]  
  - nvmet-rdma: fix bonding failover possible NULL deref (Sagi Grimberg)  [Orabug: 31474973]  
  - nvmet: fix NULL dereference when removing a referral (Sagi Grimberg)  [Orabug: 31474973]  
  - nvme: inherit stable pages constraint in the mpath stack device (Sagi Grimberg)  [Orabug: 31474973]  
  - nvme-tcp: fix possible crash in recv error flow (Sagi Grimberg)  [Orabug: 31474973]  
  - nvme-tcp: don't poll a non-live queue (Sagi Grimberg)  [Orabug: 31474973]  
  - nvmet-fc: fix typo in comment (James Smart)  [Orabug: 31474973]  
  - nvme-rdma: Replace comma with a semicolon (Israel Rukshin)  [Orabug: 31474973]  
  - nvme-fcloop: fix deallocation of working context (James Smart)  [Orabug: 31474973]  
  - nvme: cleanup namespace identifier reporting in nvme_init_ns_head (Christoph Hellwig)  [Orabug: 31474973]  
  - nvme: rename __nvme_find_ns_head to nvme_find_ns_head (Christoph Hellwig)  [Orabug: 31474973]  
  - nvme-tcp: Add warning on state change failure at nvme_tcp_setup_ctrl (Israel Rukshin)  [Orabug: 31474973]  
  - nvme-rdma: Add warning on state change failure at nvme_rdma_setup_ctrl (Israel Rukshin)  [Orabug: 31474973]  
  - nvme: Fix controller creation races with teardown flow (Israel Rukshin)  [Orabug: 31474973]  
  - nvme: Make nvme_uninit_ctrl symmetric to nvme_init_ctrl (Israel Rukshin)  [Orabug: 31474973]  
  - nvme: Fix ctrl use-after-free during sysfs deletion (Israel Rukshin)  [Orabug: 31474973]  
  - nvme-pci: Re-order nvme_pci_free_ctrl (Israel Rukshin)  [Orabug: 31474973]  
  - nvme: Remove unused return code from nvme_delete_ctrl_sync (Israel Rukshin)  [Orabug: 31474973]  
  - nvme: Use nvme_state_terminal helper (Israel Rukshin)  [Orabug: 31474973]  
  - nvme: release ida resources (Max Gurtovoy)  [Orabug: 31474973]  
  - nvme: Add compat_ioctl handler for NVME_IOCTL_SUBMIT_IO (masahiro31.yamada@kioxia.com)  [Orabug: 31474973]  
  - nvmet-tcp: optimize tcp stack TX when data digest is used (Sagi Grimberg)  [Orabug: 31474973]  
  - nvme-fabrics: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 31474973]  
  - nvme-multipath: do not reset on unknown status (John Meneghini)  [Orabug: 31474973]  
  - nvmet-rdma: allocate RW ctxs according to mdts (Max Gurtovoy)  [Orabug: 31474973]  
  - nvmet-rdma: Implement get_mdts controller op (Max Gurtovoy)  [Orabug: 31474973]  
  - nvmet: Add get_mdts op for controllers (Max Gurtovoy)  [Orabug: 31474973]  
  - nvme-pci: properly print controller address (Max Gurtovoy)  [Orabug: 31474973]  
  - nvme-tcp: break from io_work loop if recv failed (Sagi Grimberg)  [Orabug: 31474973]  
  - nvme-tcp: move send failure to nvme_tcp_try_send (Sagi Grimberg)  [Orabug: 31474973]  
  - nvme-tcp: optimize queue io_cpu assignment for multiple queue maps (Sagi Grimberg)  [Orabug: 31474973]  
  - nvme-pci: Simplify nvme_poll_irqdisable (Keith Busch)  [Orabug: 31474973]  
  - nvme-pci: Remove two-pass completions (Keith Busch)  [Orabug: 31474973]  
  - nvme-pci: Remove tag from process cq (Keith Busch)  [Orabug: 31474973]  
  - nvme-pci: slimmer CQ head update (Alexey Dobriyan)  [Orabug: 31474973]  
  - nvmet: check ncqr & nsqr for set-features cmd (Amit Engel)  [Orabug: 31474973]  
  - nvme: Check for readiness more quickly, to speed up boot time (Josh Triplett)  [Orabug: 31474973]  
  - nvme: log additional message for controller status (Rupesh Girase)  [Orabug: 31474973]  
  - nvme: code cleanup nvme_identify_ns_desc() (Chaitanya Kulkarni)  [Orabug: 31474973]  
  - nvme: Don't deter users from enabling hwmon support (Jean Delvare)  [Orabug: 31474973]  
  - nvme: expose hostid via sysfs for fabrics controllers (Sagi Grimberg)  [Orabug: 31474973]  
  - nvme: expose hostnqn via sysfs for fabrics controllers (Sagi Grimberg)  [Orabug: 31474973]  
  - nvmet-tcp: set SO_PRIORITY for accepted sockets (Wunderlich, Mark)  [Orabug: 31474973]  
  - nvme-tcp: Set SO_PRIORITY for all host sockets (Wunderlich, Mark)  [Orabug: 31474973]  
  - nvmet: check sscanf value for subsys serial attr (Chaitanya Kulkarni)  [Orabug: 31474973]  
  - nvmet: make ctrl model configurable (Mark Ruijter)  [Orabug: 31474973]  
  - nvmet: make ctrl-id configurable (Chaitanya Kulkarni)  [Orabug: 31474973]  
  - nvmet: configfs code cleanup (Chaitanya Kulkarni)  [Orabug: 31474973]  
  - nvme: remove unused return code from nvme_alloc_ns (Edmund Nadolski)  [Orabug: 31474973]  
  - scsi: lpfc: Update lpfc version to 12.8.0.3 (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix LUN loss after cable pull (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix validation of bsg reply lengths (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix retry of PRLI when status indicates its unsupported (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix oops when unloading driver while running mds diags (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix RSCN timeout due to incorrect gidft counter (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Add missing misc_deregister() for lpfc_init() (Jing Xiangfeng)  [Orabug: 31793335]  
  - scsi: lpfc: Fix no message shown for lpfc_hdw_queue out of range value (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix FCoE speed reporting (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix typo in comment for ULP (Ferruh Yigit)  [Orabug: 31793335]  
  - scsi: lpfc: Add description for lpfc_release_rpi()'s 'ndlpl param (Lee Jones)  [Orabug: 31793335]  
  - scsi: lpfc: Fix a bunch of kerneldoc misdemeanors (Lee Jones)  [Orabug: 31793335]  
  - scsi: lpfc: Add and rename a whole bunch of function parameter descriptions (Lee Jones)  [Orabug: 31793335]  
  - scsi: lpfc: Fix kerneldoc parameter formatting/misnaming/missing issues (Lee Jones)  [Orabug: 31793335]  
  - scsi: lpfc: Fix some function parameter descriptions (Lee Jones)  [Orabug: 31793335]  
  - scsi: lpfc: Ensure variable has the same stipulations as code using it (Lee Jones)  [Orabug: 31793335]  
  - scsi: lpfc: Fix-up formatting/docrot where appropriate (Lee Jones)  [Orabug: 31793335]  
  - scsi: lpfc: Provide description for lpfc_mem_alloc()'s 'align' param (Lee Jones)  [Orabug: 31793335]  
  - scsi: lpfc: Remove unused variable 'pg_addr' (Lee Jones)  [Orabug: 31793335]  
  - scsi: lpfc: NVMe remote port devloss_tmo from lldd (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Quieten some printks (Anton Blanchard)  [Orabug: 31793335]  
  - scsi: lpfc: Fix interrupt assignments when multiple vectors are supported on same CPU (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix inconsistent indenting (Colin Ian King)  [Orabug: 31793335]  
  - scsi: lpfc: Update lpfc version to 12.8.0.2 (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Add blk_io_poll support for latency improvment (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Add support to display if adapter dumps are available (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Allow applications to issue Common Set Features mailbox command (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix language in 0373 message to reflect non-error message (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix kdump hang on PPC (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix shost refcount mismatch when deleting vport (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix stack trace seen while setting rrq active (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix oops due to overrun when reading SLI3 data (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix missing MDS functionality (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix unused assignment in lpfc_sli4_bsg_link_diag_test (Dick Kennedy)  [Orabug: 31793335]  
  - lpfc_debugfs: get rid of pointless access_ok() (Al Viro)  [Orabug: 31793335]  
  - scsi: lpfc: Update lpfc version to 12.8.0.1 (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix MDS Diagnostic Enablement definition (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix noderef and address space warnings (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Remove unnecessary lockdep_assert_held calls (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Change default queue allocation for reduced memory consumption (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Remove re-binding of nvme rport during registration (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Maintain atomic consistency of queue_claimed flag (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: remove duplicate unloading checks (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Change default SCSI LUN QD to 64 (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Update lpfc version to 12.8.0.0 (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Remove prototype FIPS/DSS options from SLI-3 (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Make debugfs ktime stats generic for NVME and SCSI (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix erroneous cpu limit of 128 on I/O statistics (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix update of wq consumer index in lpfc_sli4_wq_release (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix scsi host template for SLI3 vports (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix lpfc overwrite of sg_cnt field in nvmefc_tgt_fcp_req (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix lockdep error - register non-static key (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: fix spelling mistake "Notication" -> "Notification" (Colin Ian King)  [Orabug: 31793335]  
  - scsi: lpfc: add RDF registration and Link Integrity FPIN logging (James Smart)  [Orabug: 31793335]  
  - scsi: fc: Update Descriptor definition and add RDF and Link Integrity FPINs (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Copyright updates for 12.6.0.4 patches (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Update lpfc version to 12.6.0.4 (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Clean up hba max_lun_queue_depth checks (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Remove handler for obsolete ELS - Read Port Status (RPS) (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix coverity errors in fmdi attribute handling (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix compiler warning on frame size (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix release of hwq to clear the eq relationship (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix registration of ELS type support in fdmi (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix RQ buffer leakage when no IOCBs available (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Make lpfc_defer_acc_rsp static (YueHaibing)  [Orabug: 31793335]  
  - Linux 5.4.61 (Greg Kroah-Hartman)   
  - KVM: arm64: Only reschedule if MMU_NOTIFIER_RANGE_BLOCKABLE is not set (Will Deacon)   
  - KVM: Pass MMU notifier range flags to kvm_unmap_hva_range() (Will Deacon)   
  - xen: don't reschedule in preemption off sections (Juergen Gross)   
  - mm/hugetlb: fix calculation of adjust_range_if_pmd_sharing_possible (Peter Xu)   
  - do_epoll_ctl(): clean the failure exits up a bit (Al Viro)   
  - epoll: Keep a reference on files added to the check list (Marc Zyngier)   
  - efi: add missed destroy_workqueue when efisubsys_init fails (Li Heng)   
  - powerpc/pseries: Do not initiate shutdown when system is running on UPS (Vasant Hegde)   
  - net: dsa: b53: check for timeout (Tom Rix)   
  - hv_netvsc: Fix the queue_mapping in netvsc_vf_xmit() (Haiyang Zhang)   
  - net: gemini: Fix missing free_netdev() in error path of gemini_ethernet_port_probe() (Wang Hai)   
  - net: ena: Prevent reset after device destruction (Shay Agroskin)   
  - bonding: fix active-backup failover for current ARP slave (Jiri Wiesner)   
  - ARM64: vdso32: Install vdso32 from vdso_install (Stephen Boyd)   
  - afs: Fix NULL deref in afs_dynroot_depopulate() (David Howells)   
  - RDMA/bnxt_re: Do not add user qps to flushlist (Selvin Xavier)   
  - Fix build error when CONFIG_ACPI is not set/enabled: (Randy Dunlap)   
  - efi: avoid error message when booting under Xen (Juergen Gross)   
  - kconfig: qconf: fix signal connection to invalid slots (Masahiro Yamada)   
  - kconfig: qconf: do not limit the pop-up menu to the first row (Masahiro Yamada)   
  - Revert "scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe" (Quinn Tran)   
  - kvm: x86: Toggling CR4.PKE does not load PDPTEs in PAE mode (Jim Mattson)   
  - kvm: x86: Toggling CR4.SMAP does not load PDPTEs in PAE mode (Jim Mattson)   
  - vfio/type1: Add proper error unwind for vfio_iommu_replay() (Alex Williamson)   
  - ASoC: intel: Fix memleak in sst_media_open (Dinghao Liu)   
  - ASoC: msm8916-wcd-analog: fix register Interrupt offset (Srinivas Kandagatla)   
  - s390/ptrace: fix storage key handling (Heiko Carstens)   
  - s390/runtime_instrumentation: fix storage key handling (Heiko Carstens)   
  - bonding: fix a potential double-unregister (Cong Wang)   
  - can: j1939: add rxtimer for multipacket broadcast session (Zhang Changzhong)   
  - can: j1939: abort multipacket broadcast session when timeout occurs (Zhang Changzhong)   
  - can: j1939: cancel rxtimer on multipacket broadcast session complete (Zhang Changzhong)   
  - can: j1939: fix support for multipacket broadcast message (Zhang Changzhong)   
  - bonding: show saner speed for broadcast mode (Jarod Wilson)   
  - net: fec: correct the error path for regulator disable in probe (Fugang Duan)   
  - i40e: Fix crash during removing i40e driver (Grzegorz Szczurek)   
  - i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Przemyslaw Patynowski)   
  - can: j1939: transport: add j1939_session_skb_find_by_offset() function (Oleksij Rempel)   
  - can: j1939: transport: j1939_simple_recv(): ignore local J1939 messages send not by J1939 stack (Oleksij Rempel)   
  - can: j1939: fix kernel-infoleak in j1939_sk_sock2sockaddr_can() (Eric Dumazet)   
  - bpf: sock_ops sk access may stomp registers when dst_reg = src_reg (John Fastabend)   
  - ASoC: q6routing: add dummy register read/write function (Srinivas Kandagatla)   
  - ASoC: q6afe-dai: mark all widgets registers as SND_SOC_NOPM (Srinivas Kandagatla)   
  - spi: stm32: fixes suspend/resume management (Amelie Delaunay)   
  - netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian (Stephen Suryaputra)   
  - ext4: don't allow overlapping system zones (Jan Kara)   
  - ext4: fix potential negative array index in do_split() (Eric Sandeen)   
  - fs/signalfd.c: fix inconsistent return codes for signalfd4 (Helge Deller)   
  - alpha: fix annotation of io{read,write}{16,32}be() (Luc Van Oostenryck)   
  - xfs: Fix UBSAN null-ptr-deref in xfs_sysfs_init (Eiichi Tsukata)   
  - tools/testing/selftests/cgroup/cgroup_util.c: cg_read_strcmp: fix null pointer dereference (Gaurav Singh)   
  - media: camss: fix memory leaks on error handling paths in probe (Evgeny Novikov)   
  - virtio_ring: Avoid loop when vq is broken in virtqueue_poll (Mao Wenan)   
  - scsi: libfc: Free skb in fc_disc_gpn_id_resp() for valid cases (Javed Hasan)   
  - cpufreq: intel_pstate: Fix cpuinfo_max_freq when MSR_TURBO_RATIO_LIMIT is 0 (Srinivas Pandruvada)   
  - swiotlb-xen: use vmalloc_to_page on vmalloc virt addresses (Boris Ostrovsky)   
  - ceph: fix use-after-free for fsc->mdsc (Xiubo Li)   
  - jffs2: fix UAF problem (Zhe Li)   
  - drm/ttm: fix offset in VMAs with a pg_offs in ttm_bo_vm_access (Felix Kuehling)   
  - xfs: fix inode quota reservation checks (Darrick J. Wong)   
  - svcrdma: Fix another Receive buffer leak (Chuck Lever)   
  - m68knommu: fix overwriting of bits in ColdFire V3 cache control (Greg Ungerer)   
  - MIPS: Fix unable to reserve memory for Crash kernel (Jinyang He)   
  - Input: psmouse - add a newline when printing 'proto' by sysfs (Xiongfeng Wang)   
  - media: vpss: clean up resources in init (Evgeny Novikov)   
  - rtc: goldfish: Enable interrupt in set_alarm() when necessary (Huacai Chen)   
  - media: budget-core: Improve exception handling in budget_register() (Chuhong Yuan)   
  - scsi: target: tcmu: Fix crash in tcmu_flush_dcache_range on ARM (Bodo Stroesser)   
  - scsi: ufs: Add DELAY_BEFORE_LPM quirk for Micron devices (Stanley Chu)   
  - opp: Enable resources again if they were disabled earlier (Rajendra Nayak)   
  - kthread: Do not preempt current task if it is going to call schedule() (Liang Chen)   
  - drm/amd/display: fix pow() crashing when given base 0 (Krunoslav Kovac)   
  - drm/amd/display: Fix EDID parsing after resume from suspend (Stylon Wang)   
  - drm/amdgpu/display: use GFP_ATOMIC in dcn20_validate_bandwidth_internal (Daniel Kolesa)   
  - scsi: zfcp: Fix use-after-free in request timeout handlers (Steffen Maier)   
  - jbd2: add the missing unlock_buffer() in the error path of jbd2_write_superblock() (zhangyi (F))   
  - ext4: fix checking of directory entry validity for inline directories (Jan Kara)   
  - RDMA/hfi1: Correct an interlock issue for TID RDMA WRITE request (Kaike Wan)   
  - mm, page_alloc: fix core hung in free_pcppages_bulk() (Charan Teja Reddy)   
  - mm: include CMA pages in lowmem_reserve at boot (Doug Berger)   
  - uprobes: __replace_page() avoid BUG in munlock_vma_page() (Hugh Dickins)   
  - kernel/relay.c: fix memleak on destroy relay channel (Wei Yongjun)   
  - romfs: fix uninitialized memory leak in romfs_dev_read() (Jann Horn)   
  - spi: Prevent adding devices below an unregistering controller (Lukas Wunner)   
  - can: j1939: socket: j1939_sk_bind(): make sure ml_priv is allocated (Oleksij Rempel)   
  - can: j1939: transport: j1939_session_tx_dat(): fix use-after-free read in j1939_tp_txtimer() (Oleksij Rempel)   
  - ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion (Mike Pozulp)   
  - ALSA: hda/realtek: Add quirk for Samsung Galaxy Flex Book (Mike Pozulp)   
  - btrfs: add wrapper for transaction abort predicate (David Sterba)   
  - btrfs: return EROFS for BTRFS_FS_STATE_ERROR cases (Josef Bacik)   
  - btrfs: don't show full path of bind mounts in subvol= (Josef Bacik)   
  - btrfs: export helpers for subvolume name/id resolution (Marcos Paulo de Souza)   
  - bcache: avoid nr_stripes overflow in bcache_device_init() (Coly Li)   
  - khugepaged: adjust VM_BUG_ON_MM() in __khugepaged_enter() (Hugh Dickins)   
  - khugepaged: khugepaged_test_exit() check mmget_still_valid() (Hugh Dickins)   
  - perf probe: Fix memory leakage when the probe point is not found (Masami Hiramatsu)   
  - gfs2: Never call gfs2_block_zero_range with an open transaction (Bob Peterson)   
  - gfs2: Improve mmap write vs. punch_hole consistency (Andreas Gruenbacher)   
  - drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset() (Chris Wilson)   
  - kbuild: support LLVM=1 to switch the default tools to Clang/LLVM (Masahiro Yamada)   
  - kbuild: replace AS=clang with LLVM_IAS=1 (Masahiro Yamada)   
  - kbuild: remove AS variable (Masahiro Yamada)   
  - kbuild: remove PYTHON2 variable (Masahiro Yamada)   
  - x86/boot: kbuild: allow readelf executable to be specified (Dmitry Golovin)   
  - net: wan: wanxl: use $(M68KCC) instead of $(M68KAS) for rebuilding firmware (Masahiro Yamada)   
  - net: wan: wanxl: use allow to pass CROSS_COMPILE_M68k for rebuilding firmware (Masahiro Yamada)   
  - Documentation/llvm: fix the name of llvm-size (Fangrui Song)   
  - Documentation/llvm: add documentation on building w/ Clang/LLVM (Nick Desaulniers)


