# changelog

author: Radek Vykydal <rvykydal@redhat.com> - 33.16.4.9-1
changelog:
  - Change warning messages of missing prefix for RH products (jkonecny)
    Resolves: rhbz#1897657
  - Do not use cache for container build (jkonecny)
    Related: rhbz#1885635
  - Fix missing inst. prefixes for bootloader options in documentation (jkonecny)
    Related: rhbz#1897657
  - Fix show missing inst. prefix warning appropriately (jkonencny)
    Related: rhbz#1897657
  - Remove docs where we tell users that inst. prefix is not required (jkonecny)
    Related: rhbz#1897657
  - Print warning for boot options without inst. prefix (jkonecny)
    Related: rhbz#1897657
  - Add missing dracut commands as missing inst. prefix warning (jkonecny)
    Related: rhbz#1897657
  - Enable warning when inst. prefix is not used (jkonecny)
    Related: rhbz#1897657


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.4.10-1
changelog:
  - Mark the rhsm and syspurpose kickstart commands as useless (vponcova)
    Resolves: rhbz#1921787
  - Fix getting kernel version list for liveimg (rvykydal)
    Resolves: rhbz#1919463


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.4.11-1
changelog:
  - Take dnf substitutions from installer environment configuration (rvykydal)
    Resolves: rhbz#1920735
  - Fix exclude arguments of tar payload extracting. (rvykydal)
    Resolves: rhbz#1924118


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.4.14-1
changelog:
  - Fix crash in NTP servers GUI dialog on late network configuration (rvykydal)
    Resolves: rhbz#1938168


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.4.15-1
changelog:
  - network: clone connections from intramfs to persistent config (rvykydal)
    Resolves: rhbz#1910438
  - network: match also connections named by MAC created by NM in initramfs
    (rvykydal)
    Related: rhbz#1910438
  - network: do not reset ipv6.addr-gen-mode in tui network configuration
    (rvykydal)
    Related: rhbz#1873021
  - network: set addr-gen-mode of Anaconda default connections to eui64
    (rvykydal)
    Related: rhbz#1873021
  - network: default to addr-gen-mode eui64 (rvykydal)
    Resolves: rhbz#1873021


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.5.1-1
changelog:
  - subscription: allow dates in ISO 8601 format (ptoscano)
    Resolves: rhbz#1947445
  - Add RHEL-specific advice to X timeout message (vslavik)
    Related: rhbz#1918702
  - Fix AskVNCSpoke call (vslavik)
    Related: rhbz#1918702
  - Improve X startup error messages (vslavik)
    Related: rhbz#1918702
  - Terminate X server after timeout and restore crash test handler (vslavik)
    Related: rhbz#1918702
  - Reorganize control flow in startX (vslavik)
    Related: rhbz#1918702
  - Handle SIGUSR1 correctly after Xorg timeout (vslavik)
    Resolves: rhbz#1918702
  - Refactor minor details in startX (vslavik)
    Related: rhbz#1918702
  - Add base repo name for CentOS Stream after repository renaming (jkonecny)
    Resolves: rhbz#1946347
  - Avoid a race condition during Connect to Red Hat spoke initialization
    (mkolman)
    Resolves: rhbz#1950053


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.5.2-1
changelog:
  - Use modinfo to check ko before modprobe (t.feng94)
    Resolves: rhbz#1577544
  - network: do not crash on team without IP config (rvykydal)
    Resolves: rhbz#1929008
  - Add the "Encrypt my data" checkbox to the custom partitioning spoke
    (vponcova)
    Resolves: rhbz#1903786
  - Allow encryption of thin logical volumes (vponcova)
    Resolves: rhbz#1877777
  - Don't automatically execute the default partitioning (vponcova)
    Resolves: rhbz#1954408
  - Don't run the execute method in the kickstart installation in TUI by default
    (vponcova)
    Related: rhbz#1954408
  - Don't run the execute method in the kickstart installation in GUI by default
    (vponcova)
    Related: rhbz#1954408
  - Enable closest mirror in CentOS Stream config (carl)
    Resolves: rhbz#1953698
  - Add CentOS Stream config (riehecky)
    Resolves: rhbz#1953698


author: Neal Gompa <ngompa@centosproject.org> - 33.16.5.2-2
changelog:
  - Add changes for CentOS Hyperscale spin
    + Re-enable Btrfs support
    + Add CentOS Stream Hyperscale config
    + Backport improvements for managing default repositories
    + Backport support for zstd compression for Btrfs


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.5.3-1
changelog:
  - Check source type directly, not via DBus (mkolman)
    Resolves: rhbz#1941578
  - Remove autostep functionality (vslavik)
    Resolves: rhbz#1976913
  - Make it possible to skip install time Insights errors (mkolman)
    Resolves: rhbz#1931069
  - Fix CDN button visibility (mkolman)
    Resolves: rhbz#1903178
  - network: do not bind virtual devices to mac (rvykydal)
    Resolves: rhbz#1963834
  - Add a log message for successful installation (vslavik)
    Resolves: rhbz#1949487


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.5.4-1
changelog:
  - Disable anaconda-core's requirement on subscription-manager on CentOS (carl)
    Resolves: rhbz#1984958
  - Show suggestions for an error caused by inconsistent sector sizes (vponcova)
    Resolves: rhbz#1935722
  - Use a custom stylesheet to define CentOS-specific stylesheet data (carl)
    Related: rhbz#1974149
  - Use RHEL help content for RHV/Ovirt (mkolman)
    Resolves: rhbz#1915910
  - Move post installation scripts to the end of queue (lveyde)
    Resolves: rhbz#1970879
  - Do not generate dracut arguments multiple times for some storage devices
    (rvykydal)
    Related: rhbz#1937208
  - Make failure in generating of dracut arguments for iSCSI device non-fatal.
    (rvykydal)
    Resolves: rhbz#1937208


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.5.5-1
changelog:
  - Remove misleading warning about inst.ks.device replacing ksdevice (rvykydal)
    Resolves: rhbz#2001913


author: Neal Gompa <ngompa@centosproject.org> - 33.16.5.6-2
changelog:
  - Add changes for CentOS Hyperscale spin
    + Re-enable Btrfs support
    + Add CentOS Stream Hyperscale config
    + Backport improvements for managing default repositories
    + Backport support for zstd compression for Btrfs
    + Debrand the liveinst welcome widget
    + Add support for Hyperscale variant in liveinst


author: Phil Sutter <psutter@redhat.com> - 0.0.4-16
changelog:
  - Integrate with alternatives
  - Split systemd service into sub-package
  - Rename arptables RPM into arptables-legacy
  - Add recent upstream changes


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-38.el9]
changelog:
  - x86/fpu/signal: Initialize sw_bytes in save_xstate_epilog() (David Arcari) [2004190]
  - iommu/vt-d: Remove unused PASID_DISABLED (David Arcari) [2004190]
  - Add CONFIG_STRICT_SIGALTSTACK_SIZE (David Arcari) [2004190]
  - selftests/x86/amx: Add context switch test (David Arcari) [2004190]
  - selftests/x86/amx: Add test cases for AMX state management (David Arcari) [2004190]
  - x86/signal: Use fpu::__state_user_size for sigalt stack validation (David Arcari) [2004190]
  - x86/signal: Implement sigaltstack size validation (David Arcari) [2004190]
  - signal: Add an optional check for altstack size (David Arcari) [2004190]
  - tools arch x86: Sync the msr-index.h copy with the kernel sources (David Arcari) [2004190]
  - tools headers cpufeatures: Sync with the kernel sources (David Arcari) [2004190]
  - tools headers UAPI: Sync arch prctl headers with the kernel sources (David Arcari) [2004190]
  - x86/fpu: Optimize out sigframe xfeatures when in init state (David Arcari) [2004190]
  - Documentation/x86: Add documentation for using dynamic XSTATE features (David Arcari) [2004190]
  - x86/fpu: Include vmalloc.h for vzalloc() (David Arcari) [2004190]
  - x86/fpu/amx: Enable the AMX feature in 64-bit mode (David Arcari) [2004190]
  - x86/msr-index: Add MSRs for XFD (David Arcari) [2004190]
  - x86/cpufeatures: Add eXtended Feature Disabling (XFD) feature bit (David Arcari) [2004190]
  - x86/fpu: Add XFD handling for dynamic states (David Arcari) [2004190]
  - x86/fpu: Calculate the default sizes independently (David Arcari) [2004190]
  - x86/fpu/amx: Define AMX state components and have it used for boot-time checks (David Arcari) [2004190]
  - x86/fpu/xstate: Prepare XSAVE feature table for gaps in state component numbers (David Arcari) [2004190]
  - x86/fpu/xstate: Add fpstate_realloc()/free() (David Arcari) [2004190]
  - x86/fpu/xstate: Add XFD #NM handler (David Arcari) [2004190]
  - x86/fpu: Update XFD state where required (David Arcari) [2004190]
  - x86/fpu: Add sanity checks for XFD (David Arcari) [2004190]
  - x86/fpu: Add XFD state to fpstate (David Arcari) [2004190]
  - x86/fpu: Reset permission and fpstate on exec() (David Arcari) [2004190]
  - x86/fpu: Prepare fpu_clone() for dynamically enabled features (David Arcari) [2004190]
  - x86/process: Clone FPU in copy_thread() (David Arcari) [2004190]
  - x86/fpu/signal: Prepare for variable sigframe length (David Arcari) [2004190]
  - x86/fpu: Add basic helpers for dynamically enabled features (David Arcari) [2004190]
  - x86/arch_prctl: Add controls for dynamic XSTATE components (David Arcari) [2004190]
  - x86/fpu: Add fpu_state_config::legacy_features (David Arcari) [2004190]
  - x86/fpu: Add members to struct fpu to cache permission information (David Arcari) [2004190]
  - x86/fpu/xstate: Provide xstate_calculate_size() (David Arcari) [2004190]
  - x86/fpu: Remove old KVM FPU interface (David Arcari) [2004190]
  - x86/kvm: Convert FPU handling to a single swap buffer (David Arcari) [2004190]
  - x86/fpu: Provide infrastructure for KVM FPU cleanup (David Arcari) [2004190]
  - x86/fpu: Prepare for sanitizing KVM FPU code (David Arcari) [2004190]
  - x86/fpu/xstate: Move remaining xfeature helpers to core (David Arcari) [2004190]
  - x86/fpu: Rework restore_regs_from_fpstate() (David Arcari) [2004190]
  - x86/fpu: Mop up xfeatures_mask_uabi() (David Arcari) [2004190]
  - x86/fpu: Move xstate feature masks to fpu_*_cfg (David Arcari) [2004190]
  - x86/fpu: Move xstate size to fpu_*_cfg (David Arcari) [2004190]
  - x86/fpu/xstate: Cleanup size calculations (David Arcari) [2004190]
  - x86/fpu: Cleanup fpu__init_system_xstate_size_legacy() (David Arcari) [2004190]
  - x86/fpu: Provide struct fpu_config (David Arcari) [2004190]
  - x86/fpu/signal: Use fpstate for size and features (David Arcari) [2004190]
  - x86/fpu/xstate: Use fpstate for copy_uabi_to_xstate() (David Arcari) [2004190]
  - x86/fpu: Use fpstate in __copy_xstate_to_uabi_buf() (David Arcari) [2004190]
  - x86/fpu: Use fpstate in fpu_copy_kvm_uabi_to_fpstate() (David Arcari) [2004190]
  - x86/fpu/xstate: Use fpstate for xsave_to_user_sigframe() (David Arcari) [2004190]
  - x86/fpu/xstate: Use fpstate for os_xsave() (David Arcari) [2004190]
  - x86/fpu: Use fpstate::size (David Arcari) [2004190]
  - x86/fpu: Add size and mask information to fpstate (David Arcari) [2004190]
  - x86/process: Move arch_thread_struct_whitelist() out of line (David Arcari) [2004190]
  - x86/fpu: Remove fpu::state (David Arcari) [2004190]
  - x86/KVM: Convert to fpstate (David Arcari) [2004190]
  - x86/math-emu: Convert to fpstate (David Arcari) [2004190]
  - x86/fpu/core: Convert to fpstate (David Arcari) [2004190]
  - x86/fpu/signal: Convert to fpstate (David Arcari) [2004190]
  - x86/fpu/regset: Convert to fpstate (David Arcari) [2004190]
  - x86/fpu: Convert tracing to fpstate (David Arcari) [2004190]
  - x86/fpu: Replace KVMs xstate component clearing (David Arcari) [2004190]
  - x86/fpu: Convert restore_fpregs_from_fpstate() to struct fpstate (David Arcari) [2004190]
  - x86/fpu: Convert fpstate_init() to struct fpstate (David Arcari) [2004190]
  - x86/fpu: Provide struct fpstate (David Arcari) [2004190]
  - x86/fpu: Replace KVMs home brewed FPU copy to user (David Arcari) [2004190]
  - x86/fpu: Provide a proper function for ex_handler_fprestore() (David Arcari) [2004190]
  - x86/fpu: Replace the includes of fpu/internal.h (David Arcari) [2004190]
  - x86/fpu: Mop up the internal.h leftovers (David Arcari) [2004190]
  - x86/fpu: Remove internal.h dependency from fpu/signal.h (David Arcari) [2004190]
  - x86/fpu: Move fpstate functions to api.h (David Arcari) [2004190]
  - x86/fpu: Move mxcsr related code to core (David Arcari) [2004190]
  - x86/sev: Include fpu/xcr.h (David Arcari) [2004190]
  - x86/fpu: Move fpregs_restore_userregs() to core (David Arcari) [2004190]
  - x86/fpu: Make WARN_ON_FPU() private (David Arcari) [2004190]
  - x86/fpu: Move legacy ASM wrappers to core (David Arcari) [2004190]
  - x86/fpu: Move os_xsave() and os_xrstor() to core (David Arcari) [2004190]
  - x86/fpu: Make os_xrstor_booting() private (David Arcari) [2004190]
  - x86/fpu: Clean up CPU feature tests (David Arcari) [2004190]
  - x86/fpu: Move context switch and exit to user inlines into sched.h (David Arcari) [2004190]
  - x86/fpu: Mark fpu__init_prepare_fx_sw_frame() as __init (David Arcari) [2004190]
  - x86/fpu: Rework copy_xstate_to_uabi_buf() (David Arcari) [2004190]
  - x86/fpu: Replace KVMs home brewed FPU copy from user (David Arcari) [2004190]
  - x86/fpu: Move KVMs FPU swapping to FPU core (David Arcari) [2004190]
  - x86/fpu/xstate: Mark all init only functions __init (David Arcari) [2004190]