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.100.1.el8uek]
changelog:
  - nvme: multipath: round-robin: eliminate "fallback" variable (Martin Wilck)  [Orabug: 31821390]  
  - nvme: multipath: round-robin: fix single non-optimized path case (Martin Wilck)  [Orabug: 31821390]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.100.2.el8uek]
changelog:
  - net/packet: fix overflow in tpacket_rcv (Or Cohen)  [Orabug: 31866486]  {CVE-2020-14386} {CVE-2020-14386} 
  - iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE (Suravee Suthikulpanit)  [Orabug: 31849529]  
  - uek-rpm: ol8: config-aarch64: add *_MEMORY_HOTPLUG (Mihai Carabas)  [Orabug: 31848212]  
  - block: better deal with the delayed not supported case in blk_cloned_rq_check_limits (Ritika Srivastava)  [Orabug: 31850340]  
  - block: Return blk_status_t instead of errno codes (Ritika Srivastava)  [Orabug: 31850340]  
  - kvm: ioapic: Restrict lazy EOI update to edge-triggered interrupts (Paolo Bonzini)  [Orabug: 31839184]  
  - virtio_vsock: Fix race condition in virtio_transport_recv_pkt (Jia He)  [Orabug: 31837274]  
  - net: virtio_vsock: Enhance connection semantics (Sebastien Boeuf)  [Orabug: 31837274]  
  - IB/mlx5: Expose RoCE accelerator counters (Avihai Horon)  [Orabug: 31840631]  
  - net/mlx5: Add RoCE accelerator counters (Leon Romanovsky)  [Orabug: 31840631]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.100.3.el8uek]
changelog:
  - xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen)  [Orabug: 31895364]  {CVE-2020-14385} 
  - btrfs: allow btrfs_truncate_block() to fallback to nocow for data space reservation (Qu Wenruo)  [Orabug: 31899351]  
  - btrfs: fix RWF_NOWAIT write not failling when we need to cow (Filipe Manana)  [Orabug: 31899351]  
  - btrfs: Ensure we trim ranges across block group boundary (Qu Wenruo)  [Orabug: 31899340]  
  - btrfs: volumes: Use more straightforward way to calculate map length (Qu Wenruo)  [Orabug: 31899340]  
  - Btrfs: send, fix emission of invalid clone operations within the same file (Filipe Manana)  [Orabug: 31899298]  
  - Btrfs: send, allow clone operations within the same file (Filipe Manana)  [Orabug: 31899298]  
  - mmc: sdhci: Silence MMC warnings (Maxime Ripard)  [Orabug: 31898202]  
  - bcm2835-dma: Add support for per-channel flags (Phil Elwell)  [Orabug: 31898202]  
  - mmc: sdhci-iproc: Fix vmmc regulators on iProc (Phil Elwell)  [Orabug: 31898202]  
  - scsi: core: Register sysfs for SCSI workqueue (Bob Liu)  [Orabug: 31894419]  
  - scsi: iscsi: Change iSCSI workqueue max_active back to 1 (Bob Liu)  [Orabug: 31894419]  
  - scsi: iscsi: Register sysfs for iscsi workqueue (Bob Liu)  [Orabug: 31894419]  
  - mm/hugetlb: fix a race between hugetlb sysctl handlers (Muchun Song)  [Orabug: 31884231]  {CVE-2020-25285} 
  - rbd: require global CAP_SYS_ADMIN for mapping and unmapping (Ilya Dryomov)  [Orabug: 31884150]  {CVE-2020-25284} 
  - padata: fix possible padata_works_lock deadlock (Daniel Jordan)  [Orabug: 31891481]  
  - KVM: x86: minor code refactor and comments fixup around dirty logging (Anthony Yznaga)  [Orabug: 31845163]  
  - KVM: x86: avoid unnecessary rmap walks when creating/moving slots (Anthony Yznaga)  [Orabug: 31845163]  
  - KVM: x86: remove unnecessary rmap walk of read-only memslots (Anthony Yznaga)  [Orabug: 31845163]  
  - scsi: mpt3sas: A small correction in _base_process_reply_queue (Tomas Henzl)  [Orabug: 31902837]  
  - scsi: mpt3sas: Fix sync irqs (Tomas Henzl)  [Orabug: 31902837]  
  - scsi: mpt3sas: Detect tampered Aero and Sea adapters (Sreekanth Reddy)  [Orabug: 31902837]  
  - scsi: mpt3sas: Don't call disable_irq from IRQ poll handler (Tomas Henzl)  [Orabug: 31902837]  
  - scsi: mpt3sas: Remove pci-dma-compat wrapper API (Suraj Upadhyay)  [Orabug: 31902837]  
  - scsi: mpt3sas: Remove superfluous memset() (Li Heng)  [Orabug: 31902837]  
  - scsi: mpt3sas: Update driver version to 35.100.00.00 (Suganath Prabu S)  [Orabug: 31902837]  
  - scsi: mpt3sas: Postprocessing of target and LUN reset (Suganath Prabu S)  [Orabug: 31902837]  
  - scsi: mpt3sas: Add functions to check if any cmd is outstanding on Target and LUN (Suganath Prabu S)  [Orabug: 31902837]  
  - scsi: mpt3sas: Rename and export interrupt mask/unmask functions (Suganath Prabu S)  [Orabug: 31902837]  
  - scsi: mpt3sas: Cancel the running work during host reset (Suganath Prabu S)  [Orabug: 31902837]  
  - scsi: mpt3sas: Dump system registers for debugging (Suganath Prabu S)  [Orabug: 31902837]  
  - scsi: mpt3sas: Memset config_cmds.reply buffer with zeros (Suganath Prabu S)  [Orabug: 31902837]  
  - scsi: mpt3sas: Fix kdoc comments format (Damien Le Moal)  [Orabug: 31902837]  
  - scsi: mpt3sas: Fix set but unused variable (Damien Le Moal)  [Orabug: 31902837]  
  - scsi: mpt3sas: Fix spelling mistake (Flavio Suligoi)  [Orabug: 31902837]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [5.4.17-2036.100.4.el8uek]
changelog:
  - xfs: force writes to delalloc regions to unwritten (Darrick J. Wong)  [Orabug: 30787888]  
  - xfs: properly serialise fallocate against AIO+DIO (Dave Chinner)  [Orabug: 31366104]  
  - perf/x86/rapl: Add Ice Lake RAPL support (Thomas Tai)  [Orabug: 31766610]  
  - xfs: attach dquots and reserve quota blocks during unwritten conversion (Darrick J. Wong)  [Orabug: 31785972]  
  - netfilter: ctnetlink: add a range check for l3/l4 protonum (Will McVicker)  [Orabug: 31872853]  {CVE-2020-25211} 
  - net/rds: Extract dest qp num for displaying in rds-info (Praveen Kumar Kannoju)  [Orabug: 31880140]  
  - uek-rpm: streamline 4konly build (Dave Kleikamp)  [Orabug: 31891770]  
  - bnxt: correct warning: unused variable: 'rc' (John Donnelly)  [Orabug: 31907548]  
  - i40e: Correct warning: 'aq_ret' may be used uninitialized, (John Donnelly)  [Orabug: 31907631]  
  - uek-rpm: Add ovmapi.ko to uek6 nano_modules (Joe Jin)  [Orabug: 31908852]  
  - uek-rpm: config: Enable OVM API (Joe Jin)  [Orabug: 31908852]  
  - uek-rpm: Fix kernel-ueknano depmod warnings vhost_iotlb regmap-i2c (Vijayendra Suman)  [Orabug: 31916879]  
  - kprobes: Fix compiler warning for !CONFIG_KPROBES_ON_FTRACE (Muchun Song)  [Orabug: 31920526]  
  - scsi: page warning: 'page' may be used uninitialized. (John Donnelly)  [Orabug: 31920671]  
  - x86/speculation/taa: Add TAA_MITIGATION_IDLE mode (Patrick Colp)  [Orabug: 31921884]  
  - oracleasm: Access d_bdev before dropping inode (Stephen Brennan)  [Orabug: 31927355]  
  - iommu/amd: Restore IRTE.RemapEn bit for amd_iommu_activate_guest_mode (Suravee Suthikulpanit)  [Orabug: 31931368]  
  - iommu/amd: Fix potential @entry null deref (Joao Martins)  [Orabug: 31931368]  
  - iommu/amd: Restore IRTE.RemapEn bit after programming IRTE (Suravee Suthikulpanit)  [Orabug: 31931368]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.100.5.el8uek]
changelog:
  - uek-rpm: Fix integer test for 4k page size module signing (Dave Kleikamp)  [Orabug: 32021114]  
  - uek-rpm/kernel-uek.spec: Sign modules for 4k kernel (Vijay Kumar)  [Orabug: 32021114]  
  - hdlc_ppp: add range checks in ppp_cp_parse_cr() (Dan Carpenter)  [Orabug: 31989185]  {CVE-2020-25643} 
  - dm crypt: add flags to optionally bypass kcryptd workqueues (Ignat Korchagin)  [Orabug: 31998688]  
  - uek-rpm: Create initramfs at postinstall stage also. (Somasundaram Krishnasamy)  [Orabug: 32010302]  
  - geneve: add transport ports in route lookup for geneve (Mark Gray)  [Orabug: 32013938]  {CVE-2020-25645} 
  - nvmet: Disable keep-alive timer when kato is cleared to 0h (Amit Engel)  [Orabug: 31997181]  
  - KVM: nVMX: stop abusing need_vmcs12_to_shadow_sync for eVMCS mapping (Vitaly Kuznetsov)  [Orabug: 31986433]  
  - cpu/hotplug: avoid race between cpuset_hotplug_workfn and later hotplug (Daniel Jordan)  [Orabug: 31985221]  
  - uek-rpm: Update secure boot UEK signing certificates (Brian Maly)  [Orabug: 31979626]  
  - uek-rpm: Add old OL keys to the default .blacklist keyring (Eric Snowberg)  [Orabug: 31961115]  
  - certs: Add ability to preload revocation certs (Eric Snowberg)  [Orabug: 31961115]  
  - certs: Move load_system_certificate_list to a common function (Eric Snowberg)  [Orabug: 31961115]  
  - certs: Add EFI_CERT_X509_GUID support for dbx entries (Eric Snowberg)  [Orabug: 31961115]  {CVE-2020-26541} 
  - bcache: stop setting ->queuedata (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: pr_info() format clean up in bcache_device_init() (Coly Li)  [Orabug: 30210051]  
  - bcache: use delayed kworker fo asynchronous devices registration (Coly Li)  [Orabug: 30210051]  
  - bcache: check and adjust logical block size for backing devices (Mauricio Faria de Oliveira)  [Orabug: 30210051]  
  - bcache: configure the asynchronous registertion to be experimental (Coly Li)  [Orabug: 30210051]  
  - bcache: asynchronous devices registration (Coly Li)  [Orabug: 30210051]  
  - bcache: Convert pr_<level> uses to a more typical style (Joe Perches)  [Orabug: 30210051]  
  - bcache: remove redundant variables i and n (Colin Ian King)  [Orabug: 30210051]  
  - bcache: remove a duplicate ->make_request_fn assignment (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: pass the make_request methods to blk_queue_make_request (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: remove dupplicated declaration from btree.h (Coly Li)  [Orabug: 30210051]  
  - bcache: optimize barrier usage for atomic operations (Coly Li)  [Orabug: 30210051]  
  - bcache: optimize barrier usage for Rmw atomic bitops (Davidlohr Bueso)  [Orabug: 30210051]  
  - bcache: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 30210051]  
  - bcache: make bch_sectors_dirty_init() to be multithreaded (Coly Li)  [Orabug: 30210051]  
  - bcache: make bch_btree_check() to be multithreaded (Coly Li)  [Orabug: 30210051]  
  - bcache: add bcache_ prefix to btree_root() and btree() macros (Coly Li)  [Orabug: 30210051]  
  - bcache: move macro btree() and btree_root() into btree.h (Coly Li)  [Orabug: 30210051]  
  - bcache: remove macro nr_to_fifo_front() (Coly Li)  [Orabug: 30210051]  
  - bcache: Revert "bcache: shrink btree node cache after bch_btree_check()" (Coly Li)  [Orabug: 30210051]  
  - bcache: check return value of prio_read() (Coly Li)  [Orabug: 30210051]  
  - bcache: reap from tail of c->btree_cache in bch_mca_scan() (Coly Li)  [Orabug: 30210051]  
  - bcache: reap c->btree_cache_freeable from the tail in bch_mca_scan() (Coly Li)  [Orabug: 30210051]  
  - bcache: remove member accessed from struct btree (Coly Li)  [Orabug: 30210051]  
  - bcache: add code comments for state->pool in __btree_sort() (Coly Li)  [Orabug: 30210051]  
  - bcache: use read_cache_page_gfp to read the superblock (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: store a pointer to the on-disk sb in the cache and cached_dev structures (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: return a pointer to the on-disk sb from read_super (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: transfer the sb_page reference to register_{bdev,cache} (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: use a separate data structure for the on-disk super block (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: don't export symbols (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: remove the extra cflags for request.o (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: add idle_max_writeback_rate sysfs interface (Coly Li)  [Orabug: 30210051]  
  - bcache: add code comments in bch_btree_leaf_dirty() (Coly Li)  [Orabug: 30210051]  
  - bcache: add code comment bch_keylist_pop() and bch_keylist_pop_front() (Coly Li)  [Orabug: 30210051]  
  - bcache: deleted code comments for dead code in bch_data_insert_keys() (Coly Li)  [Orabug: 30210051]  
  - bcache: add more accurate error messages in read_super() (Coly Li)  [Orabug: 30210051]  
  - bcache: fix a lost wake-up problem caused by mca_cannibalize_lock (Guoju Fang)  [Orabug: 30210051]  
  - mstflint_access: Update driver code to v4.15.0-1 from Github (Itay Avraham)  [Orabug: 31965669]  
  - rds/tcp: Enhance stats maintained by rds (Rao Shoaib)  [Orabug: 31933715]  
  - panic: move disabling iommu to after dump_stack() (John Donnelly)  [Orabug: 31916337]  
  - nbd_genl_status: null check for nla_nest_start (Navid Emamdoost)  [Orabug: 31972480]  {CVE-2019-16089} 
  - vgacon: remove software scrollback support (Linus Torvalds)  [Orabug: 31914650]  {CVE-2020-14390} 
  - fbcon: remove soft scrollback code (Linus Torvalds)  [Orabug: 31914650]  {CVE-2020-14390} 
  - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Shung-Hsi Yu)  [Orabug: 31907969]  
  - PCI: pciehp: Reduce noisiness on hot removal (Lukas Wunner)  [Orabug: 30512596]  
  - kdump: update Documentation about crashkernel (Chen Zhou)  [Orabug: 31554906]  
  - arm64: kdump: add memory for devices by DT property linux, usable-memory-range (Chen Zhou)  [Orabug: 31554906]  
  - kdump: add threshold for the required memory (Chen Zhou)  [Orabug: 31554906]  
  - arm64: kdump: reimplement crashkernel=X (Chen Zhou)  [Orabug: 31554906]  
  - arm64: kdump: introduce some macroes for crash kernel reservation (Chen Zhou)  [Orabug: 31554906]  
  - x86: kdump: move reserve_crashkernel[_low]() into crash_core.c (Chen Zhou)  [Orabug: 31554906]  
  - x86: kdump: use macro CRASH_ADDR_LOW_MAX in functions reserve_crashkernel[_low]() (Chen Zhou)  [Orabug: 31554906]  
  - x86: kdump: make the lower bound of crash kernel reservation consistent (Chen Zhou)  [Orabug: 31554906]  
  - x86: kdump: move CRASH_ALIGN to 2M (Chen Zhou)  [Orabug: 31554906]  
  - block: allow 'chunk_sectors' to be non-power-of-2 (Mike Snitzer)  [Orabug: 31827023]  
  - block: use lcm_not_zero() when stacking chunk_sectors (Mike Snitzer)  [Orabug: 31827023]  
  - dm: fix comment in dm_process_bio() (Mike Snitzer)  [Orabug: 31827023]  
  - dm: fix bio splitting and its bio completion order for regular IO (Mike Snitzer)  [Orabug: 31827023]  
  - block: allow for_each_bvec to support zero len bvec (Ming Lei)  [Orabug: 31955136]  {CVE-2020-25641}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.100.6.1.el8uek]
changelog:
  - powercap: restrict energy meter to root access (Kanth Ghatraju)  [Orabug: 32040802]  {CVE-2020-8694} {CVE-2020-8695} 
  - KVM: ioapic: break infinite recursion on lazy EOI (Vitaly Kuznetsov)  [Orabug: 32066585]  {CVE-2020-27152} {CVE-2020-27152} 
  - x86/mitigations: Restore paranoid checks for int3 handling (Boris Ostrovsky)  [Orabug: 31999339]  
  - x86/jump_label: Patch one site at a time (Boris Ostrovsky)  [Orabug: 31999339]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.100.6.el8uek]
changelog:
  - KVM: ioapic: break infinite recursion on lazy EOI (Vitaly Kuznetsov)  [Orabug: 32066585]  {CVE-2020-27152} {CVE-2020-27152} 
  - x86/mitigations: Restore paranoid checks for int3 handling (Boris Ostrovsky)  [Orabug: 31999339]  
  - x86/jump_label: Patch one site at a time (Boris Ostrovsky)  [Orabug: 31999339]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.101.0.el8uek]
changelog:
  - hv_utils: drain the timesync packets on onchannelcallback (Vineeth Pillai)  [Orabug: 32152142]  
  - hv_utils: return error if host timesysnc update is stale (Vineeth Pillai)  [Orabug: 32152142]  
  - x86/cpu/intel: enable X86_FEATURE_NT_GOOD on Intel Icelakex (Ankur Arora)  [Orabug: 32143850]  
  - x86/cpu/amd: enable X86_FEATURE_NT_GOOD on AMD Zen (Ankur Arora)  [Orabug: 32143850]  
  - x86/cpu/intel: enable X86_FEATURE_NT_GOOD on Intel Broadwellx (Ankur Arora)  [Orabug: 32143850]  
  - mm, clear_huge_page: use clear_page_uncached() for gigantic pages (Ankur Arora)  [Orabug: 32143850]  
  - x86/clear_page: add clear_page_uncached() (Ankur Arora)  [Orabug: 32143850]  
  - x86/asm: add clear_page_nt() (Ankur Arora)  [Orabug: 32143850]  
  - perf bench: add memset_movnti() (Ankur Arora)  [Orabug: 32143850]  
  - x86/asm: add memset_movnti() (Ankur Arora)  [Orabug: 32143850]  
  - x86/cpuid: add X86_FEATURE_NT_GOOD (Ankur Arora)  [Orabug: 32143850]  
  - kernel: add panic_on_taint (Rafael Aquini)  [Orabug: 32137996]  
  - cifs: handle empty list of targets in cifs_reconnect() (Paulo Alcantara)  [Orabug: 32124750]  
  - cifs: get rid of unused parameter in reconn_setup_dfs_targets() (Paulo Alcantara)  [Orabug: 32124750]  
  - rds/ib: Fix: (rds: Deregister all FRWR mr with free_mr) (Manjunath Patil)  [Orabug: 32113472]  
  - net/rds: Force ARP flush upon RDMA_CM_EVENT_ADDR_CHANGE (Gerd Rausch)  [Orabug: 32095959]  
  - uek-rpm: aarch64: increase CONFIG_NODES_SHIFT from 3 to 6 (Dave Kleikamp)  [Orabug: 32075923]  
  - rds: Restore MR use-once semantics (Håkon Bugge)  [Orabug: 31990092] [Orabug: 32072247]  
  - rds: Fix incorrect cmsg status and use-after-free (Håkon Bugge)  [Orabug: 32003078] [Orabug: 32072245]  
  - rds: Force ordering of {set,clear}_bit operating on m_flags (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32072228]  
  - rds: Do not send canceled operations to the transport layer (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32072228]  
  - rds: Introduce rds_conn_to_path helper (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32072228]  
  - Revert "RDS: Drop the connection as part of cancel to avoid hangs" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32072228]  
  - Revert "rds: fix warning in rds_send_drop_to()" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32072228]  
  - Revert "rds: Use correct conn when dropping connections due to cancel" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32072228]  
  - Revert "rds: prevent use-after-free of rds conn in rds_send_drop_to()" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32072228]  
  - Revert "rds: Use bitmap to designate dropped connections" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32072228]  
  - Revert "UEK6 compiler warning for /net/rds/send.c" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32072228]  
  - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Thomas Gleixner)  [Orabug: 32048971]  
  - x86/mce/therm_throt: Do not access uninitialized therm_work (Chuansheng Liu)  [Orabug: 32048971]  
  - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Arnd Bergmann)  [Orabug: 32048971]  
  - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Srinivas Pandruvada)  [Orabug: 32048971]  
  - x86/mce/therm_throt: Optimize notifications of thermal throttle (Srinivas Pandruvada)  [Orabug: 32048971]  
  - ocfs2: fix remounting needed after setfacl command (Gang He)  [Orabug: 32042684]  
  - IB/mlx4: disable CQ time stamping (aru kolappan)  [Orabug: 32042517]  
  - net/rds: Refactor sendmsg ancillary data processing (Ka-Cheong Poon)  [Orabug: 32027845]  
  - Bluetooth: A2MP: Fix not initializing all members (Luiz Augusto von Dentz)  [Orabug: 32021285]  {CVE-2020-12352} 
  - ima: Use ima_hash_algo for collision detection in the measurement list (Roberto Sassu)  [Orabug: 31973040]  
  - ima: Calculate and extend PCR with digests in ima_template_entry (Roberto Sassu)  [Orabug: 31973040]  
  - ima: Allocate and initialize tfm for each PCR bank (Roberto Sassu)  [Orabug: 31973040]  
  - ima: Switch to dynamically allocated buffer for template digests (Roberto Sassu)  [Orabug: 31973040]  
  - ima: Store template digest directly in ima_template_entry (Roberto Sassu)  [Orabug: 31973040]  
  - scsi: lpfc: Fix initial FLOGI failure due to BBSCN not supported (James Smart)  [Orabug: 31598148]  
  - net/rds: Check for NULL rds_ibdev in rds_ib_rx() only if rds_ib_srq_enabled (Sharath Srinivasan)  [Orabug: 32113840]  
  - A/A Bonding: Increase number and interval of GARPs sent by rdmaip (Sharath Srinivasan)  [Orabug: 32095766]  
  - powercap: restrict energy meter to root access (Kanth Ghatraju)  [Orabug: 32040802]  {CVE-2020-8694} {CVE-2020-8695}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.101.1.el8uek]
changelog:
  - uek-rpm: Enable Intel Speed Select Technology interface support (Somasundaram Krishnasamy)  [Orabug: 32161425]  
  - platform/x86: ISST: Increase timeout (Srinivas Pandruvada)  [Orabug: 32161425]  
  - platform/x86: ISST: Fix wrong unregister type (Srinivas Pandruvada)  [Orabug: 32161425]  
  - platform/x86: ISST: Allow additional core-power mailbox commands (Srinivas Pandruvada)  [Orabug: 32161425]  
  - IB/mlx4: Convert rej_tmout radix-tree to XArray (Håkon Bugge)  [Orabug: 32136895]  
  - IB/mlx4: Adjust delayed work when a dup is observed (Håkon Bugge)  [Orabug: 32136895]  
  - IB/mlx4: Add support for REJ due to timeout (Håkon Bugge)  [Orabug: 32136895]  
  - IB/mlx4: Fix starvation in paravirt mux/demux (Håkon Bugge)  [Orabug: 32136895]  
  - IB/mlx4: Separate tunnel and wire bufs parameters (Håkon Bugge)  [Orabug: 32136895]  
  - IB/mlx4: Add support for MRA (Håkon Bugge)  [Orabug: 32136895]  
  - IB/mlx4: Add and improve logging (Håkon Bugge)  [Orabug: 32136895]  
  - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (kiyin(尹亮))  [Orabug: 32131172]  {CVE-2020-25704} 
  - vt: keyboard, extend func_buf_lock to readers (Jiri Slaby)  [Orabug: 32122948]  {CVE-2020-25656} {CVE-2020-25656} 
  - vt: keyboard, simplify vt_kdgkbsent (Jiri Slaby)  [Orabug: 32122948]  {CVE-2020-25656} 
  - tty: make FONTX ioctl use the tty pointer they were actually passed (Linus Torvalds)  [Orabug: 32122725]  {CVE-2020-25668} 
  - NFSv4.2: Fix NFS4ERR_STALE error when doing inter server copy (Dai Ngo)  [Orabug: 31879682]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.101.2.el8uek]
changelog:
  - vt: Disable KD_FONT_OP_COPY (Daniel Vetter)  [Orabug: 32187738]  {CVE-2020-28974} 
  - page_frag: Recover from memory pressure (Dongli Zhang)  [Orabug: 32177966]  
  - Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts (Peilin Ye)  [Orabug: 32176254]  {CVE-2020-28915} 
  - fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h (Peilin Ye)  [Orabug: 32176254]  {CVE-2020-28915} 
  - ocfs2: initialize ip_next_orphan (Wengang Wang)  [Orabug: 32159053]  
  - net/rds: rds_ib_remove_one() accesses freed memory (Ka-Cheong Poon)  [Orabug: 32213896]  
  - hv_netvsc: make recording RSS hash depend on feature flag (Stephen Hemminger)  [Orabug: 32159973]  
  - hv_netvsc: record hardware hash in skb (Stephen Hemminger)  [Orabug: 32159973]  
  - RDMA/umem: Move to allocate SG table from pages (Maor Gottlieb)  [Orabug: 32005752]  
  - lib/scatterlist: Add support in dynamic allocation of SG table from pages (Maor Gottlieb)  [Orabug: 32005752]  
  - arm64:uek/config: Enable ZONE_DMA config (Vijay Kumar)  [Orabug: 31970521]  
  - Revert "arm64/dts: Serial console fix for RPi4" (Vijay Kumar)  [Orabug: 31970521]  
  - uek-rpm: aarch64: enable CONFIG_ACPI_APEI_EINJ (Dave Kleikamp)  [Orabug: 32182237]  
  - NFSD: fix missing refcount in nfsd4_copy by nfsd4_do_async_copy (Dai Ngo)  [Orabug: 32177992]  
  - NFSD: Fix use-after-free warning when doing inter-server copy (Dai Ngo)  [Orabug: 32177992]  
  - xen/events: block rogue events for some time (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/events: defer eoi in case of excessive number of events (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/events: use a common cpu hotplug hook for event channels (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/events: switch user event channels to lateeoi model (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/pciback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/pvcallsback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/scsiback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/netback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/blkback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/events: add a new "late EOI" evtchn framework (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/events: fix race in evtchn_fifo_unmask() (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/events: add a proper barrier to 2-level uevent unmasking (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/events: avoid removing an event channel while handling it (Juergen Gross)  [Orabug: 32177543]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.102.0.el8uek]
changelog:
  - futex: Fix inode life-time issue (Peter Zijlstra)  [Orabug: 32233515]  {CVE-2020-14381} 
  - perf/core: Fix race in the perf_mmap_close() function (Jiri Olsa)  [Orabug: 32233352]  {CVE-2020-14351} 
  - intel_idle: Customize IceLake server support (Chen Yu)  [Orabug: 32218858]  
  - dm crypt: Allow unaligned bio buffer lengths for skcipher devices (Sudhakar Panneerselvam)  [Orabug: 32210418]  
  - vhost scsi: fix lun reset completion handling (Mike Christie)  [Orabug: 32167069]  
  - vhost scsi: Add support for LUN resets. (Mike Christie)  [Orabug: 32167069]  
  - vhost scsi: add lun parser helper (Mike Christie)  [Orabug: 32167069]  
  - vhost scsi: fix cmd completion race (Mike Christie)  [Orabug: 32167069]  
  - vhost scsi: alloc cmds per vq instead of session (Mike Christie)  [Orabug: 32167069]  
  - vhost: Create accessors for virtqueues private_data (Eugenio Pérez)  [Orabug: 32167069]  
  - vhost: add helper to check if a vq has been setup (Mike Christie)  [Orabug: 32167069]  
  - scsi: sd: Allow user to configure command retries (Mike Christie)  [Orabug: 32167069]  
  - scsi: core: Add limitless cmd retry support (Mike Christie)  [Orabug: 32167069]  
  - scsi: mpt3sas: Update driver version to 36.100.00.00 (Suganath Prabu S)  [Orabug: 32242279]  
  - scsi: mpt3sas: Handle trigger page after firmware update (Suganath Prabu S)  [Orabug: 32242279]  
  - scsi: mpt3sas: Add persistent MPI trigger page (Suganath Prabu S)  [Orabug: 32242279]  
  - scsi: mpt3sas: Add persistent SCSI sense trigger page (Suganath Prabu S)  [Orabug: 32242279]  
  - scsi: mpt3sas: Add persistent Event trigger page (Suganath Prabu S)  [Orabug: 32242279]  
  - scsi: mpt3sas: Add persistent Master trigger page (Suganath Prabu S)  [Orabug: 32242279]  
  - scsi: mpt3sas: Add persistent trigger pages support (Suganath Prabu S)  [Orabug: 32242279]  
  - scsi: mpt3sas: Sync time periodically between driver and firmware (Suganath Prabu S)  [Orabug: 32242279]  
  - scsi: mpt3sas: Bump driver version to 35.101.00.00 (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Add module parameter multipath_on_hba (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Handle vSES vphy object during HBA reset (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Add bypass_dirty_port_flag parameter (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Handling HBA vSES device (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Set valid PhysicalPort in SMPPassThrough (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Update hba_port objects after host reset (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Get sas_device objects using device's rphy (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Rename transport_del_phy_from_an_existing_port() (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Get device objects using sas_address & portID (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Update hba_port's sas_address & phy_mask (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Rearrange _scsih_mark_responding_sas_device() (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Allocate memory for hba_port objects (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Define hba_port structure (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Fix ioctl timeout (Suganath Prabu S)  [Orabug: 32242279]  
  - icmp: randomize the global rate limiter (Eric Dumazet)  [Orabug: 32227958]  {CVE-2020-25705} 
  - perf/x86/intel/uncore: Add box_offsets for free-running counters (Kan Liang)  [Orabug: 32020885]  
  - perf/x86/intel/uncore: Factor out __snr_uncore_mmio_init_box (Kan Liang)  [Orabug: 32020885]  
  - perf/x86/intel/uncore: Add Ice Lake server uncore support (Kan Liang)  [Orabug: 32020885]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.102.0.2.el8uek]
changelog:
  - xen-blkback: set ring->xenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz)  [Orabug: 32260252]  {CVE-2020-29569} 
  - xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568} 
  - xen/xenbus: Count pending messages for each watch (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568} 
  - xen/xenbus/xen_bus_type: Support will_handle watch callback (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568} 
  - xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path() (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568} 
  - xen/xenbus: Allow watches discard events before queueing (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.103.0.el8uek]
changelog:
  - lockd: don't use interval-based rebinding over TCP (Calum Mackay)  [Orabug: 32337715]  
  - tools: update header files in the tools directory (Thomas Tai)  [Orabug: 32321484]  
  - perf: Fix a kABI breakage in perf_event.h (Thomas Tai)  [Orabug: 32321484]  
  - perf/x86: Fix n_metric for cancelled txn (Peter Zijlstra)  [Orabug: 32321484]  
  - perf/x86: Fix n_pair for cancelled txn (Peter Zijlstra)  [Orabug: 32321484]  
  - perf/x86/intel: Check perf metrics feature for each CPU (Kan Liang)  [Orabug: 32321484]  
  - perf/x86/intel: Support per-thread RDPMC TopDown metrics (Kan Liang)  [Orabug: 32321484]  
  - perf/x86/intel: Support TopDown metrics on Ice Lake (Kan Liang)  [Orabug: 32321484]  
  - perf/x86: Use event_base_rdpmc for the RDPMC userspace support (Kan Liang)  [Orabug: 32321484]  
  - perf/x86: Add a macro for RDPMC offset of fixed counters (Kan Liang)  [Orabug: 32321484]  
  - perf/x86/intel: Generic support for hardware TopDown metrics (Kan Liang)  [Orabug: 32321484]  
  - perf/core: Add a new PERF_EV_CAP_SIBLING event capability (Kan Liang)  [Orabug: 32321484]  
  - perf/core: Unify {pinned,flexible}_sched_in() (Peter Zijlstra)  [Orabug: 32321484]  
  - perf/x86/intel: Use switch in intel_pmu_disable/enable_event (Kan Liang)  [Orabug: 32321484]  
  - perf/x86: Keep LBR records unchanged in host context for guest usage (Like Xu)  [Orabug: 32321484]  
  - perf/x86/intel: Fix the name of perf METRICS (Kan Liang)  [Orabug: 32321484]  
  - perf/x86/intel: Move BTS index to 47 (Kan Liang)  [Orabug: 32321484]  
  - perf/x86/intel: Introduce the fourth fixed counter (Kan Liang)  [Orabug: 32321484]  
  - perf/x86/intel: Name the global status bit in NMI handler (Kan Liang)  [Orabug: 32321484]  
  - perf/x86: Add constraint to create guest LBR event without hw counter (Like Xu)  [Orabug: 32321484]  
  - perf/x86/lbr: Add interface to get LBR information (Like Xu)  [Orabug: 32321484]  
  - perf/x86/core: Refactor hw->idx checks and cleanup (Like Xu)  [Orabug: 32321484]  
  - perf/x86/intel: Avoid unnecessary PEBS_ENABLE MSR access in PMI (Kan Liang)  [Orabug: 32321484]  
  - perf/x86: Provide stubs of KVM helpers for non-Intel CPUs (Sean Christopherson)  [Orabug: 32321484]  
  - partitions/efi: Enable no warning option for the GPT warnings related to alternative header (Saeed Mirzamohammadi)  [Orabug: 32302136]  
  - Revert "cpu/hotplug: avoid race between cpuset_hotplug_workfn and later hotplug" (Daniel Jordan)  [Orabug: 32295229]  
  - cpuset: fix race between hotplug work and later CPU offline (Daniel Jordan)  [Orabug: 32295229]  
  - uek-rpm: aarch64: update PMU configs for Altra (Dave Kleikamp)  [Orabug: 32290034]  
  - driver/perf: Add PMU driver for the ARM DMC-620 memory controller (Tuan Phan)  [Orabug: 32290034]  
  - perf: arm-cmn: Fix conversion specifiers for node type (Will Deacon)  [Orabug: 32290034]  
  - perf: arm-cmn: Fix unsigned comparison to less than zero (Will Deacon)  [Orabug: 32290034]  
  - perf: Add Arm CMN-600 PMU driver (Robin Murphy)  [Orabug: 32290034]  
  - perf: Add Arm CMN-600 DT binding (Robin Murphy)  [Orabug: 32290034]  
  - perf: arm_dsu: Support DSU ACPI devices (Tuan Phan)  [Orabug: 32290034]  
  - arm64: acpi: Make apei_claim_sea() synchronise with APEI's irq work (James Morse)  [Orabug: 32290034]  
  - ACPI: APEI: Kick the memory_failure() queue for synchronous errors (James Morse)  [Orabug: 32290034]  
  - iommu/arm-smmu-v3: Don't reserve implementation defined register space (Jean-Philippe Brucker)  [Orabug: 32290034]  
  - Revert "BACKPORT: perf: Add Arm CMN-600 DT binding" (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "BACKPORT: WIP: perf: Add Arm CMN-600 PMU driver" (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "BACKPORT: WIP: perf/arm-cmn: Add ACPI support" (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "perf: Add ARM DMC-620 PMU driver." (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "BACKPORT: ACPI / APEI: Kick the memory_failure() queue for synchronous errors" (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "BACKPORT: arm64: acpi: Make apei_claim_sea() synchronise with APEI's irq work" (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "Perf: arm-cmn: Allow irq to be shared." (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "perf: arm_cmn: improve and make it work on 2P." (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "perf: arm_dsu: Allow IRQ to be shared among devices." (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "perf: arm_dsu: Support ACPI mode." (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "perf: arm_dmc620: Update ACPI ID." (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "perf: avoid breaking KABI by reusing enum" (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "perf/smmuv3: Allow sharing MMIO registers with the SMMU driver" (Dave Kleikamp)  [Orabug: 32290034]  
  - tty: Fix ->session locking (Jann Horn)  [Orabug: 32266677]  {CVE-2020-29660} 
  - tty: Fix ->pgrp locking in tiocspgrp() (Jann Horn)  [Orabug: 32266677]  {CVE-2020-29660} 
  - xen-blkback: set ring->xenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz)  [Orabug: 32260252]  {CVE-2020-29569} 
  - xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568} 
  - xen/xenbus: Count pending messages for each watch (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568} 
  - xen/xenbus/xen_bus_type: Support will_handle watch callback (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568} 
  - xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path() (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568} 
  - xen/xenbus: Allow watches discard events before queueing (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568} 
  - KVM: x86: clflushopt should be treated as a no-op by emulation (David Edmondson)  [Orabug: 32251910]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.103.1.el8uek]
changelog:
  - mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start (Zhang Xiaohui)  [Orabug: 32349203]  {CVE-2020-36158} 
  - x86/process: Mark cpu inactive before offlining (Mridula Shastry)  [Orabug: 32234812]  
  - add license checking to kABI checker (Dan Duval)  [Orabug: 32355206]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.103.2.el8uek]
changelog:
  - A/A Bonding: Fix a one-byte-off kmalloc (Håkon Bugge)  [Orabug: 32380824]  
  - netfilter: add and use nf_hook_slow_list() (Florian Westphal)  [Orabug: 32372530]  {CVE-2021-20177} 
  - net/rds: Fix gfp_t parameter (Hans Westgaard Ry)  [Orabug: 32372158]  
  - uek-rpm: Report removed symbols also during kabi check (Somasundaram Krishnasamy)  [Orabug: 32380061]  
  - uek-rpm: update kABI lists for new symbol (Dan Duval)  [Orabug: 32378206]  
  - A/A Bonding: Introduce selective interface name inclusion (Håkon Bugge)  [Orabug: 32350974]  
  - uek-rpm: add nfs_ssc to nano_modules (Calum Mackay)  [Orabug: 32346419]  
  - target: fix XCOPY NAA identifier lookup (David Disseldorp)  [Orabug: 32248035]  {CVE-2020-28374}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.103.3.1.el8uek]
changelog:
  - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich)  [Orabug: 32492109]  {CVE-2021-26930} 
  - xen-scsiback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931} 
  - xen-netback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931} 
  - xen-blkback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931} 
  - Xen/gntdev: correct error checking in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932} 
  - Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932} 
  - Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932} 
  - Xen/x86: don't bail early from clear_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.104.0.el8uek]
changelog:
  - Revert "rds: Deregister all FRWR mr with free_mr" (aru kolappan)  [Orabug: 32426610]  
  - thermal: intel_pch_thermal: Add PCI ids for Lewisburg PCH. (Andres Freund)  [Orabug: 32424705]  
  - thermal: intel: intel_pch_thermal: Add Cannon Lake Low Power PCH support (Sumeet Pawnikar)  [Orabug: 32424705]  
  - thermal: intel: intel_pch_thermal: Add Comet Lake (CML) platform support (Gayatri Kammela)  [Orabug: 32424705]  
  - nfs: Fix security label length not being reset (Jeffrey Mitchell)  [Orabug: 32350989]  
  - ovl: check permission to open real file (Miklos Szeredi)  [Orabug: 32046372]  {CVE-2020-16120} 
  - ovl: verify permissions in ovl_path_open() (Miklos Szeredi)  [Orabug: 32046372]  {CVE-2020-16120} 
  - ovl: switch to mounter creds in readdir (Miklos Szeredi)  [Orabug: 32046372]  {CVE-2020-16120} 
  - ovl: pass correct flags for opening real directory (Miklos Szeredi)  [Orabug: 32046372]  
  - A/A Bonding: Add synchronized bundle failback (Gerd Rausch)  [Orabug: 32381883]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.104.1.el8uek]
changelog:
  - vhost scsi: alloc vhost_scsi with kvzalloc() to avoid delay (Dongli Zhang)  [Orabug: 32471677]  
  - HID: hid-input: fix stylus battery reporting (Dmitry Torokhov)  [Orabug: 32464784]  {CVE-2020-0431} 
  - nbd: freeze the queue while we're adding connections (Josef Bacik)  [Orabug: 32447285]  {CVE-2021-3348} 
  - futex: Handle faults correctly for PI futexes (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347} 
  - futex: Simplify fixup_pi_state_owner() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347} 
  - futex: Use pi_state_update_owner() in put_pi_state() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347} 
  - rtmutex: Remove unused argument from rt_mutex_proxy_unlock() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347} 
  - futex: Don't enable IRQs unconditionally in put_pi_state() (Dan Carpenter)  [Orabug: 32447187]  {CVE-2021-3347} 
  - futex: Provide and use pi_state_update_owner() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347} 
  - futex: Replace pointless printk in fixup_owner() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347} 
  - futex: Ensure the correct return value from futex_lock_pi() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347} 
  - uek-rpm: Enable Oracle Pilot BMC module (Eric Snowberg)  [Orabug: 32422662]  
  - hwmon: Add a new Oracle Pilot BMC driver (Eric Snowberg)  [Orabug: 32422662]  
  - arm64: Reserve only 256M on RPi for crashkernel=auto (Vijay Kumar)  [Orabug: 32301026]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.104.2.el8uek]
changelog:
  - tcp: fix to update snd_wl1 in bulk receiver fast path (Neal Cardwell)  [Orabug: 32498822]  
  - selinux: allow reading labels before policy is loaded (Jonathan Lebon)  [Orabug: 32492277]  
  - selinux: allow labeling before policy is loaded (Jonathan Lebon)  [Orabug: 32492277]  
  - KVM: SVM: Initialize prev_ga_tag before use (Suravee Suthikulpanit)  [Orabug: 32478549]  
  - tools/power turbostat: Support additional CPU model numbers (Len Brown)  [Orabug: 32422451]  
  - x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family (Tony Luck)  [Orabug: 32422451]  
  - x86/cpu: Add Sapphire Rapids CPU model number (Tony Luck)  [Orabug: 32422451]  
  - tools/power turbostat: Support Tiger Lake (Chen Yu)  [Orabug: 32422451]  
  - uek-rpm: config-aarch64: enable MEMORY HOTREMOVE (Mihai Carabas)  [Orabug: 32353851]  
  - arm64/mm/hotplug: Ensure early memory sections are all online (Anshuman Khandual)  [Orabug: 32353851]  
  - arm64/mm/hotplug: Enable MEM_OFFLINE event handling (Anshuman Khandual)  [Orabug: 32353851]  
  - arm64/mm/hotplug: Register boot memory hot remove notifier earlier (Anshuman Khandual)  [Orabug: 32353851]  
  - arm64/mm: Enable memory hot remove (Anshuman Khandual)  [Orabug: 32353851]  
  - arm64/mm: Hold memory hotplug lock while walking for kernel page table dump (Anshuman Khandual)  [Orabug: 32353851]  
  - KVM: arm64: Save/restore sp_el0 as part of __guest_enter (Marc Zyngier)  [Orabug: 32171445]  
  - net/mlx4_en: Handle TX error CQE (Moshe Shemesh)  [Orabug: 32492969]  
  - net/mlx4_en: Avoid scheduling restart task if it is already running (Moshe Shemesh)  [Orabug: 32492969]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.104.3.el8uek]
changelog:
  - config: enable CONFIG_MLX5_MPFS (Brian Maly)  [Orabug: 32249042]  
  - net: Fix bridge enslavement failure (Ido Schimmel)  [Orabug: 32503298]  
  - inet: do not call sublist_rcv on empty list (Florian Westphal)  [Orabug: 32512814]  
  - KVM: arm64: pmu: Don't mark a counter as chained if the odd one is disabled (Eric Auger)  [Orabug: 32499188]  
  - random: wire /dev/random with a DRBG instance (Saeed Mirzamohammadi)  [Orabug: 32522087]  
  - crypto: drbg - always try to free Jitter RNG instance (Stephan Müller)  [Orabug: 32522087]  
  - crypto: drbg - always seeded with SP800-90B compliant noise source (Stephan Müller)  [Orabug: 32522087]  
  - crypto: jitter - SP800-90B compliance (Stephan Müller)  [Orabug: 32522087]  
  - crypto: jitter - add header to fix buildwarnings (Ben Dooks)  [Orabug: 32522087]  
  - crypto: jitter - fix comments (Alexander E. Patrakov)  [Orabug: 32522087]  
  - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich)  [Orabug: 32492109]  {CVE-2021-26930} 
  - xen-scsiback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931} 
  - xen-netback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931} 
  - xen-blkback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931} 
  - Xen/gntdev: correct error checking in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932} 
  - Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932} 
  - Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932} 
  - Xen/x86: don't bail early from clear_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.104.5.el8uek]
changelog:
  - scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech)  [Orabug: 32603379]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech)  [Orabug: 32603379]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi)  [Orabug: 32603379]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output (Joe Perches)  [Orabug: 32603379]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Restrict sessions and handles to admin capabilities (Lee Duncan)  [Orabug: 32603379]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2102.200.4.el8uek]
changelog:
  - Revert "rds: Deregister all FRWR mr with free_mr" (aru kolappan)  [Orabug: 32426609]  
  - thermal: intel_pch_thermal: Add PCI ids for Lewisburg PCH. (Andres Freund)  [Orabug: 32424704]  
  - thermal: intel: intel_pch_thermal: Add Cannon Lake Low Power PCH support (Sumeet Pawnikar)  [Orabug: 32424704]  
  - thermal: intel: intel_pch_thermal: Add Comet Lake (CML) platform support (Gayatri Kammela)  [Orabug: 32424704]  
  - KVM: x86: Expose AVX512_FP16 for supported CPUID (Cathy Zhang)  [Orabug: 32424461]  
  - x86/kvm: Expose TSX Suspend Load Tracking feature (Cathy Zhang)  [Orabug: 32424461]  
  - x86: Expose SERIALIZE for supported cpuid (Paolo Bonzini)  [Orabug: 32424461]  
  - KVM: x86: Expose fast short REP MOV for supported cpuid (Zhenyu Wang)  [Orabug: 32424461]  
  - KVM: x86: Expose AVX512 VP2INTERSECT in cpuid for TGL (Zhenyu Wang)  [Orabug: 32424461]  
  - tools: update header files in the tools directory (Thomas Tai)  [Orabug: 32424461]  
  - x86: Enumerate AVX512 FP16 CPUID feature flag (Kyung Min Park)  [Orabug: 32424461]  
  - EDAC/i10nm: Add Intel Sapphire Rapids server support (Qiuxu Zhuo)  [Orabug: 32424461]  
  - EDAC/i10nm: Use readl() to access MMIO registers (Qiuxu Zhuo)  [Orabug: 32424461]  
  - EDAC: Add DDR5 new memory type (Qiuxu Zhuo)  [Orabug: 32424461]  
  - EDAC: Add three new memory types (Qiuxu Zhuo)  [Orabug: 32424461]  
  - x86/cpufeatures: Enumerate ENQCMD and ENQCMDS instructions (Fenghua Yu)  [Orabug: 32424461]  
  - x86/cpufeatures: Enumerate TSX suspend load address tracking instructions (Kyung Min Park)  [Orabug: 32424461]  
  - x86/cpufeatures: Add enumeration for SERIALIZE instruction (Ricardo Neri)  [Orabug: 32424461]  
  - x86/split_lock: Enable the split lock feature on Sapphire Rapids and Alder Lake CPUs (Fenghua Yu)  [Orabug: 32424461]  
  - x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family (Tony Luck)  [Orabug: 32424461]  
  - x86/cpufeatures: Add Architectural LBRs feature bit (Kan Liang)  [Orabug: 32424461]  
  - powercap: intel_rapl: add support for Sapphire Rapids (Zhang Rui)  [Orabug: 32424461]  
  - x86/cpu: Add Sapphire Rapids CPU model number (Tony Luck)  [Orabug: 32424461]  
  - EDAC, {skx,i10nm}: Use CPU stepping macro to pass configurations (Qiuxu Zhuo)  [Orabug: 32424461]  
  - x86/cpu: Add a X86_MATCH_INTEL_FAM6_MODEL_STEPPINGS() macro (Borislav Petkov)  [Orabug: 32424461]  
  - powercap/intel_rapl: Convert to new X86 CPU match macros (Thomas Gleixner)  [Orabug: 32424461]  
  - powercap/intel_rapl: add support for TigerLake Mobile (Zhang Rui)  [Orabug: 32424461]  
  - powercap/intel_rapl: add support for JasperLake (Zhang Rui)  [Orabug: 32424461]  
  - x86/cpufeatures: Add support for fast short REP; MOVSB (Tony Luck)  [Orabug: 32424461]  
  - powercap/intel_rapl: add support for Cometlake desktop (Zhang Rui)  [Orabug: 32424461]  
  - powercap/intel_rapl: add support for CometLake Mobile (Zhang Rui)  [Orabug: 32424461]  
  - crypto: lib/chacha20poly1305 - define empty module exit function (Jason A. Donenfeld)  [Orabug: 32417868]  
  - A/A Bonding: Add synchronized bundle failback (Gerd Rausch)  [Orabug: 32381881]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2102.200.5.el8uek]
changelog:
  - vhost scsi: alloc vhost_scsi with kvzalloc() to avoid delay (Dongli Zhang)  [Orabug: 32471659]  
  - arm64: Reserve only 256M on RPi for crashkernel=auto (Vijay Kumar)  [Orabug: 32454711]  
  - nbd: freeze the queue while we're adding connections (Josef Bacik)  [Orabug: 32447284]  {CVE-2021-3348} 
  - futex: Handle faults correctly for PI futexes (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347} 
  - futex: Simplify fixup_pi_state_owner() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347} 
  - futex: Use pi_state_update_owner() in put_pi_state() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347} 
  - rtmutex: Remove unused argument from rt_mutex_proxy_unlock() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347} 
  - futex: Provide and use pi_state_update_owner() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347} 
  - futex: Replace pointless printk in fixup_owner() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347} 
  - futex: Ensure the correct return value from futex_lock_pi() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347} 
  - uek-rpm: Enable Oracle Pilot BMC module (Eric Snowberg)  [Orabug: 32422661]  
  - hwmon: Add a new Oracle Pilot BMC driver (Eric Snowberg)  [Orabug: 32422661]  
  - rds: avoid crash on IB conn path shutdown prepare (Alan Maguire)  [Orabug: 32466763]  
  - mm/memcontrol: Increase threshold for draining per-cpu stocked bytes (Imran Khan)  [Orabug: 32314559]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2102.200.6.el8uek]
changelog:
  - selinux: allow reading labels before policy is loaded (Jonathan Lebon)  [Orabug: 32492276]  
  - rds: tracepoints incorrectly reporting valid rds ping as drop (Alan Maguire)  [Orabug: 32490004]  
  - KVM: arm64: Save/restore sp_el0 as part of __guest_enter (Marc Zyngier)  [Orabug: 32488537]  
  - uek-rpm: config-aarch64: enable MEMORY HOTREMOVE (Mihai Carabas)  [Orabug: 32353873]  
  - arm64/mm/hotplug: Ensure early memory sections are all online (Anshuman Khandual)  [Orabug: 32353873]  
  - arm64/mm/hotplug: Enable MEM_OFFLINE event handling (Anshuman Khandual)  [Orabug: 32353873]  
  - arm64/mm/hotplug: Register boot memory hot remove notifier earlier (Anshuman Khandual)  [Orabug: 32353873]  
  - arm64/mm: Enable memory hot remove (Anshuman Khandual)  [Orabug: 32353873]  
  - arm64/mm: Hold memory hotplug lock while walking for kernel page table dump (Anshuman Khandual)  [Orabug: 32353873]  
  - rds: tracepoint-related KASAN: use-after-free Read in rds_send_xmit (Alan Maguire)  [Orabug: 32490030]  
  - inet: do not call sublist_rcv on empty list (Florian Westphal)  [Orabug: 32422895]  
  - net/mlx4_en: Handle TX error CQE (Moshe Shemesh)  [Orabug: 32485133]  
  - net/mlx4_en: Avoid scheduling restart task if it is already running (Moshe Shemesh)  [Orabug: 32485133]  
  - vdpa/mlx5: allow Jumbo MTU config other than standard sized MTU (Si-Wei Liu)  [Orabug: 32480078]  
  - vdpa/mlx5: should exclude header length and fcs from mtu (Si-Wei Liu)  [Orabug: 32480078]  
  - vdpa/mlx5: Fix memory key MTT population (Eli Cohen)  [Orabug: 32480078]  
  - vdpa: Use simpler version of ida allocation (Parav Pandit)  [Orabug: 32480078]  
  - vdpa: Add missing comment for virtqueue count (Parav Pandit)  [Orabug: 32480078]  
  - vdpa/mlx5: Use write memory barrier after updating CQ index (Eli Cohen)  [Orabug: 32480078]  
  - vdpa: remove unnecessary 'default n' in Kconfig entries (Stefano Garzarella)  [Orabug: 32480078]  
  - vhost_vdpa: switch to vmemdup_user() (Tian Tao)  [Orabug: 32480078]  
  - vhost_vdpa: return -EFAULT if copy_to_user() fails (Dan Carpenter)  [Orabug: 32480078]  
  - vdpa: mlx5: fix vdpa/vhost dependencies (Randy Dunlap)  [Orabug: 32480078]  
  - vdpa/mlx5: Setup driver only if VIRTIO_CONFIG_S_DRIVER_OK (Eli Cohen)  [Orabug: 32480078]  
  - vdpa/mlx5: Fix failure to bring link up (Eli Cohen)  [Orabug: 32480078]  
  - vdpa/mlx5: Make use of a specific 16 bit endianness API (Eli Cohen)  [Orabug: 32480078]  
  - vdpasim: fix "mac_pton" undefined error (Laurent Vivier)  [Orabug: 32480078]  
  - vdpasim: allow to assign a MAC address (Laurent Vivier)  [Orabug: 32480078]  
  - vdpasim: fix MAC address configuration (Laurent Vivier)  [Orabug: 32480078]  
  - vdpa: handle irq bypass register failure case (Zhu Lingshan)  [Orabug: 32480078]  
  - vdpa_sim: Fix DMA mask (Laurent Vivier)  [Orabug: 32480078]  
  - vdpa/mlx5: Fix error return in map_direct_mr() (Jing Xiangfeng)  [Orabug: 32480078]  
  - vhost_vdpa: Return -EFAULT if copy_from_user() fails (Dan Carpenter)  [Orabug: 32480078]  
  - vdpa_sim: implement get_iova_range() (Jason Wang)  [Orabug: 32480078]  
  - vhost: vdpa: report iova range (Jason Wang)  [Orabug: 32480078]  
  - vdpa: introduce config op to get valid iova range (Jason Wang)  [Orabug: 32480078]  
  - vhost_vdpa: remove unnecessary spin_lock in vhost_vring_call (Zhu Lingshan)  [Orabug: 32480078]  
  - vhost_vdpa: Fix duplicate included kernel.h (Tian Tao)  [Orabug: 32480078]  
  - rds: CONFIG_RDS_DEBUG + tracepoints breaks rds build (Alan Maguire)  [Orabug: 32442487]  
  - tools/power turbostat: Support additional CPU model numbers (Len Brown)  [Orabug: 32422450]  
  - tools/power turbostat: Support Tiger Lake (Chen Yu)  [Orabug: 32422450]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2102.200.7.el8uek]
changelog:
  - KVM: arm64: pmu: Don't mark a counter as chained if the odd one is disabled (Eric Auger)  [Orabug: 32504832]  
  - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich)  [Orabug: 32492108]  {CVE-2021-26930} 
  - xen-scsiback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492100]  {CVE-2021-26931} 
  - xen-netback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492100]  {CVE-2021-26931} 
  - xen-blkback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492100]  {CVE-2021-26931} 
  - Xen/gntdev: correct error checking in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492092]  {CVE-2021-26932} 
  - Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492092]  {CVE-2021-26932} 
  - Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492092]  {CVE-2021-26932} 
  - Xen/x86: don't bail early from clear_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492092]  {CVE-2021-26932}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2102.200.8.el8uek]
changelog:
  - config: enable CONFIG_MLX5_MPFS (Brian Maly)  [Orabug: 32522477]  
  - random: wire /dev/random with a DRBG instance (Saeed Mirzamohammadi)  [Orabug: 32522086]  
  - crypto: drbg - always try to free Jitter RNG instance (Stephan Müller)  [Orabug: 32522086]  
  - crypto: drbg - always seeded with SP800-90B compliant noise source (Stephan Müller)  [Orabug: 32522086]  
  - crypto: jitter - SP800-90B compliance (Stephan Müller)  [Orabug: 32522086]  
  - crypto: jitter - add header to fix buildwarnings (Ben Dooks)  [Orabug: 32522086]  
  - crypto: jitter - fix comments (Alexander E. Patrakov)  [Orabug: 32522086]  
  - Revert "RDMA/umem: Move to allocate SG table from pages" (John Donnelly)  [Orabug: 32481224]  
  - Revert "lib/scatterlist: Add support in dynamic allocation of SG table from pages" (John Donnelly)  [Orabug: 32481224]  
  - Revert "Maintainer: Fix build warning introduced in commit 99b99d76e6732" (John Donnelly)  [Orabug: 32481224]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2102.200.10.el8uek]
changelog:
  - scsi: target: core: Make completion affinity configurable (Mike Christie)  [Orabug: 32403502]  
  - target: flush submission work during TMR processing (Mike Christie)  [Orabug: 32403502]  
  - target iblock: add backend plug/unplug callouts (Mike Christie)  [Orabug: 32403502]  
  - target: fix backend plugging (Mike Christie)  [Orabug: 32403502]  
  - target: cleanup cmd flag bits (Mike Christie)  [Orabug: 32403502]  
  - tcm loop: use lio wq cmd submission helper (Mike Christie)  [Orabug: 32403502]  
  - tcm loop: use blk cmd allocator for se_cmds (Mike Christie)  [Orabug: 32403502]  
  - vhost scsi: use lio wq cmd submission helper (Mike Christie)  [Orabug: 32403502]  
  - target: add workqueue based cmd submission (Mike Christie)  [Orabug: 32403502]  
  - target: add gfp_t arg to target_cmd_init_cdb (Mike Christie)  [Orabug: 32403502]  
  - target: remove target_submit_cmd_map_sgls (Mike Christie)  [Orabug: 32403502]  
  - tcm_fc: Convert to new submission API (Mike Christie)  [Orabug: 32403502]  
  - xen-scsiback: Convert to new submission API (Mike Christie)  [Orabug: 32403502]  
  - vhost-scsi: Convert to new submission API (Mike Christie)  [Orabug: 32403502]  
  - usb gadget: Convert to new submission API (Mike Christie)  [Orabug: 32403502]  
  - sbp_target: Convert to new submission API (Mike Christie)  [Orabug: 32403502]  
  - tcm_loop: Convert to new submission API (Mike Christie)  [Orabug: 32403502]  
  - qla2xxx: Convert to new submission API (Mike Christie)  [Orabug: 32403502]  
  - ibmvscsi_tgt: Convert to new submission API (Mike Christie)  [Orabug: 32403502]  
  - srpt: Convert to new submission API (Mike Christie)  [Orabug: 32403502]  
  - target: break up target_submit_cmd_map_sgls (Mike Christie)  [Orabug: 32403502]  
  - target: rename transport_init_se_cmd (Mike Christie)  [Orabug: 32403502]  
  - target: drop kref_get_unless_zero in target_get_sess_cmd (Mike Christie)  [Orabug: 32403502]  
  - target: move t_task_cdb initialization (Mike Christie)  [Orabug: 32403502]  
  - scsi: tcm_loop: Allow queues, can_queue and cmd_per_lun to be settable (Mike Christie)  [Orabug: 32403502]  
  - scsi: target: Make state_list per CPU (Mike Christie)  [Orabug: 32403502]  
  - scsi: target: Drop sess_cmd_lock from I/O path (Mike Christie)  [Orabug: 32403502]  
  - scsi: qla2xxx: Move sess cmd list/lock to driver (Mike Christie)  [Orabug: 32403502]  
  - scsi: target: Remove TARGET_SCF_LOOKUP_LUN_FROM_TAG (Mike Christie)  [Orabug: 32403502]  
  - scsi: qla2xxx: Drop TARGET_SCF_LOOKUP_LUN_FROM_TAG (Mike Christie)  [Orabug: 32403502]  
  - scsi: target: Fix cmd_count ref leak (Mike Christie)  [Orabug: 32403502]  
  - scsi: target: Fix LUN ref count handling (Mike Christie)  [Orabug: 32403502]  
  - scsi: target: Fix lun lookup for TARGET_SCF_LOOKUP_LUN_FROM_TAG case (Sudhakar Panneerselvam)  [Orabug: 32403502]  
  - scsi: target: Rename target_setup_cmd_from_cdb() to target_cmd_parse_cdb() (Sudhakar Panneerselvam)  [Orabug: 32403502]  
  - scsi: target: Fix NULL pointer dereference (Sudhakar Panneerselvam)  [Orabug: 32403502]  
  - scsi: target: Initialize LUN in transport_init_se_cmd() (Sudhakar Panneerselvam)  [Orabug: 32403502]  
  - scsi: target: Factor out a new helper, target_cmd_init_cdb() (Sudhakar Panneerselvam)  [Orabug: 32403502]  
  - mm: memcontrol: decouple reference counting from page accounting (Johannes Weiner)   
  - uek-rpm: add opbmc to nano-kernel (Eric Snowberg)  [Orabug: 32555675]  
  - rds: rds_drop_egress events should be enabled as part of RDS_RTD_SND (Alan Maguire)  [Orabug: 32587016]  
  - rds: use dedicated rds_send_lock_contention tracepoint instead of drop (Alan Maguire)  [Orabug: 32587016]  
  - rds: ensure saddr/daddr for tracepoints is not NULL (Alan Maguire)  [Orabug: 32580940]  
  - hsr: use netdev_err() instead of WARN_ONCE() (Taehee Yoo)  [Orabug: 32576070]  
  - PCI: hotplug: Add module parameter to allow user control of LEDs (Thomas Tai)  [Orabug: 32556980]  
  - net/rds: increase 1MB MR pool size for RDS (Manjunath Patil)   
  - block/diskstats: accumulate all per-cpu counters in one pass (Konstantin Khlebnikov)  [Orabug: 32531556]  
  - arm64/crash_core: fix TCR_EL1.T1SZ in vmcoreinfo (John Donnelly)  [Orabug: 32559514]  
  - x86/platform/uv: Fix UV4 hub revision adjustment (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Fix copied UV5 output archtype (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Drop last traces of uv_flush_tlb_others (Jiri Slaby)  [Orabug: 32527680]  
  - x86/tlb/uv: Add a forward declaration for struct flush_tlb_info (Borislav Petkov)  [Orabug: 32527680]  
  - x86/platform/uv: Recognize UV5 hubless system identifier (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Remove spaces from OEM IDs (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Fix missing OEM_TABLE_ID (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Update Copyrights to conform to HPE standards (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Update for UV5 NMI MMR changes (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Update UV5 TSC checking (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Update node present counting (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Update UV5 MMR references in UV GRU (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Adjust GAM MMR references affected by UV5 updates (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Update MMIOH references based on new UV5 MMRs (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Add and decode Arch Type in UVsystab (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Add UV5 direct references (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Update UV MMRs for UV5 (Mike Travis)  [Orabug: 32527680]  
  - drivers/misc/sgi-xp: Adjust references in UV kernel modules (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Remove SCIR MMR references for UV systems (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Remove UV BAU TLB Shootdown Handler (Mike Travis)  [Orabug: 32527680]  
  - x86/apic/uv: Avoid unused variable warning (Arnd Bergmann)  [Orabug: 32527680]  
  - x86/platform/uv: Remove vestigial mention of UV1 platform from bios header (steve.wahl@hpe.com)  [Orabug: 32527680]  
  - x86/platform/uv: Remove support for UV1 platform from uv (steve.wahl@hpe.com)  [Orabug: 32527680]  
  - x86/platform/uv: Remove support for uv1 platform from uv_hub (steve.wahl@hpe.com)  [Orabug: 32527680]  
  - x86/platform/uv: Remove support for UV1 platform from uv_bau (steve.wahl@hpe.com)  [Orabug: 32527680]  
  - x86/platform/uv: Remove support for UV1 platform from uv_mmrs (steve.wahl@hpe.com)  [Orabug: 32527680]  
  - x86/platform/uv: Remove support for UV1 platform from x2apic_uv_x (steve.wahl@hpe.com)  [Orabug: 32527680]  
  - x86/platform/uv: Remove support for UV1 platform from uv_tlb (steve.wahl@hpe.com)  [Orabug: 32527680]  
  - x86/platform/uv: Remove support for UV1 platform from uv_time (steve.wahl@hpe.com)  [Orabug: 32527680]  
  - x86/platform/uv: Remove the unused _uv_cpu_blade_processor_id() macro (Christoph Hellwig)  [Orabug: 32527680]  
  - x86/platform/uv: Unexport uv_apicid_hibits (Christoph Hellwig)  [Orabug: 32527680]  
  - x86/platform/uv: Remove _uv_hub_info_check() (Christoph Hellwig)  [Orabug: 32527680]  
  - x86/platform/uv: Simplify uv_send_IPI_one() (Christoph Hellwig)  [Orabug: 32527680]  
  - x86/platform/uv: Remove the UV*_HUB_IS_SUPPORTED macros (Christoph Hellwig)  [Orabug: 32527680]  
  - x86/platform/uv: Remove the uv_partition_coherence_id() macro (Christoph Hellwig)  [Orabug: 32527680]  
  - x86/apic/uv: Remove code for unused distributed GRU mode (Steve Wahl)  [Orabug: 32527680]  
  - cper,edac,efi: Memory Error Record: bank group/address and chip id (Alex Kluver)  [Orabug: 32526741]  
  - edac,ghes,cper: Add Row Extension to Memory Error Record (Alex Kluver)  [Orabug: 32526741]  
  - perf/x86/intel/uncore: With > 8 nodes, get pci bus die id from NUMA info (Steve Wahl)  [Orabug: 32526200]  
  - perf/x86/intel/uncore: Store the logical die id instead of the physical die id. (Steve Wahl)  [Orabug: 32526200]  
  - perf/x86/intel/uncore: Generic support for the PCI sub driver (Kan Liang)  [Orabug: 32526200]  
  - perf/x86/intel/uncore: Factor out uncore_pci_pmu_unregister() (Kan Liang)  [Orabug: 32526200]  
  - perf/x86/intel/uncore: Factor out uncore_pci_pmu_register() (Kan Liang)  [Orabug: 32526200]  
  - perf/x86/intel/uncore: Factor out uncore_pci_find_dev_pmu() (Kan Liang)  [Orabug: 32526200]  
  - perf/x86/intel/uncore: Factor out uncore_pci_get_dev_die_info() (Kan Liang)  [Orabug: 32526200]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2102.200.11.el8uek]
changelog:
  - mm/vmscan: fix infinite loop in drop_slab_node (Chunxin Zang)  [Orabug: 32620155]  
  - scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output (Joe Perches)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Restrict sessions and handles to admin capabilities (Lee Duncan)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - drm/nouveau: bail out of nouveau_channel_new if channel init fails (Frantisek Hrbata)  [Orabug: 32591559]  {CVE-2020-25639} 
  - mm: support memblock alloc on the exact node for sparse_buffer_init() (Yunfeng Ye)  [Orabug: 32613823]  
  - mm/sparse.c: do not waste pre allocated memmap space (Michal Hocko)  [Orabug: 32613823]  
  - mm/sparse: consistently do not zero memmap (Vincent Whitchurch)  [Orabug: 32613823]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2102.200.12.el8uek]
changelog:
  - Revert "x86/platform/uv: Update UV MMRs for UV5" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Add UV5 direct references" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Add and decode Arch Type in UVsystab" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Update MMIOH references based on new UV5 MMRs" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Adjust GAM MMR references affected by UV5 updates" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Update UV5 MMR references in UV GRU" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Update node present counting" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Update UV5 TSC checking" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Update for UV5 NMI MMR changes" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Update Copyrights to conform to HPE standards" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Fix missing OEM_TABLE_ID" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Remove spaces from OEM IDs" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Recognize UV5 hubless system identifier" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/tlb/uv: Add a forward declaration for struct flush_tlb_info" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Drop last traces of uv_flush_tlb_others" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Fix copied UV5 output archtype" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Fix UV4 hub revision adjustment" (Jack Vogel)  [Orabug: 32651197]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2102.200.13.el8uek]
changelog:
  - bpf, selftests: Fix up some test_verifier cases for unprivileged (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171} 
  - bpf: Add sanity check for upper ptr_limit (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171} 
  - bpf: Simplify alu_limit masking for pointer arithmetic (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171} 
  - bpf: Fix off-by-one for area size in creating mask to left (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171} 
  - bpf: Prohibit alu ops for pointer types not defining ptr_limit (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171} 
  - selftests/bpf: Test access to bpf map pointer (Andrey Ignatov)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171} 
  - bpf: Fix truncation handling for mod32 dst reg wrt zero (Daniel Borkmann)  [Orabug: 32673813]  {CVE-2021-3444} 
  - bpf: Fix 32 bit src register truncation on div/mod (Daniel Borkmann)  [Orabug: 32673813]  {CVE-2021-3444}