  - x86/fpu/xstate: Provide and use for_each_xfeature() (David Arcari) [2004190]
  - x86/fpu: Cleanup xstate xcomp_bv initialization (David Arcari) [2004190]
  - x86/fpu: Do not inherit FPU context for kernel and IO worker threads (David Arcari) [2004190]
  - x86/fpu: Remove pointless memset in fpu_clone() (David Arcari) [2004190]
  - x86/fpu: Cleanup the on_boot_cpu clutter (David Arcari) [2004190]
  - x86/fpu: Restrict xsaves()/xrstors() to independent states (David Arcari) [2004190]
  - x86/fpu: Update stale comments (David Arcari) [2004190]
  - x86/fpu: Remove pointless argument from switch_fpu_finish() (David Arcari) [2004190]
  - iommu/vt-d: Clean up unused PASID updating functions (David Arcari) [2004190]
  - x86/fpu: Mask out the invalid MXCSR bits properly (David Arcari) [2004190]
  - x86/fpu: Restore the masking out of reserved MXCSR bits (David Arcari) [2004190]
  - x86/fpu/signal: Fix missed conversion to correct boolean retval in save_xstate_epilog() (David Arcari) [2004190]
  - x86/fpu/signal: Change return code of restore_fpregs_from_user() to boolean (David Arcari) [2004190]
  - x86/fpu/signal: Change return code of check_xstate_in_sigframe() to boolean (David Arcari) [2004190]
  - x86/fpu/signal: Change return type of __fpu_restore_sig() to boolean (David Arcari) [2004190]
  - x86/fpu/signal: Change return type of fpu__restore_sig() to boolean (David Arcari) [2004190]
  - x86/signal: Change return type of restore_sigcontext() to boolean (David Arcari) [2004190]
  - x86/fpu/signal: Change return type of copy_fpregs_to_sigframe() helpers to boolean (David Arcari) [2004190]
  - x86/fpu/signal: Change return type of copy_fpstate_to_sigframe() to boolean (David Arcari) [2004190]
  - x86/fpu/signal: Move xstate clearing out of copy_fpregs_to_sigframe() (David Arcari) [2004190]
  - x86/fpu/signal: Move header zeroing out of xsave_to_user_sigframe() (David Arcari) [2004190]
  - x86/fpu/signal: Clarify exception handling in restore_fpregs_from_user() (David Arcari) [2004190]
  - x86/fpu: Use EX_TYPE_FAULT_MCE_SAFE for exception fixups (David Arcari) [2004190]
  - x86/extable: Provide EX_TYPE_DEFAULT_MCE_SAFE and EX_TYPE_FAULT_MCE_SAFE (David Arcari) [2004190]
  - x86/extable: Rework the exception table mechanics (David Arcari) [2004190]
  - x86/mce: Deduplicate exception handling (David Arcari) [2004190]
  - x86/extable: Get rid of redundant macros (David Arcari) [2004190]
  - x86/extable: Tidy up redundant handler functions (David Arcari) [2004190]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-39.el9]
changelog:
  - cpuidle: pseries: Do not cap the CEDE0 latency in fixup_cede0_latency() (Gustavo Walbon) [2029870]
  - cpuidle: pseries: Fixup CEDE0 latency only for POWER10 onwards (Gustavo Walbon) [2029870]
  - powerpc/mce: Fix access error in mce handler (Gustavo Walbon) [2027829]
  - powerpc/pseries/mobility: ignore ibm, platform-facilities updates (Gustavo Walbon) [2023438]
  - KVM: SVM: Do not terminate SEV-ES guests on GHCB validation failure (Vitaly Kuznetsov) [1961151]
  - KVM: SEV: Fall back to vmalloc for SEV-ES scratch area if necessary (Vitaly Kuznetsov) [1961151]
  - KVM: SEV: Return appropriate error codes if SEV-ES scratch setup fails (Vitaly Kuznetsov) [1961151]
  - KVM: SEV: Refactor out sev_es_state struct (Vitaly Kuznetsov) [1961151]
  - redhat/configs: enable DWARF5 feature if toolchain supports it (Lianbo Jiang) [2009205]
  - init: make unknown command line param message clearer (Andrew Halaney) [2004361]
  - Bluetooth: btusb: Add one more Bluetooth part for WCN6855 (Gopal Tiwari) [2020943]
  - Bluetooth: btusb: Add the new support IDs for WCN6855 (Gopal Tiwari) [2020943]
  - Bluetooth: btusb: re-definition for board_id in struct qca_version (Gopal Tiwari) [2020943]
  - Bluetooth: btusb: Add support using different nvm for variant WCN6855 controller (Gopal Tiwari) [2020943]
  - cgroup: Make rebind_subsystems() disable v2 controllers all at once (Waiman Long) [1986734]
  - bnxt_en: Event handler for PPS events (Ken Cox) [1990151]
  - bnxt_en: 1PPS functions to configure TSIO pins (Ken Cox) [1990151]
  - bnxt_en: 1PPS support for 5750X family chips (Ken Cox) [1990151]
  - bnxt_en: Do not read the PTP PHC during chip reset (Ken Cox) [1990151]
  - bnxt_en: Move bnxt_ptp_init() from bnxt_open() back to bnxt_init_one() (Ken Cox) [1990151]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-40.el9]
changelog:
  - cpu/hotplug: Remove deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
  - livepatch: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
  - coresight: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
  - hwmon: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
  - tracing: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
  - padata: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
  - crypto: virtio - Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
  - platform/x86: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
  - powerpc: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
  - x86/mce/inject: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
  - x86/microcode: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
  - x86/mtrr: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
  - x86/mmiotrace: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
  - workqueue: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
  - net/iucv: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
  - s390/sclp: replace deprecated CPU-hotplug functions (Prarit Bhargava) [2023079]
  - s390: replace deprecated CPU-hotplug functions (Prarit Bhargava) [2023079]
  - net: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
  - virtio_net: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
  - ACPI: processor: Replace deprecated CPU-hotplug functions (Prarit Bhargava) [2023079]
  - PM: sleep: s2idle: Replace deprecated CPU-hotplug functions (Prarit Bhargava) [2023079]
  - cpufreq: Replace deprecated CPU-hotplug functions (Prarit Bhargava) [2023079]
  - powercap: intel_rapl: Replace deprecated CPU-hotplug functions (Prarit Bhargava) [2023079]
  - sgi-xpc: Replace deprecated CPU-hotplug functions. (Prarit Bhargava) [2023079]
  - Input: i8042 - Add quirk for Fujitsu Lifebook T725 (Neal Gompa) [2019937]
  - sctp: remove unreachable code from sctp_sf_violation_chunk() (Xin Long) [2024909]
  - sctp: return true only for pathmtu update in sctp_transport_pl_toobig (Xin Long) [2024909]
  - sctp: subtract sctphdr len in sctp_transport_pl_hlen (Xin Long) [2024909]
  - sctp: reset probe_timer in sctp_transport_pl_update (Xin Long) [2024909]
  - sctp: allow IP fragmentation when PLPMTUD enters Error state (Xin Long) [2024909]