author: Pingfan Liu <piliu@redhat.com> - 2.0.17-24
changelog:
  - makedumpfile/arm64: Fix 'info->page_offset' calculation for both KASLR and non-KASLR cases
  - makedumpfile: Prepare paddr_to_vaddr() for arch-specific p2v conversion


author: Pingfan Liu <piliu@redhat.com> - 2.0.17-26
changelog:
  - earlykdump: fix kexec fails to load the early kdump kernel
  - makedumpfile/x86_64: fix an unnecessary message with --mem-usage option


author: Pingfan Liu <piliu@redhat.com> - 2.0.17-27
changelog:
  - Revert "kdumpctl, earlykdump: Don't use kexec_file_load when secure boot is enabled"
  - mkdumprd: refine regex on dropping mount options


author: EL Errata <el-errata_ww@oracle.com> - 2.0.17-28.0.1
changelog:
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-4
changelog:
  - kexec-kdump-howto.txt: Add document about encrypted targets
  - kexec-kdump-howto.txt: Add document about initramfs rebiuld
  - kexec-kdump-howto: Add note on setting correct value of kptr_restrict
  - doc: fix dead links in the file kexec-kdump-howto.txt
  - earlykdump: provide a prompt message after the rebuilding of kdump initramfs.
  - Get rid of duplicated strip_comments when reading config
  - mkdumprd: Improve the config reading logic
  - kdumpctl: don't always rebuild when extra_modules is set
  - kdumpctl: follow symlink when checking for modified files
  - fadump: leverage kernel support to re-regisgter FADump