  - sctp: fix transport encap_port update in sctp_vtag_verify (Xin Long) [2024909]
  - sctp: account stream padding length for reconf chunk (Xin Long) [2024909]
  - sctp: break out if skb_header_pointer returns NULL in sctp_rcv_ootb (Xin Long) [2024909]
  - sctp: add vtag check in sctp_sf_ootb (Xin Long) [2003494] {CVE-2021-3772}
  - sctp: add vtag check in sctp_sf_do_8_5_1_E_sa (Xin Long) [2003494] {CVE-2021-3772}
  - sctp: add vtag check in sctp_sf_violation (Xin Long) [2003494] {CVE-2021-3772}
  - sctp: fix the processing for COOKIE_ECHO chunk (Xin Long) [2003494] {CVE-2021-3772}
  - sctp: fix the processing for INIT_ACK chunk (Xin Long) [2003494] {CVE-2021-3772}
  - sctp: fix the processing for INIT chunk (Xin Long) [2003494] {CVE-2021-3772}
  - sctp: use init_tag from inithdr for ABORT chunk (Xin Long) [2003494] {CVE-2021-3772}
  - drm/nouveau: clean up all clients on device removal (Karol Herbst) [1911185] {CVE-2020-27820}
  - drm/nouveau: Add a dedicated mutex for the clients list (Karol Herbst) [1911185] {CVE-2020-27820}
  - drm/nouveau: use drm_dev_unplug() during device removal (Karol Herbst) [1911185] {CVE-2020-27820}
  - redhat/configs: NFS: disable UDP, insecure enctypes (Benjamin Coddington) [1952863]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-41.el9]
changelog:
  - af_unix: Return errno instead of NULL in unix_create1(). (Balazs Nemeth) [2030037]
  - s390/ftrace: remove preempt_disable()/preempt_enable() pair (Wander Lairson Costa) [1938117]
  - ftrace: do CPU checking after preemption disabled (Wander Lairson Costa) [1938117]
  - ftrace: disable preemption when recursion locked (Wander Lairson Costa) [1938117]
  - redhat: build and include memfd to kernel-selftests-internal (Aristeu Rozanski) [2027506]
  - netfilter: flowtable: fix IPv6 tunnel addr match (Florian Westphal) [2028203]
  - netfilter: ipvs: Fix reuse connection if RS weight is 0 (Florian Westphal) [2028203]
  - netfilter: ctnetlink: do not erase error code with EINVAL (Florian Westphal) [2028203]
  - netfilter: ctnetlink: fix filtering with CTA_TUPLE_REPLY (Florian Westphal) [2028203]
  - netfilter: nfnetlink_queue: fix OOB when mac header was cleared (Florian Westphal) [2028203]
  - netfilter: core: Fix clang warnings about unused static inlines (Florian Westphal) [2028203]
  - netfilter: nft_dynset: relax superfluous check on set updates (Florian Westphal) [2028203]
  - netfilter: nf_tables: skip netdev events generated on netns removal (Florian Westphal) [2028203]
  - netfilter: Kconfig: use 'default y' instead of 'm' for bool config option (Florian Westphal) [2028203]
  - netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value (Florian Westphal) [2028203]
  - netfilter: nf_tables: honor NLM_F_CREATE and NLM_F_EXCL in event notification (Florian Westphal) [2028203]
  - netfilter: nf_tables: reverse order in rule replacement expansion (Florian Westphal) [2028203]
  - netfilter: nf_tables: add position handle in event notification (Florian Westphal) [2028203]
  - netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1 (Florian Westphal) [2028203]
  - netfilter: log: work around missing softdep backend module (Florian Westphal) [2028203]
  - netfilter: nf_tables: unlink table before deleting it (Florian Westphal) [2028203]
  - ipvs: check that ip_vs_conn_tab_bits is between 8 and 20 (Florian Westphal) [2028203]
  - netfilter: nft_ct: protect nft_ct_pcpu_template_refcnt with mutex (Florian Westphal) [2028203]
  - netfilter: ipvs: make global sysctl readonly in non-init netns (Antoine Tenart) [2008417]
  - net/sched: sch_ets: don't remove idle classes from the round-robin list (Davide Caratti) [2025552]
  - net/sched: store the last executed chain also for clsact egress (Davide Caratti) [2025552]
  - net: sched: act_mirred: drop dst for the direction from egress to ingress (Davide Caratti) [2025552]
  - net/sched: sch_ets: don't peek at classes beyond 'nbands' (Davide Caratti) [2025552]
  - net/sched: sch_ets: properly init all active DRR list handles (Davide Caratti) [2025552]
  - net: Fix offloading indirect devices dependency on qdisc order creation (Davide Caratti) [2025552]
  - net/core: Remove unused field from struct flow_indr_dev (Davide Caratti) [2025552]
  - net/sched: sch_taprio: fix undefined behavior in ktime_mono_to_any (Davide Caratti) [2025552]
  - net/sched: act_ct: Fix byte count on fragmented packets (Davide Caratti) [2025552]
  - mqprio: Correct stats in mqprio_dump_class_stats(). (Davide Caratti) [2025552]
  - net/sched: sch_taprio: properly cancel timer from taprio_destroy() (Davide Caratti) [2025552]
  - net_sched: fix NULL deref in fifo_set_limit() (Davide Caratti) [2025552]
  - net: sched: flower: protect fl_walk() with rcu (Davide Caratti) [2025552]
  - fq_codel: reject silly quantum parameters (Davide Caratti) [2025552]
  - net: sched: Fix qdisc_rate_table refcount leak when get tcf_block failed (Davide Caratti) [2025552]
  - sch_htb: Fix inconsistency when leaf qdisc creation fails (Davide Caratti) [2025552]
  - redhat/configs: Add two new CONFIGs (Prarit Bhargava) [2022993]
  - redhat/configs: Remove dead CONFIG files (Prarit Bhargava) [2022993]
  - redhat/configs/evaluate_configs: Add find dead configs option (Prarit Bhargava) [2022993]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-42.el9]
changelog:
  - scsi: smartpqi: Update version to 2.1.12-055 (Don Brace) [1869853]
  - scsi: smartpqi: Add 3252-8i PCI id (Don Brace) [1869853]
  - scsi: smartpqi: Fix duplicate device nodes for tape changers (Don Brace) [1869853]
  - scsi: smartpqi: Fix boot failure during LUN rebuild (Don Brace) [1869853]
  - scsi: smartpqi: Add extended report physical LUNs (Don Brace) [1869853]
  - scsi: smartpqi: Avoid failing I/Os for offline devices (Don Brace) [1869853]
  - scsi: smartpqi: Add TEST UNIT READY check for SANITIZE operation (Don Brace) [1869853]
  - scsi: smartpqi: Update LUN reset handler (Don Brace) [1869853]
  - scsi: smartpqi: Capture controller reason codes (Don Brace) [1869853]
  - scsi: smartpqi: Add controller handshake during kdump (Don Brace) [1869853]
  - scsi: smartpqi: Update device removal management (Don Brace) [1869853]
  - scsi: smartpqi: Replace one-element array with flexible-array member (Don Brace) [1869853]
  - scsi: smartpqi: Fix an error code in pqi_get_raid_map() (Don Brace) [1869853]
  - scsi: smartpqi: Update version to 2.1.10-020 (Don Brace) [1869853]
  - scsi: smartpqi: Fix ISR accessing uninitialized data (Don Brace) [1869853]
  - scsi: smartpqi: Add PCI IDs for new ZTE controllers (Don Brace) [1869853]
  - scsi: smartpqi: Add PCI ID for new ntcom controller (Don Brace) [1869853]
  - scsi: smartpqi: Add SCSI cmd info for resets (Don Brace) [1869853]