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-5
changelog:
  - kdumpctl: check for ssh path availability when rebuild
  - kdumpctl: Check kdump.conf for error when rebuild is called
  - makedumpfile: x86_64: Add support for AMD Secure Memory Encryption
  - aarch64/kdump.sysconfig: Make config options similar to x86_64


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-9
changelog:
  - kexec/arm64: Add support for handling zlib compressed (Image.gz) image
  - kexec/kexec-zlib.h: Add 'is_zlib_file()' helper function
  - kexec-uImage-arm64.c: Fix return value of uImage_arm64_probe()
  - kexec/kexec.c: Add the missing close() for fd used for kexec_file_load()


author: Edward Leung <edward.leung@oracle.com> - 2.0.19-12.0.1
changelog:
  - change makedumpfile fixed size buffer for VMCOREINFO [Orabug: 29870551]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=dhcp is present [Orabug: 29518713]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-12.1
changelog:
  - Don't execute final_action if failure_action terminates the system
  - dracut-module-setup.sh: Don't use squash module for fadump
  - Don't mount the dump target unless needed


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-12.2
changelog:
  - arm64: kdump: deal with a lot of resource entries in /proc/iomem
  - arm64: kexec: allocate memory space avoiding reserved regions
  - kexec: add variant helper functions for handling memory regions


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-6
changelog:
  -rhel-8.2.0, origin/rhel-8.2.0) Increase SECTION_MAP_LAST_BIT to 4
  - spec: move binaries from /sbin to /usr/sbin
  - As /etc/kdump.conf timestamp is updated do not compare it when doing rpm --verify
  - kdumpctl: make reload fail proof


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.0.20-14.0.1
changelog:
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 30822387]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - makedumpfile: fix RHCK makedumpfile [Orabug: 30580398]
  - makedumpfile: backport latest upstream 52-bit VA arm patch [Orabug: 30580398]
  - makedumpfile: rebase rhonly-kexec-tools-2.0.18-makedumpfile* patch [Orabug: 30580398]
  - makedumpfile: backport latest aarch64-related upstream patches [Orabug: 30352094]
  - makedumpfile: update to 1.6.7, drop patches, now present in upstream code [Orabug: 30446702]
  - change makedumpfile fixed size buffer for VMCOREINFO [Orabug: 29870551]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=dhcp is present [Orabug: 29518713]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-28
changelog:
  - mkdumprd: Fix nfs detection in to_mount
  - Always wrap up call to dracut get_persistent_dev function
  - man: improve description about /etc/kdump/{pre.d,post.d}interface


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-30
changelog:
  - x86_64: enable the kexec file load by default
  - Revert "kdump-lib: switch to the kexec_file_load() syscall on x86_64 by default"


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-31
changelog:
  - ppc64/kdump: use kexec_file_load when secureboot is enabled
  - kdump_pre: make notes more precise
  - dracut-kdump.sh: exit shell when machine reboot
  - kdump.conf: fix a grammar issue
  - kdumpctl: detect modification of scripts by its directory's timestamp
  - module-setup.sh: suppress false alarm
  - kexec-tools.spec: make the existence of pre.d and post.d mandatory


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.0.20-34.0.1
changelog:
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 30822387]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - makedumpfile: fix RHCK makedumpfile [Orabug: 30580398]
  - makedumpfile: backport latest upstream 52-bit VA arm patch [Orabug: 30580398]
  - makedumpfile: rebase rhonly-kexec-tools-2.0.18-makedumpfile* patch [Orabug: 30580398]
  - makedumpfile: backport latest aarch64-related upstream patches [Orabug: 30352094]
  - change makedumpfile fixed size buffer for VMCOREINFO [Orabug: 29870551]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=dhcp is present [Orabug: 29518713]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: EL Errata <el-errata_ww@oracle.com> - 2.0.20-34.0.3
changelog:
  - kdump: add threshold for the required memory (Chen Zhou) [Orabug: 32258986]
  - Fix duplicate -s option for kexec [Orabug: 32127375]
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 30822387]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - makedumpfile: fix RHCK makedumpfile [Orabug: 30580398]
  - makedumpfile: backport latest upstream 52-bit VA arm patch [Orabug: 30580398]
  - makedumpfile: rebase rhonly-kexec-tools-2.0.18-makedumpfile* patch [Orabug: 30580398]
  - makedumpfile: backport latest aarch64-related upstream patches [Orabug: 30352094]
  - change makedumpfile fixed size buffer for VMCOREINFO [Orabug: 29870551]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=dhcp is present [Orabug: 29518713]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-34.2
changelog:
  - kdump-lib.sh: Remove is_atomic
  - Refactor kernel image and initrd detection code
  - early-kdump: Use consistent symbol link for kernel and initramfs
  - kdump-lib: strip grub device from kdump_bootdir
  - kdumpctl: fix driver change detection on latest Fedora


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.0.20-34.0.5.el8_u3.2
changelog:
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=single-dhcp is present [Orabug: 32404661]
  - kdump-lib: Fix get_bind_mount_source to support btrfs and fstab [Orabug: 32297893]
  - kdump: add threshold for the required memory (Chen Zhou) [Orabug: 32258986]
  - Fix duplicate -s option for kexec [Orabug: 32127375]
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 30822387]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - makedumpfile: fix RHCK makedumpfile [Orabug: 30580398]
  - makedumpfile: backport latest upstream 52-bit VA arm patch [Orabug: 30580398]
  - makedumpfile: rebase rhonly-kexec-tools-2.0.18-makedumpfile* patch [Orabug: 30580398]
  - makedumpfile: backport latest aarch64-related upstream patches [Orabug: 30352094]
  - change makedumpfile fixed size buffer for VMCOREINFO [Orabug: 29870551]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=dhcp is present [Orabug: 29518713]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-38
changelog:
  - Don's try to restart dracut-initqueue if it's already failed
  - fadump-howto: update about 'nocma' and 'off' options for 'fadump=' parameter
  - dracut-module-setup.sh: use auto6 for ipv6
  - module-setup.sh: enable vlan on team interface
  - Fix rootfs detection in dump_fs
  - Remove RHEL-only patch: kexec-tools-2.0.18-makedumpfile-arm64-Add-support-for-ARMv8.2-LVA-52-bi.patch
  - Rebase to makedumpfile-1.6.8 (step1)


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-43
changelog:
  - Always include watchdog-modules
  - mkdumprd: Ensure kdumpbase is added
  - Move watchdog detect and install code to module-setup.sh
  - Add a helper to omit non-mandatory dracut module
  - Move some dracut module dependencies checks to module-setup.sh
  - Set watchdog's pretimeout to zero in kdump kernel
  - kdump-lib.sh: Use a more generic helper to detect omitted dracut module
  - Fix the watchdog drivers detection code
  - Add a helper for detecting watchdog drivers
  - Remove a redundant nfs check
  - kdumpctl: split the driver detection from fs dection function
  - kdump.service: use ConditionKernelCommandLine=crashkernel
  - Revert "Append both nofail and x-systemd.before to kdump mount target"
  - Revert "Don's try to restart dracut-initqueue if it's already failed"
  - Fix dump_fs mount point detection and fallback mount
  - kdump.conf: Update doc about core_collector for ssh target
  - Save the final failure information to log file if saving vmcore failed
  - Doc: Improve the kdump sysconfig document
  - kdumpctl: fix a variable expansion in check_fence_kdump_config()
  - Fedora 33 rhpkg build bug


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-44
changelog:
  - module-setup.sh: don't polute the namespace unnecessarily
  - module-setup.sh: don't source $dracutfunctions
  - logger: source the logger file individually
  - dracut-module-setup.sh: enable ForwardToConsole=yes in fadump mode


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-45
changelog:
  - origin/rhel-8.4.0) Revert "Revert "Append both nofail and x-systemd.before to kdump mount target""
  - kdump.conf: add ipv6 example for nfs and ssh dump
  - fix kdump failure of saving vmcore with the scp + ipv6 method


author: EL Errata <el-errata_ww@oracle.com> - 2.0.20-46.0.1
changelog:
  - Added the following patches from https://github.com/makedumpfile version 1.6.8++ [Orabug: 32851262]
  - Added Patch1009, orabug32851262-PATCH-2-3-arm64-Make-use-of-NUMBER-VA_BITS-in-vmcore.patch
  - Added Patch1010, orabug32851262-PATCH-3-3-arm64-support-flipped-VA-and-52-bit-kernel.patch
  - Removed Patch701 which was in conflict with Patch1010
  - Remove -s setting for KEXEC_ARGS in kdump.sysconfig.aarch64 [Orabug: 3280449]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=single-dhcp is present [Orabug: 32404661]
  - kdump-lib: Fix get_bind_mount_source to support btrfs and fstab [Orabug: 32297893]
  - kdump: add threshold for the required memory (Chen Zhou) [Orabug: 32258986]
  - Fix duplicate -s option for kexec [Orabug: 32127375]
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 30822387]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=dhcp is present [Orabug: 29518713]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: EL Errata <el-errata_ww@oracle.com> - 2.0.20-46.0.1
changelog:
  - Added the following patches from https://github.com/makedumpfile version 1.6.8++ [Orabug: 32851262]
  - Added Patch1009, orabug32851262-PATCH-2-3-arm64-Make-use-of-NUMBER-VA_BITS-in-vmcore.patch
  - Added Patch1010, orabug32851262-PATCH-3-3-arm64-support-flipped-VA-and-52-bit-kernel.patch
  - Removed Patch701 which was in conflict with Patch1010
  - Remove -s setting for KEXEC_ARGS in kdump.sysconfig.aarch64 [Orabug: 3280449]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=single-dhcp is present [Orabug: 32404661]
  - kdump-lib: Fix get_bind_mount_source to support btrfs and fstab [Orabug: 32297893]
  - kdump: add threshold for the required memory (Chen Zhou) [Orabug: 32258986]
  - Fix duplicate -s option for kexec [Orabug: 32127375]
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 30822387]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=dhcp is present [Orabug: 29518713]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: EL Errata <el-errata_ww@oracle.com> - 2.0.20-46.0.1
changelog:
  - Added the following patches from https://github.com/makedumpfile version 1.6.8++ [Orabug: 32851262]
  - Added Patch1009, orabug32851262-PATCH-2-3-arm64-Make-use-of-NUMBER-VA_BITS-in-vmcore.patch
  - Added Patch1010, orabug32851262-PATCH-3-3-arm64-support-flipped-VA-and-52-bit-kernel.patch
  - Removed Patch701 which was in conflict with Patch1010
  - Remove -s setting for KEXEC_ARGS in kdump.sysconfig.aarch64 [Orabug: 3280449]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=single-dhcp is present [Orabug: 32404661]
  - kdump-lib: Fix get_bind_mount_source to support btrfs and fstab [Orabug: 32297893]
  - kdump: add threshold for the required memory (Chen Zhou) [Orabug: 32258986]
  - Fix duplicate -s option for kexec [Orabug: 32127375]
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 30822387]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=dhcp is present [Orabug: 29518713]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]
    (Sriharsha Yadagudde) [Orabug: 18905671]
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-51
changelog:
  - Stop reloading kdump service on CPU hotplug event for FADump
  - fadump: improve fadump-howto.txt about remote dump target setup


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-52
changelog:
  - Write to `/var/lib/kdump` if $KDUMP_BOOTDIR not writable
  - Iterate /sys/bus/ccwgroup/devices to tell if we should set up rd.znet
  - mkdumprd: display the absolute path of dump location in the check_user_configured_target()


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-53
changelog:
  - check for invalid physical address of /proc/kcore when making ELF dumpfile
  - check for invalid physical address of /proc/kcore when finding max_paddr
  - fix format issue in find_online_znet_device
  - check the existence of /sys/bus/ccwgroup/devices before trying to find online network device
  - kdump-lib.sh: fix a warning in prepare_kdump_bootinfo()


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-54
changelog:
  - kdump/ppc64: rebuild initramfs image after migration
  - Check the existence of /sys/bus/ccwgroup/devices/*/online beforehand
  - kdump.sysconfig.s390: Remove "prot_virt" from kdump kernel cmdline


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-50
changelog:
  - rd.route should use the name from kdump_setup_ifname
  - get kdump ifname once in kdump_install_netdev


author: EL Errata <el-errata_ww@oracle.com> - 2.0.20-57.0.3
changelog:
  - Merge 8.4 extra patches for SB boot environment [Orabug: 33512440]
  - Merge SRPM/ol8-u4 orabug patches into SRPM/ol8-u5 [Orabug: 33471981]
  - makedumpfile: Add support for newer kernels up to v5.12 [Orabug: 33250117]


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-60
changelog:
  - fadump-init: clean up mount points properly
  - fadump: kdumpctl should check the modules used by the fadump initramfs
  - fadump: isolate fadump initramfs image within the default one
  - mkdumprd: Use xz for squash image compression


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-66
changelog:
  - kdump/ppc64: suppress the error message "Could not find a registered notification tool" from servicelog_notify
  - Enable zstd compression for makedumpfile in kexec-tools.spec


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.0.20-68.0.1
changelog:
  - kdump/kexec: fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 33748084]
  - kdump: skip lvm private devices [Orabug: 33822070]
  - Merge 8.4 extra patches for SB boot environment [Orabug: 33512440]
  - Merge SRPM/ol8-u4 orabug patches into SRPM/ol8-u5 [Orabug: 33471981]


author: Brian Maly <brian.maly@oracle.com> - 2.0.20-68.0.2
changelog:
  - rebase makdumpfile to version 1.7.1 [Orabug: 34125577] [Orabug: 34105778]
  - add requires for virt-what [Orabug: 34015178]


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-69
changelog:
  - s390: add support for --reuse-cmdline
  - use slurp_proc_file() in get_command_line()
  - add slurp_proc_file()
  - s390: use KEXEC_ALL_OPTIONS
  - s390: add variable command line size
  - util_lib/elf_info: harden parsing of printk buffer
  - print error when reading with unsupported compression
  - use cycle detection when parsing the prink log_buf
  - use pointer arithmetics for dump_dmesg
  - add generic cycle detection


author: Pingfan Liu <piliu@redhat.com> - 2.0.24-1
changelog:
  - kdumpctl: sync the $TARGET_INITRD after rebuild
  - Avoid false-positive mem_section validation with vmlinux
  - Rebase kexec-tools to 2.0.24
  - Rebase makedumpfile to 1.7.1


author: Pingfan Liu <piliu@redhat.com> - 2.0.24-6
changelog:
  - kdump-lib: Add the CoreOS kernel dir to the boot_dirlist
  - kdump-lib: attempt to fix BOOT_IMAGE detection
  - kdump-lib: change how ostree based systems are detected
  - kdump-lib: clear up references to Atomic/CoreOS


author: Brian Maly <brian.maly@oracle.com> - 2.0.24-6.0.1
changelog:
  - makedumpfile: fix issue where manpage wont load [Orabug: 34219528]
  - add requires for virt-what [Orabug: 34015178]
  - kdump/kexec: fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 33748084]
  - kdump: skip lvm private devices [Orabug: 33822070]
  - Merge 8.4 extra patches for SB boot environment [Orabug: 33512440]
  - Merge SRPM/ol8-u4 orabug patches into SRPM/ol8-u5 [Orabug: 33471981]
  - Reformat orabug33822070-kdump-skip-lvm-private-devices.patch [Orabug: 33822070]
  - Drop oracle specific patches no longer applicable [Orabug: 32258986] [Orabug: 33748084]


author: Pingfan Liu <piliu@redhat.com> - 2.0.25-2
changelog:
  - mkdumprd: Improve error messages on non-existing NFS target directories
  - fadump: avoid non-debug kernel use for fadump case


author: Pingfan Liu <piliu@redhat.com> - 2.0.25-3
changelog:
  - kdump.conf: use a simple generator script to maintain
  - Reduce kdump memory consumption by not letting NetworkManager manage unneeded network interfaces


author: Pingfan Liu <piliu@redhat.com> - 2.0.25-4
changelog:
  - Don't check fs modified when dump target is lvm2 thinp
  - Add dependency of dracut lvmthinpool-monitor module
  - lvm.conf should be check modified if lvm2 thinp enabled
  - Add lvm2 thin provision dump target checker
  - Fix the sync issue for dump_fs


author: Pingfan Liu <piliu@redhat.com> - 2.0.25-5
changelog:
  dracut-module-setup: Fix invalid rd.znet command line entry
   dracut-module-setup: Fix persistent nic name on s390


author: Pingfan Liu <piliu@redhat.com> - 2.0.26-6
changelog:
  - dracut-module-setup.sh: skip installing driver for the loopback interface
  - Reduce kdump memory consumption by only installing needed NIC drivers


author: Pingfan Liu <piliu@redhat.com> - 2.0.26-8
changelog:
  - mkdumprd: Use the correct syntax to redirect the stderr to null
  - mkdumprd: call dracut with --add-device to install the drivers needed by /boot partition automatically for FIPS
  - Add NICs that handle DNS queries to the allowlist


author: EL Errata <el-errata_ww@oracle.com> - 2.0.26-8.0.1
changelog:
  - Backport of upstream crash hotplug support [Orabug: 35884454]
  - Drop kexec-tools-2.0.25-makedumpfile-sadump-fix-failure-of-reading-memory-when-5-le.patch
  - Insert new udev rules for crash hotplug into 98-kexec.rules
  - sadump: fix failure of reading memory when 5-level paging is enabled
  - Update UEK reserved sizes [Orabug: 35224510]
  - makedumpfile: fix issue where manpage wont load [Orabug: 34219528]
  - add requires for virt-what [Orabug: 34015178]
  - kdump/kexec: fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 33748084]
  - kdump: skip lvm private devices [Orabug: 33822070]
  - Merge 8.4 extra patches for SB boot environment [Orabug: 33512440]
  - Merge SRPM/ol8-u4 orabug patches into SRPM/ol8-u5 [Orabug: 33471981]
  - Reformat orabug33822070-kdump-skip-lvm-private-devices.patch [Orabug: 33822070]
  - Drop oracle specific patches no longer applicable [Orabug: 32258986] [Orabug: 33748084]


author: Brian Maly <brian.maly@oracle.com> - 2.0.26-8.0.2
changelog:
  - Rebase makedumpfile to 1.7.4 [Orabug: 36157739]
  - kdumpctl check if FIPS is enabled [Orabug: 35982140]


author: Pingfan Liu <piliu@redhat.com> - 2.0.26-11
changelog:
  - powerpc: update kdumpctl to load kernel signing key for fadump
  - powerpc: update kdumpctl to remove deletion of kernel signing key once loaded


author: Pingfan Liu <piliu@redhat.com> - 2.0.26-13
changelog:
  - dracut-module-setup.sh: also install the driver of physical NIC for Hyper-V VM with accelerated networking


author: Darren Archibald <darren.archibald@oracle.com> - 2.0.28-1.0.3
changelog:
  - Increase crashkernel reservation for aarch64 [Orabug: 35887460]
  - kdumpctl check if FIPS is enabled [Orabug: 35982140]
  - Backport of upstream crash hotplug support [Orabug: 35884454]
  - Drop kexec-tools-2.0.25-makedumpfile-sadump-fix-failure-of-reading-memory-when-5-le.patch
  - Insert new udev rules for crash hotplug into 98-kexec.rules
  - sadump: fix failure of reading memory when 5-level paging is enabled
  - Update UEK reserved sizes [Orabug: 35224510]
  - makedumpfile: fix issue where manpage wont load [Orabug: 34219528]
  - add requires for virt-what [Orabug: 34015178]
  - kdump/kexec: fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 33748084]
  - kdump: skip lvm private devices [Orabug: 33822070]
  - Merge 8.4 extra patches for SB boot environment [Orabug: 33512440]
  - Merge SRPM/ol8-u4 orabug patches into SRPM/ol8-u5 [Orabug: 33471981]
  - Reformat orabug33822070-kdump-skip-lvm-private-devices.patch [Orabug: 33822070]
  - Drop oracle specific patches no longer applicable [Orabug: 32258986] [Orabug: 33748084]


author: Darren Archibald <darren.archibald@oracle.com> - 2.0.28-1.0.5
changelog:
  - Fix KEXEC_KERNEL_CHECK IMA rule & valid PE signature regression [Orabug: 36560887]
  - Increase crashkernel reservation for aarch64 [Orabug: 35887460]
  - kdumpctl check if FIPS is enabled [Orabug: 35982140]
  - Backport of upstream crash hotplug support [Orabug: 35884454]
  - Drop kexec-tools-2.0.25-makedumpfile-sadump-fix-failure-of-reading-memory-when-5-le.patch
  - Insert new udev rules for crash hotplug into 98-kexec.rules
  - sadump: fix failure of reading memory when 5-level paging is enabled
  - Update UEK reserved sizes [Orabug: 35224510]
  - makedumpfile: fix issue where manpage wont load [Orabug: 34219528]
  - add requires for virt-what [Orabug: 34015178]
  - kdump/kexec: fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 33748084]
  - kdump: skip lvm private devices [Orabug: 33822070]
  - Merge 8.4 extra patches for SB boot environment [Orabug: 33512440]
  - Merge SRPM/ol8-u4 orabug patches into SRPM/ol8-u5 [Orabug: 33471981]
  - Reformat orabug33822070-kdump-skip-lvm-private-devices.patch [Orabug: 33822070]
  - Drop oracle specific patches no longer applicable [Orabug: 32258986] [Orabug: 33748084]


author: David Howells <dhowells@redhat.com> - 1.5.9-1
changelog:
  - Add manpages for get_persistent.
  - Fix memory leaks in keyctl_describe/read/get_security_alloc().
  - Use keyctl_describe_alloc in dump_key_tree_aux rather than open coding it.
  - Exit rather than returning from act_xxx() functions.
  - Fix memory leak in dump_key_tree_aux.
  - Only get the groups list if we need it.
  - Don't trust sscanf's %n argument.
  - Use the correct path macros in the specfile.
  - Avoid use realloc when the memory has no content.
  - Fix a bunch of issues in key.dns_resolver.
  - Fix command table searching in keyctl utility.
  - Fix a typo in the permissions mask constants.
  - Improve the keyctl_read manpage.
  - Add man7 pages describing various keyrings concepts.