  - scsi: smartpqi: Change Kconfig menu entry to Microchip (Don Brace) [1869853]
  - scsi: smartpqi: Change driver module macros to Microchip (Don Brace) [1869853]
  - scsi: smartpqi: Update copyright notices (Don Brace) [1869853]
  - scsi: smartpqi: Add PCI IDs for H3C P4408 controllers (Don Brace) [1869853]
  - powerpc/module_64: Fix livepatching for RO modules (Joe Lawrence) [2019205]
  - net-sysfs: try not to restart the syscall if it will fail eventually (Antoine Tenart) [2030634]
  - CI: Enable realtime checks for baselines (Veronika Kabatova)
  - CI: Cleanup residue from ARK (Veronika Kabatova)
  - redhat: ignore ksamples and kselftests on the badfuncs rpminspect test (Herton R. Krzesinski)
  - redhat: disable upstream check for rpminspect (Herton R. Krzesinski)
  - redhat/configs: Enable CONFIG_CRYPTO_BLAKE2B (Neal Gompa) [2031547]
  - selftests: netfilter: switch zone stress to socat (Florian Westphal) [2030759]
  - netfilter: conntrack: set on IPS_ASSURED if flows enters internal stream state (Florian Westphal) [2030759]
  - netfilter: conntrack: serialize hash resizes and cleanups (Florian Westphal) [2030759]
  - selftests: netfilter: add zone stress test with colliding tuples (Florian Westphal) [2030759]
  - selftests: netfilter: add selftest for directional zone support (Florian Westphal) [2030759]
  - netfilter: conntrack: include zone id in tuple hash again (Florian Westphal) [2030759]
  - netfilter: conntrack: make max chain length random (Florian Westphal) [2030759]
  - netfilter: refuse insertion if chain has grown too large (Florian Westphal) [2030759]
  - netfilter: conntrack: switch to siphash (Florian Westphal) [2030759]
  - netfilter: conntrack: sanitize table size default settings (Florian Westphal) [2030759]
  - redhat: configs: increase CONFIG_DEBUG_KMEMLEAK_MEM_POOL_SIZE (Rafael Aquini) [2008118]
  - iommu/dma: Fix incorrect error return on iommu deferred attach (Jerry Snitselaar) [2030394]
  - RDMA/siw: Mark Software iWARP Driver as tech-preview (Kamal Heib) [2023416]
  - genirq: Fix kernel doc indentation (Prarit Bhargava) [2023084]
  - genirq: Change force_irqthreads to a static key (Prarit Bhargava) [2023084]
  - genirq: Clarify documentation for request_threaded_irq() (Prarit Bhargava) [2023084]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-43.el9]
changelog:
  - mm: COW: restore full accuracy in page reuse (Andrea Arcangeli) [1958742]
  - mm: thp: replace the page lock with the seqlock for the THP mapcount (Andrea Arcangeli) [1958742]
  - mm: COW: skip the page lock in the COW copy path (Andrea Arcangeli) [1958742]
  - mm: gup: gup_must_unshare() use can_read_pin_swap_page() (Andrea Arcangeli) [1958742]
  - mm: hugetlbfs: gup: gup_must_unshare(): enable hugetlbfs (Andrea Arcangeli) [1958742]
  - mm: hugetlbfs: FOLL_FAULT_UNSHARE (Andrea Arcangeli) [1958742]
  - mm: hugetlbfs: COR: copy-on-read fault (Andrea Arcangeli) [1958742]
  - mm: gup: FOLL_UNSHARE RHEL (Andrea Arcangeli) [1958742]
  - mm: gup: FOLL_NOUNSHARE: optimize follow_page (Andrea Arcangeli) [1958742]
  - mm: gup: FOLL_UNSHARE (Andrea Arcangeli) [1958742]
  - mm: gup: gup_must_unshare() (Andrea Arcangeli) [1958742]
  - mm: gup: COR: copy-on-read fault (Andrea Arcangeli) [1958742]
  - mm: thp: introduce page_trans_huge_anon_shared (Andrea Arcangeli) [1958742]
  - mm: thp: stabilize the THP mapcount in page_remove_anon_compound_rmap (Andrea Arcangeli) [1958742]
  - mm: thp: make the THP mapcount atomic with a seqlock (Andrea Arcangeli) [1958742]
  - mm: thp: consolidate mapcount logic on THP split (David Hildenbrand) [1958742]
  - powerpc/xive: Change IRQ domain to a tree domain (Daniel Henrique Barboza) [2008723]
  - tcp: fix page frag corruption on page fault (Paolo Abeni) [2028276]
  - sock: fix /proc/net/sockstat underflow in sk_clone_lock() (Paolo Abeni) [2028276]
  - net: add and use skb_unclone_keeptruesize() helper (Paolo Abeni) [2028276]
  - net: stream: don't purge sk_error_queue in sk_stream_kill_queues() (Paolo Abeni) [2028276]
  - net, neigh: Fix NTF_EXT_LEARNED in combination with NTF_USE (Paolo Abeni) [2028276]
  - net-sysfs: initialize uid and gid before calling net_ns_get_ownership (Paolo Abeni) [2028276]
  - net: Prevent infinite while loop in skb_tx_hash() (Paolo Abeni) [2028276]
  - napi: fix race inside napi_enable (Paolo Abeni) [2028276]
  - skb_expand_head() adjust skb->truesize incorrectly (Paolo Abeni) [2028276]
  - bpf: use skb_expand_head in bpf_out_neigh_v4/6 (Paolo Abeni) [2028276]
  - ax25: use skb_expand_head (Paolo Abeni) [2028276]
  - vrf: fix NULL dereference in vrf_finish_output() (Paolo Abeni) [2028276]
  - vrf: use skb_expand_head in vrf_finish_output (Paolo Abeni) [2028276]
  - ipv4: use skb_expand_head in ip_finish_output2 (Paolo Abeni) [2028276]
  - ipv6: use skb_expand_head in ip6_xmit (Paolo Abeni) [2028276]
  - ipv6: use skb_expand_head in ip6_finish_output2 (Paolo Abeni) [2028276]
  - skbuff: introduce skb_expand_head() (Paolo Abeni) [2028276]
  - net/af_unix: fix a data-race in unix_dgram_poll (Paolo Abeni) [2028276]
  - net: don't unconditionally copy_from_user a struct ifreq for socket ioctls (Paolo Abeni) [2028276]
  - devlink: Clear whole devlink_flash_notify struct (Paolo Abeni) [2028276]
  - devlink: Break parameter notification sequence to be before/after unload/load driver (Paolo Abeni) [2028276]
  - vhost_net: fix OoB on sendmsg() failure. (Paolo Abeni) [2026821]
  - printk: restore flushing of NMI buffers on remote CPUs after NMI backtraces (Prarit Bhargava) [2023082]
  - lib/nmi_backtrace: Serialize even messages about idle CPUs (Prarit Bhargava) [2023082]
  - printk: syslog: close window between wait and read (Prarit Bhargava) [2023082]
  - printk: convert @syslog_lock to mutex (Prarit Bhargava) [2023082]
  - printk: remove NMI tracking (Prarit Bhargava) [2023082]
  - printk: remove safe buffers (Prarit Bhargava) [2023082]
  - printk: track/limit recursion (Prarit Bhargava) [2023082]
  - lib/nmi_backtrace: explicitly serialize banner and regs (Prarit Bhargava) [2023082]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-44.el9]
changelog:
  - dm btree remove: fix use after free in rebalance_children() (Benjamin Marzinski) [2031198]
  - dm table: log table creation error code (Benjamin Marzinski) [2031198]
  - dm: make workqueue names device-specific (Benjamin Marzinski) [2031198]
  - dm writecache: Make use of the helper macro kthread_run() (Benjamin Marzinski) [2031198]
  - dm crypt: Make use of the helper macro kthread_run() (Benjamin Marzinski) [2031198]
  - dm: Remove redundant flush_workqueue() calls (Benjamin Marzinski) [2031198]
  - dm crypt: log aead integrity violations to audit subsystem (Benjamin Marzinski) [2031198]
  - dm integrity: log audit events for dm-integrity target (Benjamin Marzinski) [2031198]
  - dm: introduce audit event module for device mapper (Benjamin Marzinski) [2031198]
  - dm: fix mempool NULL pointer race when completing IO (Benjamin Marzinski) [2031198]
  - dm rq: don't queue request to blk-mq during DM suspend (Benjamin Marzinski) [2031198]
  - dm clone: make array 'descs' static (Benjamin Marzinski) [2031198]
  - dm verity: skip redundant verity_handle_err() on I/O errors (Benjamin Marzinski) [2031198]
  - dm crypt: use in_hardirq() instead of deprecated in_irq() (Benjamin Marzinski) [2031198]
  - dm ima: update dm documentation for ima measurement support (Benjamin Marzinski) [2031198]
  - dm ima: update dm target attributes for ima measurements (Benjamin Marzinski) [2031198]
  - dm ima: add a warning in dm_init if duplicate ima events are not measured (Benjamin Marzinski) [2031198]
  - dm ima: prefix ima event name related to device mapper with dm_ (Benjamin Marzinski) [2031198]
  - dm ima: add version info to dm related events in ima log (Benjamin Marzinski) [2031198]
  - dm ima: prefix dm table hashes in ima log with hash algorithm (Benjamin Marzinski) [2031198]
  - dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc() (Benjamin Marzinski) [2031198]
  - dm: add documentation for IMA measurement support (Benjamin Marzinski) [2031198]
  - dm: update target status functions to support IMA measurement (Benjamin Marzinski) [2031198]
  - dm ima: measure data on device rename (Benjamin Marzinski) [2031198]
  - dm ima: measure data on table clear (Benjamin Marzinski) [2031198]
  - dm ima: measure data on device remove (Benjamin Marzinski) [2031198]
  - dm ima: measure data on device resume (Benjamin Marzinski) [2031198]
  - dm ima: measure data on table load (Benjamin Marzinski) [2031198]
  - dm writecache: add event counters (Benjamin Marzinski) [2031198]
  - dm writecache: report invalid return from writecache_map helpers (Benjamin Marzinski) [2031198]
  - dm writecache: further writecache_map() cleanup (Benjamin Marzinski) [2031198]
  - dm writecache: factor out writecache_map_remap_origin() (Benjamin Marzinski) [2031198]
  - dm writecache: split up writecache_map() to improve code readability (Benjamin Marzinski) [2031198]
  - redhat: Pull in openssl-devel as a build dependency correctly (Neal Gompa) [2034670]
  - redhat/configs: Enable ThinkLMI support (Mark Pearson) [2030770]
  - platform/x86: think-lmi: Abort probe on analyze failure (Mark Pearson) [2030770]
  - platform/x86: think-lmi: add debug_cmd (Mark Pearson) [2030770]
  - include/linux/timer.h: Pad timer_list struct for KABI (Prarit Bhargava) [2034452]
  - kernel: Include RHEL Ecosystem message (Prarit Bhargava) [2033650]
  - include/linux/ioport.h: Pad resource struct for KABI (Prarit Bhargava) [2033475]
  - include/linux/hrtimer.h: Pad hrtimer struct for KABI (Prarit Bhargava) [2033473]
  - redhat/configs: Add explicit values for ZRAM_DEF_COMP_LZ4* configs (Neal Gompa) [2032758]
  - redhat/configs: Enable CONFIG_CRYPTO_ZSTD (Neal Gompa) [2032758]
  - redhat/configs: Migrate defaults for ZRAM from pending-common to common (Neal Gompa) [2032758]
  - Enable iSER on s390x (Stefan Schulze Frielinghaus) [1965279]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-45.el9]
changelog:
  - workqueue, kasan: avoid alloc_pages() when recording stack (Phil Auld) [2022894]
  - kasan: generic: introduce kasan_record_aux_stack_noalloc() (Phil Auld) [2022894]
  - kasan: common: provide can_alloc in kasan_save_stack() (Phil Auld) [2022894]
  - lib/stackdepot: introduce __stack_depot_save() (Phil Auld) [2022894]
  - lib/stackdepot: remove unused function argument (Phil Auld) [2022894]
  - lib/stackdepot: include gfp.h (Phil Auld) [2022894]
  - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Phil Auld) [2022894]
  - workqueue: make sysfs of unbound kworker cpumask more clever (Phil Auld) [2022894]
  - workqueue: fix state-dump console deadlock (Phil Auld) [2022894]
  - workqueue: Remove unused WORK_NO_COLOR (Phil Auld) [2022894]
  - workqueue: Assign a color to barrier work items (Phil Auld) [2022894]
  - workqueue: Mark barrier work with WORK_STRUCT_INACTIVE (Phil Auld) [2022894]
  - workqueue: Change the code of calculating work_flags in insert_wq_barrier() (Phil Auld) [2022894]
  - workqueue: Change arguement of pwq_dec_nr_in_flight() (Phil Auld) [2022894]
  - workqueue: Rename "delayed" (delayed by active management) to "inactive" (Phil Auld) [2022894]
  - workqueue: Replace deprecated ida_simple_*() with ida_alloc()/ida_free() (Phil Auld) [2022894]
  - workqueue: Fix typo in comments (Phil Auld) [2022894]
  - workqueue: Fix possible memory leaks in wq_numa_init() (Phil Auld) [2022894]
  - nvme: avoid race in shutdown namespace removal (Ewan D. Milne) [2014529]
  - powerpc/xmon: Dump XIVE information for online-only processors. (Steve Best) [2037642]
  - ipv4: make exception cache less predictible (Antoine Tenart) [2015112] {CVE-2021-20322}
  - [s390] s390/cio: make ccw_device_dma_* more robust (Claudio Imbrenda) [1997541]
  - [s390] s390/pci: add s390_iommu_aperture kernel parameter (Claudio Imbrenda) [2034134]
  - [s390] s390/pci: fix zpci_zdev_put() on reserve (Claudio Imbrenda) [2034132]
  - [s390] s390/pci: cleanup resources only if necessary (Claudio Imbrenda) [2034132]
  - [s390] s390/sclp: fix Secure-IPL facility detection (Claudio Imbrenda) [2034116]
  - Revert "[redhat] Generate a crashkernel.default for each kernel build" (Coiby Xu) [2034490]
  - ibmvnic: Process crqs after enabling interrupts (Diego Domingos) [2020021]
  - ibmvnic: delay complete() (Diego Domingos) [2020021]
  - ibmvnic: don't stop queue in xmit (Diego Domingos) [2019988]
  - bpf/selftests: disable test failing on RHEL9 (Viktor Malik) [2006315]
  - bpf/selftests: disable a verifier test for powerpc (Viktor Malik) [2032734]
  - bpf/selftests: allow disabling tests (Viktor Malik) [2036656]
  - kernel/crash_core: suppress unknown crashkernel parameter warning (Philipp Rudo) [2026570]
  - mm/vmalloc: do not adjust the search size for alignment overhead (David Hildenbrand) [2029493]
  - Bluetooth: fix use-after-free error in lock_sock_nested() (Gopal Tiwari) [2005691]
  - lib: zstd: Don't add -O3 to cflags (Neal Gompa) [2034834]
  - lib: zstd: Don't inline functions in zstd_opt.c (Neal Gompa) [2034834]
  - lib: zstd: Fix unused variable warning (Neal Gompa) [2034834]
  - lib: zstd: Add cast to silence clang's -Wbitwise-instead-of-logical (Neal Gompa) [2034834]
  - MAINTAINERS: Add maintainer entry for zstd (Neal Gompa) [2034834]
  - lib: zstd: Upgrade to latest upstream zstd version 1.4.10 (Neal Gompa) [2034834]
  - lib: zstd: Add decompress_sources.h for decompress_unzstd (Neal Gompa) [2034834]
  - lib: zstd: Add kernel-specific API (Neal Gompa) [2034834]