author: David Howells <dhowells@redhat.com> - 1.5.10-1
changelog:
  - Include sys/types.h in keyutils.h.
  - The dns resolver needs limits.h.
  - Overhaul of all manual pages.
  - Some manual pages moved to Linux man-pages project.
  - Add Diffie-Helman keyctl function.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-5
changelog:
  - weak-modules: handle versions with + and other special regex symbols
  - weak-modules: fix misleading message when cannot find dracut.
    Resolves: rhbz#1609372.


author: Eugene Syromiatnikov <esyr@redhat.com> - 25-6
changelog:
  - weak-modules: check also for /lib/modules/$krel/symvers.gz as a possible
    symvers file path.
    Resolves: rhbz#1614119.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-7
changelog:
  - weak-modules: use is_kernel_installed wrapper in update_modules_for_krel.
  - weak-modules: more abstract symvers search implementation.
  - weak-modules: use additional paths for System.map file.
    Resolves: rhbz#1621306.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-8
changelog:
  - weak-modules: fix initial state creation for dry-run
  - weak-modules: check compatibility in a temporary directory
    Resolves: rhbz#1622990.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-10
changelog:
  - weak-modules: group modules on add-kernel
  - weak-modules: do not make groups if there are no extra modules
    Resolves: rhbz#1649211


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-16
changelog:
  - weak-modules: update_modules_for_krel: always finish sandbox
  - weak-modules: groupping: use dependencies of extra/ provider
    Resolves: rhbz#1778889


author: EL Errata <el-errata_ww@oracle.com> - 25-20.0.1
changelog:
  - weak-modules: Fix add_kernel to handle suffix [Orabug: 34623248] (Todd Vierling)
  - add weak-modules patch for [Orabug: 26672773]


author: - Andy Walsh <awalsh@redhat.com> - 6.2.1.102-53
changelog:
  - Continued converting the VDO device to conform to the DM convention of
    not issuing I/O while suspended.
    - Resolves: rhbz#1659303
  - Added more rate limiting of error logging in both the kvdo and uds
    modules in order to avoid soft-lockups on newer kernels.
    - Resolves: rhbz#1703243
  - Eliminated the passing of addresses of unaligned fields in packed
    - Resolves: rhbz#1718058


author: - Andy Walsh <awalsh@redhat.com> - 6.2.1.134-56
changelog:
  - Finished converting the VDO device to conform to the DM convention of not
    issuing I/O while suspended.
  - Resolves: rhbz#1659303
  - Fixed a bug where crash recovery could use the wrong threads for certain
    operations potentially resulting in memory corruption.
  - Resolves: rhbz#1703621
  - Fixed a bug which could cause segfaults when running the vdostatus
    command.
  - Resolves: rhbz#1669960
  - Eliminated a backtrace from the error logged when creating a VDO device
    with an erroneous physical size in the table line.
  - Resolves: rhbz#1717435
  - Fixed a possible use-after-free of the UDSConfiguration.
  - Resolves: rhbz#1653802
  - Made VDO a singleton device because multi-segment devices containing a
    VDO have a number of issues.
  - Resolves: rhbz#1725077
  - Converted the VDO device to conform to the DM convention of not issuing
    writes from the constructor.
  - Resolves: rhbz#1669086


author: - Andy Walsh <awalsh@redhat.com> - 6.2.1.138-56
changelog:
  - Fixed a crash on allocation failure and a use-after-free race introduced by
    the changes to avoid issuing I/O while suspended.
  - Resolves: rhbz#1659303


author: - Andy Walsh <awalsh@redhat.com> - 6.2.2.117-63
changelog:
  - Fixed a bug which would cause the UDS index to be perceived as corrupt
    when a VDO volume is moved to a system with a different endianness.
  - Resolves: rhbz#1745211
  - Modified UDS index rebuild to be interruptible so that shutting down a
    VDO whose index is rebuilding need not wait for the index rebuild to
    complete.
  - Resolves: rhbz#1737639
  - Prevented two VDO devices from being started on the same storage.
  - Resolves: rhbz#1725052
  - Fixed rare races which could result in VDO issuing I/O while suspended.
  - Resolves: rhbz#1766358
  - Fixed crashes when re-suspending a VDO after it had been resumed.
  - Resolves: rhbz#1765253
  - Made async mode ACID. Added async-unsafe mode to preserve the performance of
    the old implementation.
  - Resolves: rhbz#1657301


author: - Andy Walsh <awalsh@redhat.com> - 6.2.3.91-73
changelog:
  - Removed unused UDS bio statistics.
  - Resolves: rhbz#1827762
  - Removed support for old kernels.
  - Resolves: rhbz#1827762
  - Fixed Coverity errors.
  - Resolves: rhbz#1827763
  - Improved the error message when slab journal locks overflow.
  - Resolves: rhbz#1827761
  - Fixed a bug which could result in VDO issuing I/O while suspended.
  - Resolves: rhbz#1824789
  - Fixed a rare double-enqueue bug in the recovery journal.
  - Resolves: rhbz#1824802
  - Modified VDO to not allocate an index if the VDO device is started
    with deduplication disabled.
  - Resolves: rhbz#1755448
  - Nodified VDO to not log spurious journal lock warnings when cleaning up
    write requests which failed due to the VDO going read-only.
  - Resolves: rhbz#1840455


author: - Andy Walsh <awalsh@redhat.com> - 6.2.3.107-73
changelog:
  - Fixed a bug which can cause a soft lockup if users interrupt processes
    waiting on dm-setup commands.
  - Resolves: rhbz#1844651
  - Fixed a rare race which could cause a suspend of a VDO device to fail.
  - Resolves: rhbz#1847747


author: - Andy Walsh <awalsh@redhat.com> - 6.2.3.107-74
changelog:
  - Updated dependencies to prevent installing kernel-rt incorrectly.
  - Resolves: rhbz#1811923
  - Bumped requirement for new 4.18 kernel
  - Relates: rhbz#1812069


author: - Andy Walsh <awalsh@redhat.com> - 6.2.3.114-74
changelog:
  - Fixed an index bug which can cause vdo stop to hang on systems with many
    cores.
  - Resolves: rhbz#1791056
  - Fixed a bug where VDO would ignore errors from empty flush bios.
  - Resolves: rhbz#1858363


author: - Andy Walsh <awalsh@redhat.com> - 6.2.4.14-74
changelog:
  - Fixed a bug which causes the UDS index to consume an excessive
    number of CPU cycles when the VDO device is idle.
  - Resolves: rhbz#1870660


author: - Andy Walsh <awalsh@redhat.com> - 6.2.4.26-74
changelog:
  - Modified physical growth to validate the new VDO size against the size of
    the underlying storage.
  - Resolves: rhbz#1732922
  - Fixed issues which prevented lvrename from working on lvm managed
    VDO devices.
  - Resolves: rhbz#1888419


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.41-78
changelog:
  - Fixed bugs in reading the UDS index of a VDO volume which was converted
    to LVM.
  - Resolves: rhbz#1928284


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.62-79
changelog:
  - Fixed chapter computation for a converted sparse index.
  - Resolves: rhbz#1965516
  - Fixed invalidation of converted chapters.
  - Resolves: rhbz#1966818
  - Removed extraneous fields from the super block of a converted index.
  - Resolves: rhbz#1965546
  - Fixed calculation of the number of expiring chapters in a converted
    index.
  - Resolves: rhbz#1975546
  - Fixed bugs rebuilding a converted index.
  - Resolves: rhbz#1966824


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.65-79
changelog:
  - Removed unneeded allocations from the previous fixes for rebuilding
    a converted index.
  - Resolves: rhbz#1966824


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.72-79
changelog:
  - Fixed a bug which could result in the UDS index issuing I/O while
    suspended.
  - Resolves: rhbz#1990180


author: - Andy Walsh <awalsh@redhat.com> - 6.2.6.3-83
changelog:
  - Adjusted kernel dependencies to grab the right packages.
  - Resolves: rhbz#2011426
  - Rebuilt for latest kernel.
  - Relates: rhbz#2000909


author: - Andy Walsh <awalsh@redhat.com> - 6.2.7.17-86
changelog:
  - Fixed bug which could result in empty flushes being issued to the storage
    below vdo while suspended.
  - Resolves: rhbz#2013056
  - Fixed syntax mismatch which prevented lvm from being able to configure a
    512MB UDS index.
  - Resolves: rhbz#2073203
  - Fixed a race handling timeouts of dedupe index queries.
  - Resolves: rhbz#2092075


author: - Andy Walsh <awalsh@redhat.com> - 6.2.8.1-87
changelog:
  - Fixed a bug which could produce a deadlock after multiple saves and resumes
    of a vdo.
  - Resolves: rhbz#2109047


author: - Susan LeGendre-McGhee <slegendr@redhat.com> - 6.2.8.7-88
changelog:
  - Fixed bug in read-only rebuild when the logical size of the volume is an
    exact multiple of 821 4K blocks.
  - Resolves: rhbz#2166131


author: Eugene Syromiatnikov <esyr@redhat.com> 1.10.0_dup8.1-1
changelog:
  - 9158390ccae759c2c0221de6e0c9541375a480f6
  - bnxt_en kernel module for Driver Update Program
  - Resolves: #bz1802054


author: Eugene Syromiatnikov <esyr@redhat.com> 0.8_4.18.0_80.23_dup8.0-3
changelog:
  - 1d6a0fb6a4ad99d22c0a6e537e3d408b683aa60d
  - btusb kernel module for Driver Update Program
  - Resolves: #bz1755922


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0_348_dup8.5-1
changelog:
  - 9dc660bf1362f5a22a908e61004498cf7ec063a8
  - cfg80211 kernel module for Driver Update Program
  - Resolves: #bz2051885, #bz2051886


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0_348_dup8.5-2
changelog:
  - Bump release due to "Package build kmod-redhat-cfg80211-4.18.0_348_dup8.5-1.el8_5
    kept gated because not onboarded to gating".


author: Eugene Syromiatnikov <esyr@redhat.com> 0.8.2_k_dup8.2-1
changelog:
  - afe1694503958c189ab98273de137c65bc3909f8
  - ice kernel module for Driver Update Program
  - Resolves: #bz1875784


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0.210_dup8.2-1
changelog:
  - 2f22e260c6b75f2acb86bd91292dc8c66f56c481
  - ionic kernel module for Driver Update Program
  - Resolves: #bz1851940


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0.210_dup8.2-2
changelog:
  - Bump release due to "Package build kmod-redhat-ionic-4.18.0.210_dup8.2-1.el8_2
    kept gated because not onboarded to gating".


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0_107_dup8.0-5
changelog:
  - e67217ec68636d7570e69bab9e3b1ed1728b8292
  - iwlwifi kernel module for Driver Update Program
  - Resolves: #bz1755919


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0_348_dup8.5-1
changelog:
  - 9dc660bf1362f5a22a908e61004498cf7ec063a8
  - mac80211 kernel module for Driver Update Program
  - Resolves: #bz2051885, #bz2051886


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0_348_dup8.5-2
changelog:
  - Bump release due to "Package build kmod-redhat-mac80211-4.18.0_348_dup8.5-1.el8_5
    kept gated because not onboarded to gating".


author: Eugene Syromiatnikov <esyr@redhat.com> 5.0_0_dup8.2-1
changelog:
  - 86de78c2e6f431762836a4ea5891f891bc0fdcb4
  - mlx5_core kernel module for Driver Update Program
  - Resolves: #bz1889733


author: Eugene Syromiatnikov <esyr@redhat.com> 5.0_0_dup8.2-2
changelog:
  - Bump release due to "Package build kmod-redhat-mlx5_core-5.0_0_dup8.2-1.el8_2
    kept gated because not onboarded to gating".


author: Eugene Syromiatnikov <esyr@redhat.com> 35.101.00.00_dup8.3-1
changelog:
  - bfcc924fa05e36abe7a039ac5ec2be581e20c288
  - mpt3sas kernel module for Driver Update Program
  - Resolves: #bz1915214


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0_363_dup8.5-1
changelog:
  - 9dc660bf1362f5a22a908e61004498cf7ec063a8
  - mt7921 kernel module for Driver Update Program
  - Resolves: #bz2051885


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0_363_dup8.5-2
changelog:
  - Bump release due to "Package build kmod-redhat-mt7921-4.18.0_363_dup8.5-1.el8_5
    kept gated because not onboarded to gating".


author: EL Errata <el-errata_ww@oracle.com> - 2.0.8-1.3.0.1
changelog:
  * Mon Mar 01 2021 Eugene Syromiatnikov <esyr@redhat.com> 2.0.8-1.3
  - Replace "and" with "with" in pre-4.18.0-240.14.1.el8_3 kernel dependency
    to match it more precisely (it passes when both post-4.18.0-240.14.1.el8_3
    and pre-4.18.0-240.el8 kernels installed otherwise).


author: Eugene Syromiatnikov <esyr@redhat.com> 2.0.8-3
changelog:
  - Add "Provides: oracleasm" and "Provides: oracleasm-kmod".
  - Dropping "0001-oracleasm-driver-replace-fs_context-with-mount_pseud.patch".


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0_363_dup8.5-1
changelog:
  - 9dc660bf1362f5a22a908e61004498cf7ec063a8
  - rtw89 kernel module for Driver Update Program
  - Resolves: #bz2051886


author: Nishant Nayan <nishant.nayan@oracle.com> - 1.18.2-14.0.1
changelog:
  - Try harder to avoid password change replay errors [Orabug: 33609767]
  - Reverting the initial fix as this fix is MIT approved.
  - Initial fix was to toggle between udp and tcp using change_pw_no_udp option.


author: Julien Rische <jrische@redhat.com> - 1.18.2-21
changelog:
  - Backport fix of memory use after free during libkrad cleanup
  - Backport support for larger RADIUS attributes in libkrad
  - Resolves: rhbz#2103125


author: Julien Rische <jrische@redhat.com> - 1.18.2-27
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27250
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27244
  - Make TCP waiting time configurable
    Resolves: RHEL-17131


author: Robbie Harwood <rharwood@redhat.com> - 1.18-1
changelog:
  - New upstream version (1.18)
  - Resolves: #1802334
  - Resolves: #1820311
  - Resolves: #1791062
  - Resolves: #1784655


author: Robbie Harwood <rharwood@redhat.com> - 1.18.2-3
changelog:
  - Match Heimdal behavior for channel bindings
  - Code hygiene + test stability fix included
  - Resolves: #1840518


author: Cestmir Kalina <ckalina@redhat.com> - 1.1-1
changelog:
  - Replace the Python interpreter path to RHEL8 compliant path.
  - Related: #1633691
  - Resolves: #1637594


author: Cestmir Kalina <ckalina@redhat.com> - 1.3-1
changelog:
  - Resolves: #1642134 Error restrict bugs to groups without permission while
    trying to submit RHEL8 symbols
  - New ksc reports will no longer be submitted under redhat bugzilla group.
  - At least one bugzilla group must be specified by a ksc user, otherwise ksc
    will terminate with an error.
  - Version bump to 1.3


author: Cestmir Kalina <ckalina@redhat.com> - 1.4-1
changelog:
  - Resolves: #1643187 ksc manpage lies -k can only be specified once
  - Resolves: #1645335 FILE is shown in ksc man page but no explain or effect
  - Support for multiple -k arguments added
  - Man page reworded to match ksc behaviour


author: Čestmír Kalina <ckalina@redhat.com> - 1.5-1
changelog:
  - Resolves: #1647528 ksc add feature to copy justifications between ksc...
  - Resolves: #1648026 ksc add a non-processed .ko file
  - Resolves: #1647974 piped input causes ksc to fail when asking for user input
  - Add support for justification carry over.
  - Add support for symbol filtering using -K.
  - Fix input problems when piping through to ksc.
  - Extend manpage with EXAMPLES section.
  - Version bump fo 1.5.


author: Čestmír Kalina <ckalina@redhat.com> - 1.6-1
changelog:
  - Resolves: #1729039 Extend ksc output to include environment metadata
  - Add modinfo vermagic field to the output.
  - Add kmod (provides modinfo) to requires.


author: Čestmír Kalina <ckalina@redhat.com> - 1.6-2
changelog:
  - Resolves: #1729039 Extend ksc output to include environment metadata
  - (OSCI) Add kmod to Makefile-generated Requires


author: Lukas Lemes <lukas.lemes@oracle.com> - 1.6-2.0.1
changelog:
  - Added bug30319244-remove-upstream-references.patch [Orabug: 30319244]
  - Added bug30285084-remove-upstream-references.patch [Orabug: 30285084]
  - Add oracle-remove-unfit-option.patch [Orabug: 23634996]


author: Čestmír Kalina <ckalina@redhat.com> - 1.7-1
changelog:
  - Resolves: #1886901 Avoid divisive language
  - Resolves: #1912506 File bugs with Tracking keyword by default


author: Čestmír Kalina <ckalina@redhat.com> - 1.9-1
changelog:
  - Resolves: #2043450 ksc: Support Authorization header in bugzilla API
  - Rebase to latest ksc release


author: Čestmír Kalina <ckalina@redhat.com> - 1.9-2
changelog:
  - Resolves: #2043450 ksc: Support Authorization header in bugzilla API
  - Use platform-python in place of python3


author: EL Errata <el-errata_ww@oracle.com> - 1.9-2.0.1
changelog:
  - Add oracle-remove-unfit-option.patch [Orabug: 23634996]
  - Added bug30285084-remove-upstream-references.patch [Orabug: 30285084]
  - Added bug30319244-remove-upstream-references.patch [Orabug: 30319244]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.2-1
changelog:
  - New upstream release 1.3.3
  - Resolves: rhbz#1574267 - libldb-1.3.3 is available
  - Backport a patch from samba upstream to not require rpc.h


author: Petr Viktorin <pviktori@redhat.com> - 1.4.0-3
changelog:
  - Use %{__python2}, not "python", as the Python2 interpreter
  - Add workaround to allow building with Python 2
  - Remove the lmdb dependency in RHEL


author: Jakub Hrozek <jhrozek@redhat.com> - 1.5.4-1
changelog:
  - Resolves: rhbz#1684582 - Rebase libldb to version 1.5.4 for Samba
  - Resolves: rhbz#1567115 - libldb: Drop Python 2 subpackages from RHEL 8
  - Resolves: rhbz#1597243 - libldb uses Python 2 to build.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.5.4-2
changelog:
  - Fix some python2-related upgrade issues
  - Related: rhbz#1567115 - libldb: Drop Python 2 subpackages from RHEL 8


author: Isaac Boukris <iboukris@redhat.com> - 2.0.7-3
changelog:
  - Resolves: rhbz#1754423 - Rebase libldb to 2.0.7 version for samba
  - Related: rhbz#1754423 - Fix sssd tests (ldb)


author: Isaac Boukris <iboukris@redhat.com> - 2.2.0-1
changelog:
  - Resolves: rhbz#1878114 - Rebase libldb to the version required by Samba
  - Resolves: rhbz#1794349 - Build libldb with lmdb support


author: Andreas Schneider <asn@redhat.com> - 2.3.0-1
changelog:
  - resolves: rhbz#1945021 - Update to version 2.3.0
  - resolves: rhbz#1897082 - Fix libldb tests on aarch64


author: Jan Macku <jamacku@redhat.com> - 0.97-1
changelog:
  - update to 0.97 (#2159588)
  - drop downstream patch - ipmi: avoid error messages on non-dell platforms


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.110-12.el8
changelog:
  - Pass in the distro-provided CFLAGS and LFLAGS. (Jeff Moyer)
  - Get rid of -nostartfiles -nostdlib (Jeff Moyer)
  - Resolves: rhbz#1630578


author: Richard Hughes <richard@hughsie.com> 0.7.8-1
changelog:
  - New upstream release
  - Add as_version_string() for fwupd
  - Add support for component agreements
  - Correctly compare version numbers like '1.2.3' and '1.2.3a'
  - Don't include the path component in the name when parsing the package filename
  - If the launchable is specified don't guess it when composing
  - Never add more than one component to the AppStream store when composing


author: Richard Hughes <richard@hughsie.com> 0.7.9-1
changelog:
  - New upstream release
  - Convert local icons found in metainfo files
  - Follow the Debian tilde usage when ordering versions
  - Use the launchable to find the desktop filename


author: Richard Hughes <richard@hughsie.com> 0.7.10-1
changelog:
  - New upstream release
  - Do not parse firmware files anymore
  - Do not require a release transaction when validating in relaxed mode
  - Extract release descriptions and agreement sections for translation


author: Richard Hughes <richard@hughsie.com> 0.7.11-1
changelog:
  - New upstream release
  - Add AS_APP_QUIRK_DEVELOPER_VERIFIED
  - Escape quotes in attributes
  - Provide async variants of store load functions


author: Richard Hughes <richard@hughsie.com> 0.7.13-1
changelog:
  - New upstream release
  - Do not restrict the maximum number of releases allowed
  - Throw an error when a launchable desktop-id is invalid


author: Richard Hughes <richard@hughsie.com> 0.7.14-1
changelog:
  - New upstream release
  - Add new API for gnome-software
  - Set the AppStream ID from the X-Flatpak desktop key


author: Karel Zak <kzak@redhat.com> 2.32.1-10
changelog:
  - fix #1699310 - rpm -V setup fail on /var/log/lastlog
  - fix #1702712 - pam_env bypassed for root user when using su


author: Karel Zak <kzak@redhat.com> 2.32.1-13
changelog:
  - fix #1734553 - blkid_get_dev() leak file descriptor to underlying block device
  - fix #1719069 - findmnt warning "recommended root FS passno is 1" for XFS


author: Karel Zak <kzak@redhat.com> 2.32.1-18
changelog:
  - fix #1739443 - lscpu reports wrong hypervisor in nested virt on s390x
  - fix #1743555 - command chfn adds some useless commas with GECOS information into /etc/password


author: Karel Zak <kzak@redhat.com> 2.32.1-23
changelog:
  - fix #1826251 - remove MD metadata 0.90 based tests from util-linux CI
  - fix #1812576 - RFE: Bitlocker detection for RHEL 8.3
  - fix #1817726 - add libblkid BLOCK_SIZE
  - fix #1803753 - RHEL-8: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit
  - fix #1812118 - mount -a always tries to mount smb3 share subdir despite being already mounted
  - fix #1824727 - util-linux: Include python3-libmount package in the release
  - fix #1829245 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir


author: Karel Zak <kzak@redhat.com> 2.32.1-25
changelog:
  - fix #1884194 - RHEL-8: chrt command does not support the -R option
  - fix #1855759 - mount.8: clarify (no)suid behavior on file capabilities
  - fix #1861670 - lsblk can not show serial information for virtio disk
  - fix #1883783 - lscpu: avoid segfault on PowerPC systems with valid hardware configurations
  - fix #1900498 - libfdisk/libmount: backport two patches for upstream systemd
  - fix #1883056 - lscpu support for Fujitsu A64FX
  - fix #1882740 - lscpu: use SMBIOS Type 4 strings for CPU vendor and model on ARM


author: Karel Zak <kzak@redhat.com> 2.32.1-28
changelog:
  - fix #1906157 - after su from root to a normal user mesg is unable to show current status
  - fix #1917852 - findmnt: add option to list all fs-independent flags
  - fix #1922299 - throws error using /sbin/nologin: invalid option -- 'c'
  - fix #1940607 - lsblk sometimes returns block devices in wrong order with --pairs
  - fix #1919529 - [RFE] RHEL-8: Support option flags with mount(8) --bind
  - fix #1946921 - RHEL8: mount --rbind -o rprivate doesn't do recursive bind mount


author: Karel Zak <kzak@redhat.com> 2.32.1-29
changelog:
  - fix #1988955 - script command continues without stopping.
  - fix #2041498 - incorrect partition size calculation for BLKPG_* ioctls
  - fix #2011602 - logger from util-linux incorrectly handles long messages
  - fix #1916151 - [RFE] spread fstrim.timer across time
  - fix #1894192 - Update or backport setpriv --pdeathsig
  - fix #2026511 - blkid fails to complete when targeting  non-block devices


author: Karel Zak <kzak@redhat.com> 2.32.1-31
changelog:
  - improve #2026511 fix - blkid fails to complete when targeting non-block devices
  - fix #1950187 - Ambient capabilities failed to applied to non-root user


author: Karel Zak <kzak@redhat.com> 2.32.1-36
changelog:
  - fix #2060030 - Please backport patches for atari partition detection to RHEL 8
  - fix #2069187 - Internal testsuite for lscpu failed on aarch64
  - fix #2093166 - lslogins reports incorrect "Password is locked" status
  - fix #2059241 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd
  - fix #2044592 - Move /var/log/lastlog ownership to systemd


author: Karel Zak <kzak@redhat.com> 2.32.1-40
changelog:
  - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos 
  - fix #2142496 - update upstream tests
  - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES
  - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38
  - fix #2160321 - [last] ut->ut_user is not null terminated


author: Karel Zak <kzak@redhat.com> 2.32.1-43
changelog:
  - fix #2117355 - Add additional documentation for fstab
  - fix #2184728 - libuuid - downport cache related patch
  - fix #2188894 - The swapon man page of -p(priority) option shows incorrect.
  - fix #2227097 - wall(1) fail when trying to use seat0


author: Karel Zak <kzak@redhat.com> 2.32.1-46
changelog:
  - fix RHEL-13741 - lscpu: avoid EBUSY on cpuinfo_max_freq
  - fix RHEL-18451 - logger: initialize socket credentials control union
  - fix RHEL-16070 - util-linux: issues in libblkid
  - fix RHEL-6274 - lslogins incorrect account expiration field


author: Karel Zak <kzak@redhat.com> - 2.32-3
changelog:
  - sync spec file with Fedora
  - move /etc/adjtime config from initscripts to util-linux
  - fix #1560642 - uuidd.service does not start
  - remove unused build option --enable-libmount-force-mountinfo (it's default now)
  - disable assert code


author: Karel Zak <kzak@redhat.com> 2.32.1-4
changelog:
  - fix #1614364 - losetup: /dev/loop1: failed to set up loop device
  - fix #1614852 - mount man page says sync option has no effect for ext4
  - fix #1614843 - Man page of logger is missing -S option


author: Karel Zak <kzak@redhat.com> 2.32.1-7
changelog:
  - fix #1656437 - Failing tests from testsuite
  - fix #1653781 - unable to umount by loop backing file
  - fix #1655650 - RHEL8.0 - fdisk -l shows the conflicting partitions name for the mpath
  - fix #1653413 - blkid: add --no-part-details to not return metadata from empty partitions


author: Zoltan Fridrich <zfridric@redhat.com> - 2.26-5
changelog:
  - added CAP_PERFMON, CAP_BPF and CAP_CHECKPOINT_RESTORE capabilities
    resolves: rhbz#1946982 rhbz#1921576


author: Zoltan Fridrich <zfridric@redhat.com> - 2.48-2
changelog:
  - rebase to 2.48
    resolves: rhbz#2032813
  - fix ambient capabilities for non-root users
    resolves: rhbz#1950187


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-5
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210637
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2210644


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.8-6
changelog:
  - Python 2 binary package renamed to python2-libcap-ng
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Nikola Forró <nforro@redhat.com> - 0.41-17
changelog:
  - backport several upstream fixes
  - set Delegate property for cgconfig service to make sure complete
    cgroup hierarchy is always created by systemd


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Make inline function __comps_objmrtree_all also static (RhBug:1793424)
  - Fix memory leaks and resource leaks
  - Fix: Check result "comps_parse_parsed_init()"


author: Kalev Lember <klember@redhat.com> - 0.6.9-1
changelog:
  - Update to 0.6.9
  - Use make_install macro
  - Mark COPYING and COPYING.LIB as %license
  - Tighten -devel subpackage deps


author: Filip Januš <fjanus@redhat.com> 5.3.28-42
changelog:
  - Apply the previous change only on aarch64 to limit the risk of unwanted impact
  - Resolves: #1992402


author: Sam Booth <sam.booth@oracle.com> - 5.3.28-42.0.1
changelog:
  - Update URL in rpm description [Orabug: 35986894]
  - Change http links in spec to https [Orabug: 35986894]
  - Buildrequire java-devel 1:1.8.0


author: Jaroslav Mracek <jmracek@redhat.com> - 0.20.0-1
changelog:
  - [module] Report module solver errors
  - [module] Enhance module commands and errors
  - [transaction] Fixed several problems with SWDB
  - Remove unneeded regex URL tests (RhBug:1598336)
  - Allow quoted values in ini files (RhBug:1624056)
  - Filter out not unique set of solver problems (RhBug:1564369)
  - Resolves: rhbz#1614531 - dnf 3.2 does not depsolve correctly
  - Resolves: rhbz#1614346 - dnf rollback doesn't work after install/downgrade/upgrade
  - bug 1605274 - DNF crashes on * in installation repository URL
  - Resolves: rhbz#1623383 - dnf.exceptions.ConfigError: Error parsing ...


author: Jaroslav Mracek <jmracek@redhat.com> - 0.22.0-1
changelog:
  - Fix segfault in repo_internalize_trigger (RhBug:1375895)
  - Change sorting of installonly packages (RhBug:1627685)
  - [swdb] Fixed pattern searching in history db (RhBug:1635542)
  - Check correctly gpg for repomd when refresh is used (RhBug:1636743)
  - [conf] Provide additional VectorString methods for compatibility with Python list.
  - [plugins] add plugin loading and hooks into libdnf


author: Jaroslav Mracek <jmracek@redhat.com> - 0.22.0-2
changelog:
  - Add patch Modify-solver_describe_decision-to-report-cleaned-RhBug1486749
  - Add patch swdb-create-persistent-WAL-files-RhBug1640235
  - Add patch Relocate-ModuleContainer-save-hook-RhBug1632518
  - Add patch Test-if-sack-is-present-and-run-save-module-persistor-RhBug1632518


author: Jaroslav Mracek <jmracek@redhat.com> - 0.22.3-1
changelog:
  - Permanently disable Python2 build for Fedora 30+
  - Update to 0.22.3
  - Modify solver_describe_decision to report cleaned (RhBug:1486749)
  - [swdb] create persistent WAL files (RhBug:1640235)
  - Relocate ModuleContainer save hook (RhBug:1632518)
  - [transaction] Fix transaction item lookup for obsoleted packages (RhBug: 1642796)
  - Fix memory leaks and memory allocations
  - [repo] Possibility to extend downloaded repository metadata


author: Daniel Mach <dmach@redhat.com> - 0.22.4-1
changelog:
  - Enhance LIBDNF plugins support
  - [repo] Check whether metadata cache is expired (RhBug:1539620,1648274)
  - [sack] Implement dnf_sack_get_rpmdb_version()


author: Jingdong Lu <jingdong.lu@oracle.com> - 0.22.5-5.0.1
changelog:
  - Disable rhsm [Orabug: 29901202]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]


author: Frank Deng <frank.deng@oracle.com> - 0.22.5-5.0.2
changelog:
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.33.0-1
changelog:
  - Update to 0.33.0
  - Enhance sorting for module list (RhBug:1590358)
  - [DnfRepo] Add methods for alternative repository metadata type and download (RhBug:1656314)
  - Remove installed profile on module enable or disable (RhBug:1653623)
  - Enhance modular solver to handle enabled and default module streams differently (RhBug:1648839)
  - Add support of wild cards for modules (RhBug:1644588)
  - Exclude module pkgs that have conflict
  - Enhance config parser to preserve order of data, and keep comments and format
  - Improve ARM detection
  - Add support for SHA-384
  - Return empty query if incorrect reldep (RhBug:1687135)
  - ConfigParser: Improve compatibility with Python ConfigParser and dnf-plugin-spacewalk (RhBug:1692044)
  - ConfigParser: Unify default set of string represenation of boolean values
  - Fix segfault when interrupting dnf process (RhBug:1610456)
  - Installroot now requires absolute path
  - Support "_none_" value for repo option "proxy" (RhBug:1680272)
  - Add support for Module advisories
  - Add support for xml:base attribute from primary.xml (RhBug:1691315)
  - Improve detection of Platform ID (RhBug:1688462)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.35.1-1
changelog:
  - Update to 0.35.1
  - Skip invalid key files in "/etc/pki/rpm-gpg" with warning (RhBug:1644040)
  - Enable timestamp preserving for downloaded data (RhBug:1688537)
  - Fix 'database is locked' error (RhBug:1631533)
  - Replace the 'Failed to synchronize cache' message (RhBug:1712055)
  - Fix 'no such table: main.trans_cmdline' error (RhBug:1596540)
  - Fix: skip_if_unavailable=true for local repositories (RhBug:1716313)
  - Add support of modular FailSafe (RhBug:1623128)
  - Add support of DNF main config file in context; used by PackageKit and
    microdnf (RhBug:1689331)
  - Exit gpg-agent after repokey import (RhBug:1650266)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.35.1-4
changelog:
  - Fix typo in error message (RhBug:1726661)
  - Update localizations from zanata (RhBug:1689991)
  - Don't disable nonexistent but required repositories (RhBug:1689331)
  - Ignore trailing blank lines of multiline value (RhBug:1722493)
  - Re-size includes map before re-computation (RhBug:1725213)


author: Edward Leung <edward.leung@oracle.com> - 0.35.1-8.0.1
changelog:
  - Disable rhsm [Orabug: 29901202]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584] (Frank Deng)


author: Ales Matej <amatej@redhat.com> - 0.35.5-1
changelog:
  - Update to 0.35.5
  - Make libdnf own its plugin directory (RhBug:1714265)
  - Set priority of dnf.conf.d drop-ins
  - Fix toString() to not insert [] (RhBug:1584442)
  - Fix handling large number of filenames on input (RhBug:1690915)
  - Detect armv7 with crypto extension only on arm version >= 8
  - A new standardized User-Agent field consisting of the libdnf and OS version
    (including the variant) (RhBug:1156007)
  - Add basic countme support (RhBug:1647454)
  - Fix crash in PackageKit (RhBug:1636803)
  - Do not create @System.solv files (RhBug:1707995)
  - Set LRO_CACHEDIR so zchunk works again (RhBug:1739867)
  - Improve detection of extras packages by comparing (name, arch) pair instead
    of full NEVRA (RhBuh:1684517)
  - Improve handling multilib packages in the history command (RhBug:1728637)
  - Repo download: use full error description into the exception text (RhBug:1741442)
  - Properly close hawkey.log (RhBug:1594016)
  - Fix dnf updateinfo --update to not list advisories for packages updatable
    only from non-enabled modules
  - Apply modular filtering by package name (RhBug:1702729)


author: Ales Matej <amatej@redhat.com> - 0.38.1-1
changelog:
  - Update to 0.38.1
  - Change the best option default to false
  - Use more descriptive message when failed to retrieve GPG key (RhBug:1605117)
  - Add removeMetadataTypeFromDownload function to the API
  - Context part of libdnf can now read vars (urlvars) from dirs and environment
  - Throw exception immediately if file cannot be opened
  - Add test when there is no primary metadata in compatible format (RhBug:1744960)
  - Various improvements to countme features
  - Don't abort on rpmdb checksum calculation failure
  - Enable module dependency trees when using set_modules_enabled_by_pkgset() (RhBug:1762314)
  - Resolve problem with --best and search in provides (RhBug:1737469)
  - New method "Query::filterSubject()", replaces Solution::getBestSolution()
  - The Solution class was removed
  - Add query argument into get_best_query and get_best_solution
  - Add module reset function into dnf_context
  - Add method to get all repository metadata locations
  - Catch NoModuleException in case of not existent value was used in persistor (RhBug:1761773)


author: Ales Matej <amatej@redhat.com> - 0.39.1-1
changelog:
  - Update to 0.39.1
  - Report reason how package was excluded (RhBug:1649754)
  - Additional Arm detection improvements (RhBug:1691430)
  - Set skip_if_unavailable for media repos to skip their update (RhBug:1716067)
  - Add support of xml:base for remote and local url in context (RhBug:1734350,1717865)


author: Ales Matej <amatej@redhat.com> - 0.39.1-3
changelog:
  - Add two new query filters: obsoletes_by_priority, upgrades_by_priority (RhBug:1769466)
  - [context] Add wildcard support in dnf_context_repo_set_data (RhBug:1781420)
  - Remove killGpgAgent function (RhBug:1781601)


author: EL Errata <el-errata_ww@oracle.com> - 0.39.1-5.0.1.el8
changelog:
  - Update OL8 dnf to recognise kernel-uek as installonlypkgs package [Orabug: 31018668]
  - Disable rhsm [Orabug: 29901202]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584] (Frank Deng)


author: Ales Matej <amatej@redhat.com> - 0.47.0-1
changelog:
  - Update to 0.47.0
  - Allow excluding packages with "excludepkgs" and globs
  - Make parsing of reldeps more strict (RhBug:1788107)
  - Add expanding solvable provides for dependency matching (RhBug:1534123)
  - DnfRepo: fix module_hotfixes keyfile priority level
  - Add custom exceptions to libdnf interface
  - Port to libmodulemd-2 API (RhBug:1693683)
  - Add prereq_ignoreinst & regular_requires properties for pkg (RhBug:1543449)
  - Reset active modules when no module enabled or default (RhBug:1767351)
  - Add comment option to transaction (RhBug:1773679)
  - Baseurl is not exclusive with mirrorlist/metalink (RhBug:1775184)
  - Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  - Handle situation when an unprivileged user cannot create history database (RhBug:1634385)
  - Add query filter: latest by priority
  - Add setter for running kernel protection setting
  - Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  - Config options: only first empty value clears existing (RhBug:1788154)
  - [conf] Set useful default colors when color is enabled
  - [context] Use installonly_limit from global config (RhBug:1256108)
  - [context] Add API to get/set "install_weak_deps"
  - [context] Adds support for includepkgs in repository configuration.
  - [context] Adds support for excludepkgs, exclude, includepkgs, and disable_excludes in main configuration.
  - [context] Added function dnf_transaction_set_dont_solve_goal
  - [context] Added functions dnf_context_get/set_config_file_path
  - [context] Respect "plugins" global conf value
  - [context] Add API to disable/enable plugins
  - [context] Create new repo instead of reusing old one (RhBug:1795004)
  - [context] Error when main config file can't be opened (RhBug:1794864)
  - [context] Add function function dnf_context_is_set_config_file_path
  - [context] Support repositories defined in main configuration file


author: Nicola Sella <nsella@redhat.com> - 0.48.0-1
changelog:
  - Update to 0.48.0
  - swdb: Catch only SQLite3 exceptions and simplify the messages
  - MergedTransaction list multiple comments (RhBug:1773679)
  - Modify CMake to pull *.po files from weblate
  - Optimize DependencyContainer creation from an existing queue
  - fix a memory leak in dnf_package_get_requires()
  - Fix memory leaks on g_build_filename()
  - Fix memory leak in dnf_context_setup()
  - Add `hy_goal_favor` and `hy_goal_disfavor`
  - Define a cleanup function for `DnfPackageSet`
  - dnf-repo: fix dnf_repo_get_public_keys double-free
  - Do not cache RPMDB
  - Use single-quotes around string literals used in SQL statements
  - SQLite3: Do not close the database if it wasn't opened (RhBug:1761976)
  - Don't create a new history DB connection for in-memory DB
  - transaction/Swdb: Use a single logger variable in constructor
  - utils: Add a safe version of pathExists()
  - swdb: Handle the case when pathExists() fails on e.g. permission
  - Repo: prepend "file://" if a local path is used as baseurl
  - Move urlEncode() to utils
  - utils: Add 'exclude' argument to urlEncode()
  - Encode package URL for downloading through librepo (RhBug:1817130)
  - Replace std::runtime_error with libdnf::RepoError
  - Fixes and error handling improvements of the File class
  - [context] Use ConfigRepo for gpgkey and baseurl (RhBug:1807864)
  - [context] support "priority" option in .repo config file (RhBug:1797265)


author: Nicola Sella <nsella@redhat.com> - 0.48.0-3
changelog:
  - Add log file level main config option (RhBug:1802074)
  - Accept '==' as an operator in reldeps (RhBug:1847946)


author: EL Errata <el-errata_ww@oracle.com> - 0.48.0-5.0.1
changelog:
  - Update OL8 dnf to recognise kernel-uek as installonlypkgs package [Orabug: 31018668]
  - Disable rhsm [Orabug: 29901202]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]


author: Alan Steinberg <alan.steinberg@oracle.com> - 0.48.0-5.0.2
changelog:
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584] (Frank Deng)


author: Nicola Sella <nsella@redhat.com> - 0.55.0-1
changelog:
  - Add vendor to dnf API (RhBug:1876561)
  - Add formatting function for solver error
  - Add error types in ModulePackageContainer
  - Implement module enable for context part
  - Improve string formatting for translation
  - Remove redundant printf and change logging info to notice (RhBug:1827424)
  - Add allow_vendor_change option (RhBug:1788371) (RhBug:1788371)


author: Nicola Sella <nsella@redhat.com> - 0.55.0-3
changelog:
  - Avoid multilib file conflict in config.h (RhBug:1918818)
  - [modules] Add special handling for src artifacts (RhBug:1809314)


author: Nicola Sella <nsella@redhat.com> - 0.55.0-4
changelog:
  - [context] improve retrieving repository configuration
  - Allow loading incomplete cache and loading ext solv files without its repodata


author: EL Errata <el-errata_ww@oracle.com> - 0.55.0-7.0.1
changelog:
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584] (Frank Deng)
  - Update OL8 dnf to recognise kernel-uek as installonlypkgs package [Orabug: 31018668]
  - Disable rhsm [Orabug: 29901202]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]


author: Lukas Hrazky <lhrazky@redhat.com> - 0.63.0-8
changelog:
  - Substitute all repository config options (fixes substitution of baseurl)
  - Use solvfile userdata to store and check checksums and solv versions
  - Fix handling transaction id in resolveTransactionItemReason
  - Set short action for Reason Change


author: Lukas Hrazky <lhrazky@redhat.com> - 0.63.0-10
changelog:
  - Do not print errors on failovermethod repo option
  - the dnf_context_remove() function accepts `<package-spec>`, doc updates
  - advisory upgrade: filter out advPkgs with different arch


author: EL Errata <el-errata_ww@oracle.com> - 0.63.0-11.1.0.1
changelog:
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584] (Frank Deng)
  - Update OL8 dnf to recognise kernel-uek as installonlypkgs package [Orabug: 31018668]
  - Disable rhsm [Orabug: 29901202]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]
  - Update OL8 dnf to recognise UEK7 as installonlypkgs package [Orabug: 33861658]


author: Jaroslav Rohel <jrohel@redhat.com> - 0.63.0-18
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-1244)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-1253)


author: EL Errata <el-errata_ww@oracle.com> - 0.63.0-19.0.1
changelog:
  - Recognise new kernel-uek RPMs as multiversion and installonlypkg [Orabug: 36053872]
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584] (Frank Deng)
  - Update OL8 dnf to recognise kernel-uek as installonlypkgs package [Orabug: 31018668]
  - Disable rhsm [Orabug: 29901202]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]
  - Update OL8 dnf to recognise UEK7 as installonlypkgs package [Orabug: 33861658]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.63.0-1
changelog:
  - Update to 0.62.0
  - Hardening: add signature check with rpmcliVerifySignatures (RhBug:1932079)
  - Support allow_vendor_change setting in dnf context API
  - Add a new option module_obsoletes
  - Add new API applyObsoletes() function to apply modular obsoletes
  - Do not allow 1 as installonly_limit value (RhBug:1926261)
  - Add a config option to check TLS certificate revocation status (using OCSP stapling), defaults to false (RhBug:1814383)
  - Swdb: Add a method to get the current transaction
  - [context,API] Functions for accessing main/global configuration options
  - [context,API] Function for adding setopt
  - Add getter for modular obsoletes from ModuleMetadata
  - Add ModulePackage.getStaticContext() and getRequires()
  - Fix modular queries with the new solver
  - Fix: Fully set ssl in newHandle function
  - [conf] Add options for working with certificates used with proxy
  - Modify module NSVCA parsing - context definition (RhBug:1926771)
  - [context] Fix: dnf_package_is_installonly (RhBug:1928056)
  - Add getApplicablePackages to advisory and isApplicable to advisorymodule
  - Keep isAdvisoryApplicable to preserve API
  - [context] Support config file option "proxy_auth_method", defaults "any"
  - Support main config file options "installonlypkgs" and "protected_packages". Changes behaviour of microdnf and PackageKit.
  - Properly handle multiple collections in updateinfo.xml (RhBug:1804234)
  - Fix a crash when [media] section in .treeinfo is missing for bootable media (RhBug:1946024)
  - Add new dnf_context_module_install() C API