author: Neal Gompa <ngompa@centosproject.org> [5.14.0-45.hs1.el9]
changelog:
  - redhat/configs: Disable fbdev drivers and use simpledrm instead (Javier Martinez Canillas) [1986223]
  - drm: simpledrm: fix wrong unit with pixel clock (Javier Martinez Canillas) [1986223]
  - drm: fb_helper: improve CONFIG_FB dependency (Javier Martinez Canillas) [1986223]
  - drm: fb_helper: fix CONFIG_FB dependency (Javier Martinez Canillas) [1986223]
  - drivers/firmware: fix SYSFB depends to prevent build failures (Javier Martinez Canillas) [1986223]
  - drivers/firmware: consolidate EFI framebuffer setup for all arches (Javier Martinez Canillas) [1986223]
  - drivers/firmware: move x86 Generic System Framebuffers support (Javier Martinez Canillas) [1986223]
  - redhat/configs: Enable the Btrfs file system (Neal Gompa)


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.1.1.el9_0]
changelog:
  - Revert 8dffe2b6 "Merge: kabi: add lib ACKed symbols" (Čestmír Kalina) [2059972]
  - include/linux/kernel.h: fix function name for mark_hardware_unmaintained() if !CONFIG_RHEL_DIFFERENCES (Ewan D. Milne) [2059687]
  - scsi: sd: Mark ZBC host-managed SCSI disks as unmaintained (Ewan D. Milne) [2059687]
  - spec: make linux-firmware weak(er) dependency (Jan Stancek) [2031113]
  - redhat/configs: Enable CONFIG_INTEL_PCH_THERMAL for x86 (David Arcari) [2058186]
  - redhat/configs: Disable CONFIG_SURFACE_PLATFORMS (David Arcari) [2056609]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-71.el9]
changelog:
  - CI: Build coverage RPMs on c9s environment (Veronika Kabatova)
  - md: use default_groups in kobj_type (Nigel Croxon) [2042797]
  - md: Move alloc/free acct bioset in to personality (Nigel Croxon) [2042797]
  - md: fix spelling of "its" (Nigel Croxon) [2042797]
  - md: raid456 add nowait support (Nigel Croxon) [2042797]
  - md: raid10 add nowait support (Nigel Croxon) [2042797]
  - md: raid1 add nowait support (Nigel Croxon) [2042797]
  - md: add support for REQ_NOWAIT (Nigel Croxon) [2042797]
  - md: drop queue limitation for RAID1 and RAID10 (Nigel Croxon) [2042797]
  - md/raid5: play nice with PREEMPT_RT (Nigel Croxon) [2042797]
  - md/raid1: fix missing bitmap update w/o WriteMostly devices (Nigel Croxon) [2042797]
  - md: fix double free of mddev->private in autorun_array() (Nigel Croxon) [2042797]
  - md: fix update super 1.0 on rdev size change (Nigel Croxon) [2042797]
  - raid5-ppl: use swap() to make code cleaner (Nigel Croxon) [2042797]
  - md/bitmap: don't set max_write_behind if there is no write mostly device (Nigel Croxon) [2042797]
  - md: update superblock after changing rdev flags in state_store (Nigel Croxon) [2042797]
  - md: remove unused argument from md_new_event (Nigel Croxon) [2042797]
  - md/raid5: call roundup_pow_of_two in raid5_run (Nigel Croxon) [2042797]
  - md/raid1: use rdev in raid1_write_request directly (Nigel Croxon) [2042797]
  - md/raid1: only allocate write behind bio fof WriteMostly device (Nigel Croxon) [2042797]
  - md: properly unwind when failing to add the kobject in md_alloc (Nigel Croxon) [2042797]
  - md: extend disks_mutex coverage (Nigel Croxon) [2042797]
  - md: add the bitmap group to the default groups for the md kobject (Nigel Croxon) [2042797]
  - md: add error handling support for add_disk() (Nigel Croxon) [2042797]
  - redhat: Bump RHEL_MINOR for 9.1 (Patrick Talbert)