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.63.0-2
changelog:
  - Fix: dnf_context_module_install: memory leaks
  - covscan: remove unused vars, mark private func static, return values
  - DNF does not fail on non UTF-8 file names in a package


author: Lans Hung <lans.hung@oracle.com> - 0.63.0-3.0.2
changelog:
  - Update OL8 dnf to recognize UEK7(kernel-uek-core & kernel-uek-modules) as installonlypkgs package [Orabug: 33861658]


author: Jerry James <loganjerry@gmail.com> - 3.1-23.20170329cvs
changelog:
  - Add gcc BR
  - Build verbosely
  - Drop obsolete --enable-widec configure option
  - Fix "unused direct shared library dependency" warning from rpmlint again
  - Fix man page error due to BSD nroff macro that is not available on Linux
  - Drop explicit R on pkgconfig from the -devel package, autogenerated


author: Parag Nemade <pnemade AT fedoraproject DOT org> - 1:1.07.4-10
changelog:
  - Resolves:rh#1526510 - USE_TYPO_METRICS set in Fedora 2X but not set in RHEL7 or in ttf binary release
  - some spec cleanups


author: Vishal Vijayraghavan <vishalvijayraghavan AT gmail DOT com> - 1:2.00.3-1
changelog:
  - Resolves: rhbz#1614529
  - Updated the BuildRequires to python3 and using latest build
  - Changed the upstream URL


author: Vishal vijayraghavan <vishalvijayraghavan AT gmail DOT com> - 1:2.00.3-4
changelog:
  - Resolves: rhbz#1643920: Removed Obsoletes: liberation-narrow-fonts and Provides: liberation-narrow-fonts macro


author: Vishal Vijayraghavan <vvijayra@redhat.com> - 1:2.00.3-6
changelog:
  - Resolves: #1664501 - liberation-fonts-common contains fonts.dir
  - Splitted the font family(mono, sans and serif) into diferrent root font directories


author: Honggang Li <honli@redhat.com> - 1.11.1-1
changelog:
  - Rebase to upstream release v1.11.1
  - EFA Support requires libfabric
  - Resolves: bz1831145, bz1852636


author: Michal Schmidt <mschmidt@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream release 1.15.1
  - Disable LTO on x86_64 due to memory issues (copied from Fedora)
  - Resolves: rhbz#2040450


author: Jens Petersen <petersen@redhat.com> - 3.1-12
changelog:
  - protect install-info in the rpm scriptlets
    https://fedoraproject.org/wiki/Packaging:Scriptlets#Texinfo


author: DJ Delorie <dj@redhat.com> - 3.1-24
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2014228)


author: Tomáš Mráz <tmraz@redhat.com> 1.8.3-2
changelog:
  - make only_urandom a default in non-presence of configuration file
  - run the full FIPS selftests only when the library is called from
    application


author: Tomáš Mráz <tmraz@redhat.com> 1.8.3-3
changelog:
  - add CMAC selftest for FIPS POST
  - add continuous FIPS entropy test
  - disable non-approved FIPS hashes in the enforced FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.8.5-3
changelog:
  - new upstream version 1.8.5
  - AES performance improvements backported from master branch
  - FIPS module is implicit with kernel FIPS flag
  - always run the FIPS selftests if FIPS module is installed


author: Jakub Jelen <jjelen@redhat.com> - 1.8.5-6
changelog:
  - Fix for CVE-2021-33560 (#1971421)
  - Enable HW optimizations in FIPS (#1976137)
  - Performance enchancements for ChaCha20 and Poly1305 (#1855231)


author: Jakub Jelen <jjelen@redhat.com> - 1.8.5-6
changelog:
  - Fix for CVE-2021-40528 (#1971421)
  - Enable HW optimizations in FIPS (#1976137)
  - Performance enchancements for ChaCha20 and Poly1305 (#1855231)


author: Richard Hughes <richard@hughsie.com> 0.2.10-1
changelog:
  - New upstream version
  - Correctly detect removed devices when rescanning
  - Fix a memory leak when using control tranfers
  - Fix symbol version table up to version 0.2.9


author: Rafael Aquini <aquini@redhat.com> - 2.20-10
changelog:
  - Fix up annocheck distro flag failures (1624131)
  - Convert libhugetlbfs run_tests.py to Python3 (1620250)


author: Rafael Aquini <aquini@redhat.com> - 2.21-4
changelog:
  - Fix: task-size-overrun hung over 8 hours on ppc64le (1737370)
  - Introduce libhugetlbfs-tests subpkg for CI tests (1688930)


author: Rafael Aquini <aquini@redhat.com> - 2.21-12
changelog:
  - Fix: Introduce libhugetlbfs-tests subpkg for CI tests (1688930)
  - trim repetitive changelogs for interim debug builds


author: Rafael Aquini <aquini@redhat.com> - 2.21-13
changelog:
  - Fix: huge_page_setup_helper.py: SyntaxError: Missing parentheses in call to 'print' (1821938)
  - libhugetlbfs-tests: harden the testcases to satisfy EXECSHIELD RPMDiff checks (1785296)


author: Michal Židek <mzidek@redhat.com> - 2.0.0-33
changelog:
  - Resolves: rhbz#1646113 - Missing concise documentation about valid options
                             for sssd-files-provider


author: Michal Židek <mzidek@redhat.com> - 2.0.0-34
changelog:
  - Resolves: rhbz#1622008 - Error message when IPA server uninstall calls
                             kdestroy caused by KCM returning a wrong error
                             code during the delete operation


author: Michal Židek <mzidek@redhat.com> - 2.0.0-36
changelog:
  - Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss
                             suggests using * for backend sss


author: Michal Židek <mzidek@redhat.com> - 2.0.0-38
changelog:
  - Resolves: rhbz#1578014 - sssd does not work under non-root user
  - Note: Actually the patches were in the 2.0.0-37, this one just adds this
          changelog because it was missing.


author: Michal Židek <mzidek@redhat.com> - 2.0.0-39
changelog:
  - Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than
                             1.x, this can result in time outs


author: Michal Židek <mzidek@redhat.com> - 2.0.0-40
changelog:
  -Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error.
                            UnknownProperty: Unknown property


author: Michal Židek <mzidek@redhat.com> - 2.0.0-41
changelog:
  -Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong
                            subdomain service name being used


author: Michal Židek <mzidek@redhat.com> - 2.0.0-42
changelog:
  - Resolves: rhbz#1645291 - Perform some basic ccache initialization as part
                             of gen_new to avoid a subsequent switch call
                             failure


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-43
changelog:
  - Resolves: rhbz#1672780 - gdm login not prompting for username when smart
                             card maps to multiple users


author: Michal Židek <mzidek@redhat.com> - 2.0.0-43.1
changelog:
  - Resolves: rhbz#1691750 - pam_sss failing for external users not configured
                             via sssd


author: Michal Židek <mzidek@redhat.com> - 2.0.0-43.2
changelog:
  - Resolves: rhbz#1696596 - AD user not found after establishing trust and
                             restarting sssd [ZStream Clone]


author: Michal Židek <mzidek@redhat.com> - 2.0.0-43.3
changelog:
  - Resolves: rhbz#1701135 - Include libsss_nss_idmap-devel in the Builder
                             repository


author: Michal Židek <mzidek@redhat.com> - 2.2.0-10
changelog:
  - Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing
                             the trailing colon


author: Michal Židek <mzidek@redhat.com> - 2.2.0-11
changelog:
  - Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                             non-root user


author: Michal Židek <mzidek@redhat.com> - 2.2.0-13
changelog:
  - Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
              systemd-user service in the account phase in RHEL-8


author: Michal Židek <mzidek@redhat.com> - 2.2.0-14
changelog:
  - Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                             should not cause files domain entries to be
                             qualified, this can break sudo access


author: Michal Židek <mzidek@redhat.com> - 2.2.0-15
changelog:
  - Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                             loop if wrong PIN was provided


author: Michal Židek <mzidek@redhat.com> - 2.2.0-16
changelog:
  - Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                             the IP address of the machine updated in IPA upon
                             sssd.service startup


author: Michal Židek <mzidek@redhat.com> - 2.2.0-17
changelog:
  - Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                             keyring
  - Also apply a patch to fix gating tests issue


author: Michal Židek <mzidek@redhat.com> - 2.2.0-18
changelog:
  - Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
  - Also sync. kcm multihost tests with master


author: Michal Židek <mzidek@redhat.com> - 2.2.0-19
changelog:
  - Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                             new ones (kcm)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.0-19.1
changelog:
  - Resolves: rhbz#1816591 - p11_child should have an option to skip
                             C_WaitForSlotEvent if the PKCS#11 module does not
                             implement it properly [rhel-8.1.0.z]


author: Michal Židek <mzidek@redhat.com> - 2.2.3-14
changelog:
  - Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be
                             specified up to the seconds


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-16
changelog:
  - Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is
                             omitted and auth_provider is krb5


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-17
changelog:
  - Resolves: rhbz#1718193 - p11_child should have an option to skip
                             C_WaitForSlotEvent if the PKCS#11 module
                             does not implement it properly


author: Michal Židek <mzidek@redhat.com> - 2.2.3-18
changelog:
  - Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard
                             certificate EKU and perform an action based
                             on value when generating SSH key from a certificate


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-19
changelog:
  - Resolves: rhbz#1810634 - id command taking 1+ minute for returning user
                             information


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-19
changelog:
  - Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard
                             certificate EKU and perform an action based
                             on value when generating SSH key from a certificate
                             (additional patch)


author: EL Errata <el-errata_ww@oracle.com> - 2.2.3-20.0.1.el8
changelog:
  - Revert Redhat's change of disallowing duplicated incomplete gid
    when "id_provider=ldap" is used, which caused regression in AD
    environment. [Orabug: 29286774] [Doc ID 2605732.1]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-1
changelog:
  - Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3
  - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure
  - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-2
changelog:
  - Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-3
changelog:
  - Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package
  - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP
  - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache
  - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for
                             inotify events, and no updates are triggered
  - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card"
                             on GDM login with smart-card
  - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat
  - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network.
  - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management
  - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest
                             if LDAP entries do not contain AD forest root information
  - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories
                             in SSSD-AD direct integration.
  - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card
  - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False
  - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-4
changelog:
  - Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication
  - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider
  - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-5
changelog:
  - Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache
  - Fixed "requires/provides" rpmdiff warning


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-7
changelog:
  - Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.
  - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-8
changelog:
  - Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working
  - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema
  - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf
  - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-9
changelog:
  - Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-1
changelog:
  - Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4
  - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI
  - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search()
  - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording
  - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x
  - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD.
  - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process
  - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL
  - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase)
  - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page
  - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals"
  - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains
  - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file
  - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes
  - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level
  - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff
  - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command
  - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-3
changelog:
  - Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr()
  - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process
  - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal
  - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-4
changelog:
  - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process
  - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8]
  - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-5
changelog:
  - Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
  - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
  - Resolves: rhbz#1893159 - Default debug level should report all errors / failures
  - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-6
changelog:
  - Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
  - Resolves: rhbz#1915395 - Memory leak in the simple access provider
  - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
  - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-7
changelog:
  - Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
  - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
  - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-8
changelog:
  - Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
  - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
  - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)


author: EL Errata <el-errata_ww@oracle.com> - 2.4.0-9.0.1
changelog:
  - Restore default debug level for sss_cache [Orabug: 32810448]
  - Restore default debug level for shadow-utils tools [Orabug: 32810448]
  - Revert Redhat's change of disallowing duplicated incomplete gid
    when "id_provider=ldap" is used, which caused regression in AD
    environment. [Orabug: 29286774] [Doc ID 2605732.1]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-9.1
changelog:
  - Resolves: rhbz#1949170 - pam_sss_gss.so doesn't work with large kerberos tickets [rhel-8.4.0.z]
  - Resolves: rhbz#1945656 - No gpo found and ad_gpo_implicit_deny set to True still permits user login [rhel-8.4.0.z]
  - Resolves: rhbz#1945655 - SSSD not detecting subdomain from AD forest (RHEL 8.3) [rhel-8.4.0.z]
  - Resolves: rhbz#1945654 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-8.4.0.z]
  - Resolves: rhbz#1942438 - Wrong default debug level of sssd tools [rhel-8.4.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-9.2
changelog:
  - Resolves: rhbz#1985456 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8.4.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.0-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
  - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
  - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
  - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
  - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
  - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
  - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
  - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
  - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
  - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
  - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
  - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
  - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
  - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
  - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
  - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
  - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
  - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
  - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
  - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
  - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
  - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
  - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
  - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
  - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
  - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.1-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
  - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
  - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
  - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
  - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
  - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
  - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
  - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
  - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
  - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
  - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
  - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.1-2
changelog:
  - Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
  - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
  - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
  - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
  - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
  - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
  - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
  - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2
changelog:
  - Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
  - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2.1
changelog:
  - Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2.2
changelog:
  - Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
  - Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
  - Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
  - Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2.3
changelog:
  - Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2.4
changelog:
  - Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
  - Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.1-1
changelog:
  - Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
  - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected
  - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator
  - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed
  - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb
  - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces)
  - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest)
  - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD
  - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline
  - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True'
  - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s
  - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
  - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication.
  - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA
  - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
  - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-1
changelog:
  - Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
  - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
  - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
  - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
  - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
  - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
  - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
  - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
  - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
  - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
  - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
  - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-3
changelog:
  - Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
  - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
  - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
  - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
  - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-4
changelog:
  - Resolves: rhbz#2074648 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop [rhel-8.6.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-4.1
changelog:
  - Resolves: rhbz#2072958 - Use right sdap_domain in ad_domain_info_send [rhel-8.6.0.z]
  - Resolves: rhbz#2089244 - pam_sss_gss ceased to work after upgrade to 8.6 [rhel-8.6.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.0-2
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
  - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
  - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
  - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
  - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
  - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
  - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
  - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
  - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
  - Resolves: rhbz#2087745 - 2FA prompting setting ineffective
  - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.2-1
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
  - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
  - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
  - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
  - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
  - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
  - Resolves: rhbz#2098617 - Harden kerberos ticket validation
  - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-1
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-2
changelog:
  - Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
  - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
  - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-3
changelog:
  - Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
  - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
  - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4
changelog:
  - Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4.1
changelog:
  - Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4.2
changelog:
  - Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
  - Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
  - Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4.3
changelog:
  - Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-5
changelog:
  - Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release
    Rebuild against Samba rebase.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.1-1
changelog:
  - Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8
  - Resolves: rhbz#2144581 - [RFE] provide dbus method to find users by attr
  - Resolves: rhbz#2144579 - sssd timezone issues sudonotafter
  - Resolves: rhbz#2144519 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file
  - Resolves: rhbz#2127822 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict)
  - Resolves: rhbz#2111393 - authenticating against external IdP services okta (native app) with OAuth client secret failed


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-1
changelog:
  - Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8
  - Resolves: rhbz#2136701 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139760 - [sssd] RHEL 8.8 Tier 0 Localization
  - Resolves: rhbz#2139865 - Analyzer: Optimize and remove duplicate messages in verbose list
  - Resolves: rhbz#2142795 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged
  - Resolves: rhbz#2144491 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around
  - Resolves: rhbz#2150357 - Smart Card auth does not work with p11_uri (with-smartcard-required)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-2
changelog:
  - Resolves: rhbz#2149091 - Update to sssd-2.7.3-4.el8_7.1.x86_64 resulted in "Request to sssd failed. Device or resource busy"


author: Craig Guiller <craig.guiller@oracle.com> - 2.8.2-3.0.2
changelog:
  - [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'. (BZ#2196838)
  - SSSD enters failed state after heavy load in the system. (BZ#2219351)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-1
changelog:
  - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9
  - Resolves: rhbz#2101489 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed)
  - Resolves: rhbz#2143925 - kinit switches KCM away from the newly issued ticket
  - Resolves: rhbz#2151403 - AD user is not found on IPA client after upgrading to RHEL8.7
  - Resolves: rhbz#2164805 - man page entry should make clear that a nested group needs a name
  - Resolves: rhbz#2170484 - Unable to lookup AD user from child domain (or "make filtering of the domains more configurable")
  - Resolves: rhbz#2180981 - sss allows extraneous @ characters prefixed to username #


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-4
changelog:
  - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release
    Rebuild against rebased Samba libs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.1-1
changelog:
  - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9
  - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy
  - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files
  - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
  - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure
  - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000]
  - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization
  - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working
  - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides
  - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true'


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.9.1-3
changelog:
  - Resolves: rhbz#2236414 - dbus and crond getting terminated with SIGBUS in sss_client code
  - Resolves: rhbz#2237302 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.9.1-4
changelog:
  - Related: rhbz#2236414 - dbus and crond getting terminated with SIGBUS in sss_client code
    Handle all invalidations consistently
    Supply a valid pointer to `sss_mmap_cache_validate_or_reinit()`, not a pointer to a local var


author: Darren Archibald <darren.archibald@oracle.com> - 2.9.1-4.0.1.5
changelog:
  - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest (JIRA:RHEL-19212)
  - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users (JIRA:RHEL-19994)
  - SSSD GPO lacks group resolution on hosts (JIRA:RHEL-21085)
  - Make sure 8.9.z/9.3.z doesn't build 'passkey' code (JIRA:RHEL-21164)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.2-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: rhbz#2226021 - dbus and crond getting terminated with SIGBUS in sss_client code
  - Resolves: rhbz#2237253 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.3-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: RHEL-14070 - sssd-2.9.2-1.el8 breaks smart card authentication
  - Resolves: RHEL-3665 - Unexplainable error "Unable to find primary gid [2]: No such file or directory" when SSSD performs lookup for an AD user


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-1
changelog:
  - Resolves: RHEL-2630 - Rebase SSSD for RHEL 8.10
  - Resolves: RHEL-1680 - auto_private_groups does not create cache in IPA server SSSD cache
  - Resolves: RHEL-10092 - logfile rotation for sssd_kcm not working properly, sssd_kcm never receives a 'kill -HUP'
  - Resolves: RHEL-17495 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider')
  - Resolves: RHEL-18431 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest
  - Resolves: RHEL-5033 - Incorrect IdM product name in man sssd.conf
  - Resolves: RHEL-15368 - SSSD GPO lacks group resolution on hosts [rhel-8]
  - Resolves: RHEL-10721 - very bad performance when requesting service tickets
  - Resolves: RHEL-19011 - Invalid handling groups from child domain
  - Resolves: RHEL-19949 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [rhel-8]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-2
changelog:
  - Resolves: RHEL-25064 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. [rhel-8]
  - Resolves: RHEL-25066 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities [rhel-8]
  - Resolves: RHEL-25065 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd [rhel-8]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-3
changelog:
  - Resolves: RHEL-27205 - Race condition during authorization leads to GPO policies functioning inconsistently


author: Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-14_2
changelog:
  - [RHEL] Re-enable AEAD tests and ignore test result
  - [RHEL] Drop the ppc64 ignore-failures workaround


author: Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-16_1
changelog:
  - [RHEL] Apply 'Add missing dependencies to the tests package'
  - [RHEL] Apply 'Update patch from upstream'


author: Sahana Prasad <sahana@redhat.com> - 1.1.5-3
changelog:
  - Enables building on old kernels [sync fix in Fedora from omosnance].
  - This is required for covscans as they run on RHEL7 machines.


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5366
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2406
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15290
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15300


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15300
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2406


author: Phil Sutter <psutter@redhat.com> - 0.3-2
changelog:
  - Add missing build requirement: gcc.
  - Add source code patches to facilitate following changes.
  - Patches managed in git, so add git as another build requirement.
  - Respect build system compiler flags.
  - Use %make_build instead of plain make in %build.
  - Add %check target which performs unattended runtime test.
  - Use -D install flag instead of manual mkdir.


author: Phil Sutter <psutter@redhat.com> - 0.3-3
changelog:
  - Use %autosetup flag '-p1' instead of '-S git' to get rid of git dependency.
  - Use %license macro in %files section.
  - Added comment about included patches' upstream status.


author: Ana Cabral <acabral@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved
    from the main package to the utils sub package causing a file
    conflict on multilib systems between the old 32 bit main
    package and the new 64 bit utils sub package.


author: Martin Gansser <martinkg@fedoraproject.org> - 1:0.9.57-1
changelog:
  - Update to 0.9.57
  - Dropped dependency on libgcrypt
  - Dropped dependency on openssl
  - Update tarball link to "https:"
  - Add examples from doc/examples


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-1
changelog:
  - Update to 1.6.2
  - Make buildorder a signed integer to match modulemd specification
  - Obsolete unsupported pythonX-modulemd packages


author: Stephen Gallagher <sgallagh@redhat.com> - 2.0.0-0.beta2
changelog:
  - Update to 2.0.0beta2
  - Better validation of stored content during read and write operations
  - ModuleIndex now returns FALSE if any subdocument fails
  - Fix tests on 32-bit platforms
  - Make unknown keys in YAML maps non-fatal for libmodulemd1
  - Make unknown keys in YAML maps optionally fatal for libmodulemd 2.x
  - Fix RPM version requirements for libmodulemd1


author: Stephen Gallagher <sgallagh@redhat.com> - 2.0.0-1
changelog:
  - Update to 2.0.0 final
  - Assorted fixes for validation
  - Add modulemd-validator tool based on v2 code
  - Fix a crash when merging defaults
  - Add missing BuildRequires


author: Stephen Gallagher <sgallagh@redhat.com> - 2.5.0-2
changelog:
  - Fix memory corruption error using Module.search_rpms() from python
  - Speed up valgrind tests
  - Resolves: rhbz#1714766


author: Jiri Pirko <jiri@mellanox.com> - 1.6-1
changelog:
  - Update to 1.6
  - libndb: reject redirect and router advertisements from non-link-local
  - libndp: validate the IPv6 hop limit
  - libndp: revert API change for ndp_msg_send() and add ndp_msg_send_with_flags()
  - libndp: fix type of field "na" in "struct ndp_msgna"
  - ndptool: add option to send messages types
  - libndp: add option flags to send messages
  - Add SubmittingPatches howto