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-72.el9]
changelog:
  - spec: Fix separate tools build (Jiri Olsa) [2054579]
  - redhat: use centos x509.genkey file if building under centos (Herton R. Krzesinski) [2029952]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-73.el9]
changelog:
  - CI: Use 9.0-rt branch for rhel-9 realtime_check (Juri Lelli)
  - redhat: enable zstream release numbering for rhel 9.0 (Herton R. Krzesinski)
  - redhat: change kabi tarballs to use the package release (Herton R. Krzesinski)
  - redhat: generate distgit changelog in genspec.sh as well (Herton R. Krzesinski)
  - redhat: make genspec prefer metadata from git notes (Herton R. Krzesinski)
  - redhat: use tags from git notes for zstream to generate changelog (Herton R. Krzesinski)
  - CI: Add disttag setting (Veronika Kabatova)
  - CI: Drop c9s config (Veronika Kabatova)
  - virtio-net: fix pages leaking when building skb in big mode (Laurent Vivier) [2042559]
  - lib/iov_iter: initialize "flags" in new pipe_buffer (Carlos Maiolino) [2060869] {CVE-2022-0847}
  - redhat/configs: Make CRYPTO_ECDH algos built-in (Simo Sorce) [2062199]
  - crypto: api - Move cryptomgr soft dependency into algapi (Vladis Dronov) [2062199]
  - crypto: api - Fix boot-up crash when crypto manager is disabled (Vladis Dronov) [2062199]
  - crypto: api - Do not create test larvals if manager is disabled (Vladis Dronov) [2062199]
  - crypto: api - Export crypto_boot_test_finished (Vladis Dronov) [2062199]
  - crypto: api - Fix built-in testing dependency failures (Vladis Dronov) [2062199]
  - redhat/configs: Add CRYPTO_AES_ARM64 config explicitly (Vladis Dronov) [2062199]
  - crypto: arm64/aes-ce - stop using SIMD helper for skciphers (Vladis Dronov) [2062199]
  - crypto: arm64/aes-neonbs - stop using SIMD helper for skciphers (Vladis Dronov) [2062199]
  - redhat: change default dist suffix for RHEL 9.0 (Herton R. Krzesinski)
  - selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050813]
  - KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050813]
  - block: kabi: reserve space for block layer public structure (Ming Lei) [2057238]
  - block: kabi: reserve space for blk-mq related structure (Ming Lei) [2057238]
  - block: kabi: reserve space for bsg related structure (Ming Lei) [2057238]
  - block: kabi: reserve space for integrity related structure (Ming Lei) [2057238]
  - scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop (Dick Kennedy) [2054866]
  - x86/MCE/AMD, EDAC/mce_amd: Support non-uniform MCA bank type enumeration (Aristeu Rozanski) [1898165 2047430 2047446]
  - x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Aristeu Rozanski) [1898165 2047430 2047446]
  - EDAC/amd64: Add support for AMD Family 19h Models 10h-1Fh and A0h-AFh (Aristeu Rozanski) [1898165 2047430 2047446]
  - EDAC: Add RDDR5 and LRDDR5 memory types (Aristeu Rozanski) [1898165 2047430 2047446]
  - drm/amdgpu: Register MCE notifier for Aldebaran RAS (Aristeu Rozanski) [1898165 2047430 2047446]
  - x86/MCE/AMD: Export smca_get_bank_type symbol (Aristeu Rozanski) [1898165 2047430 2047446]
  - PCI/ACPI: Fix acpi_pci_osc_control_set() kernel-doc comment (Mark Langsdorf) [2049635]
  - PCI/ACPI: Check for _OSC support in acpi_pci_osc_control_set() (Mark Langsdorf) [2049635]
  - PCI/ACPI: Move _OSC query checks to separate function (Mark Langsdorf) [2049635]
  - PCI/ACPI: Move supported and control calculations to separate functions (Mark Langsdorf) [2049635]
  - PCI/ACPI: Remove OSC_PCI_SUPPORT_MASKS and OSC_PCI_CONTROL_MASKS (Mark Langsdorf) [2049635]
  - nvmet-tcp: fix missing unmainted messages (Chris Leech) [2054441]
  - dm stats: fix too short end duration_ns when using precise_timestamps (Benjamin Marzinski) [2051798]
  - dm: fix double accounting of flush with data (Benjamin Marzinski) [2051798]
  - dm: interlock pending dm_io and dm_wait_for_bios_completion (Benjamin Marzinski) [2051798]
  - dm: properly fix redundant bio-based IO accounting (Benjamin Marzinski) [2051798]
  - dm: revert partial fix for redundant bio-based IO accounting (Benjamin Marzinski) [2051798]
  - block: add bio_start_io_acct_time() to control start_time (Benjamin Marzinski) [2051798]
  - scsi: mpt3sas: Fix incorrect system timestamp (Tomas Henzl) [2049631]
  - scsi: mpt3sas: Fix system going into read-only mode (Tomas Henzl) [2049631]
  - scsi: mpt3sas: Fix kernel panic during drive powercycle test (Tomas Henzl) [2049631]
  - redhat/configs: enable mellanox platform drivers to support LED, fan & watchdog devices (Ivan Vecera) [2057491]
  - x86/cpu: Drop spurious underscore from RAPTOR_LAKE #define (David Arcari) [2040022]
  - x86/cpu: Add Raptor Lake to Intel family (David Arcari) [2040022]
  - powerpc/64: Move paca allocation later in boot (Desnes A. Nunes do Rosario) [2055566]
  - powerpc: Set crashkernel offset to mid of RMA region (Desnes A. Nunes do Rosario) [2055566]
  - selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2060814]
  - KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2060814]
  - igb: refactor XDP registration (Corinna Vinschen) [2054379]
  - igc: avoid kernel warning when changing RX ring parameters (Corinna Vinschen) [2054379]
  - redhat/configs: Enable CONFIG_ACER_WIRELESS (Peter Georg) [2025985]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-74.el9]
changelog:
  - redhat: rpminspect: disable 'patches' check for known empty patch files (Patrick Talbert)
  - KVM: x86/mmu: Don't advance iterator after restart due to yielding (Nico Pache) [2055725]
  - ibmvnic: don't release napi in __ibmvnic_open() (Diego Domingos) [2055981]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-75.el9]
changelog:
  - ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report() (Hangbin Liu) [2059308] {CVE-2022-0742}
  - redhat/configs: aarch64: Fix PAC/BTI config settings (Mark Salter) [2063215]
  - RHEL9.0: arch_hw Update CONFIG_MOUSE_VSXXXAA=m (Tony Camuso) [2062909]
  - redhat/configs: Disable KVM on POWER (Laurent Vivier) [2052898]
  - drm/ast: Create threshold values for AST2600 (Jocelyn Falempe) [2062560]
  - mm: gup: make fault_in_safe_writeable() use fixup_user_fault() (Andreas Gruenbacher) [2062797]
  - drm/vmwgfx: Fix stale file descriptors on failed usercopy (David Airlie) [2047613] {CVE-2022-22942}
  - netfilter: nf_queue: handle socket prefetch (Florian Westphal) [2060092]
  - netfilter: nf_queue: fix possible use-after-free (Florian Westphal) [2060092]
  - selftests: netfilter: add nfqueue TCP_NEW_SYN_RECV socket race test (Florian Westphal) [2060092]
  - netfilter: nf_queue: don't assume sk is full socket (Florian Westphal) [2060092]
  - scsi: mpi3mr: Fix flushing !WQ_MEM_RECLAIM events warning (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Fix memory leaks (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Fix reporting of actual data transfer size (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Fix cmnd getting marked as in use forever (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Fix hibernation issue (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Fix printing of pending I/O count (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Fix deadlock while canceling the fw event (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Fixes around reply request queues (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Enhanced Task Management Support Reply handling (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Use TM response codes from MPI3 headers (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Increase internal cmnds timeout to 60s (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Do access status validation before adding devices (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Update MPI3 headers - part2 (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Update MPI3 headers - part1 (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Don't reset IOC if cmnds flush with reset status (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Replace spin_lock() with spin_lock_irqsave() (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Add debug APIs based on logging_level bits (Tomas Henzl) [2056626]
  - x86/kvm/fpu: Remove kvm_vcpu_arch.guest_supported_xcr0 (Leonardo Bras) [2043545]
  - x86/kvm/fpu: Limit guest user_xfeatures to supported bits of XCR0 (Leonardo Bras) [2043545]
  - KVM: x86: Move CPUID.(EAX=0x12,ECX=1) mangling to __kvm_update_cpuid_runtime() (Leonardo Bras) [2043545]
  - KVM: x86: Do runtime CPUID update before updating vcpu->arch.cpuid_entries (Leonardo Bras) [2043545]
  - x86/fpu: Fix inline prefix warnings (Leonardo Bras) [2043545]
  - kvm: x86: Emulate IA32_XFD_ERR for guest (Leonardo Bras) [2043545]
  - x86/fpu: Prepare xfd_err in struct fpu_guest (Leonardo Bras) [2043545]
  - kvm: x86: Add emulation for IA32_XFD (Leonardo Bras) [2043545]
  - x86/fpu: Provide fpu_update_guest_xfd() for IA32_XFD emulation (Leonardo Bras) [2043545]
  - kvm: x86: Enable dynamic xfeatures at KVM_SET_CPUID2 (Leonardo Bras) [2043545]
  - x86/fpu: Provide fpu_enable_guest_xfd_features() for KVM (Leonardo Bras) [2043545]
  - x86/fpu: Add guest support to xfd_enable_feature() (Leonardo Bras) [2043545]
  - x86/fpu: Prepare guest FPU for dynamically enabled FPU features (Leonardo Bras) [2043545]
  - x86/fpu: Extend fpu_xstate_prctl() with guest permissions (Leonardo Bras) [2043545]
  - cpuid: kvm_find_kvm_cpuid_features() should be declared 'static' (Leonardo Bras) [2043545]
  - KVM: x86: Make sure KVM_CPUID_FEATURES really are KVM_CPUID_FEATURES (Leonardo Bras) [2043545]
  - KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows (Leonardo Bras) [2043545]
  - redhat/configs: Disable watchdog components (Prarit Bhargava) [2060117]
  - sched: Fix yet more sched_fork() races (Phil Auld) [2062836]
  - sched/fair: Fix fault in reweight_entity (Phil Auld) [2062836]
  - x86/cpu: Add Xeon Icelake-D to list of CPUs that support PPIN (David Arcari) [2043225]
  - powerpc/pseries/ddw: Revert "Extend upper limit for huge DMA window for persistent memory" (Steve Best) [2056057]
  - drivers/char: permit access to the RTAS user buffer under lockdown (Desnes A. Nunes do Rosario) [2046472]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-76.el9]
changelog:
  - vdpa/mlx5: Fix tracking of current number of VQs (Cindy Lu) [2055451]
  - vdpa/mlx5: Fix is_index_valid() to refer to features (Cindy Lu) [2055451]
  - vdpa: Protect vdpa reset with cf_mutex (Cindy Lu) [2055451]
  - vdpa: Avoid taking cf_mutex lock on get status (Cindy Lu) [2055451]
  - vdpa/vdpa_sim_net: Report max device capabilities (Cindy Lu) [2055451]
  - vdpa: Use BIT_ULL for bit operations (Cindy Lu) [2055451]
  - vdpa/vdpa_sim: Configure max supported virtqueues (Cindy Lu) [2055451]
  - vdpa/mlx5: Report max device capabilities (Cindy Lu) [2055451]
  - vdpa: Support reporting max device capabilities (Cindy Lu) [2055451]
  - vdpa/mlx5: Restore cur_num_vqs in case of failure in change_num_qps() (Cindy Lu) [2055451]
  - vdpa: Add support for returning device configuration information (Cindy Lu) [2055451]
  - vdpa/mlx5: Support configuring max data virtqueue (Cindy Lu) [2055451]
  - vdpa/mlx5: Fix config_attr_mask assignment (Cindy Lu) [2055451]
  - vdpa: Allow to configure max data virtqueues (Cindy Lu) [2055451]
  - vdpa: Read device configuration only if FEATURES_OK (Cindy Lu) [2055451]
  - vdpa: Sync calls set/get config/status with cf_mutex (Cindy Lu) [2055451]
  - vdpa/mlx5: Distribute RX virtqueues in RQT object (Cindy Lu) [2055451]
  - vdpa: Provide interface to read driver features (Cindy Lu) [2055451]
  - vdpa: clean up get_config_size ret value handling (Cindy Lu) [2055451]
  - vdpa/mlx5: Fix wrong configuration of virtio_version_1_0 (Cindy Lu) [2055451]
  - vdpa: Mark vdpa_config_ops.get_vq_notification as optional (Cindy Lu) [2055451]
  - vdpa: Avoid duplicate call to vp_vdpa get_status (Cindy Lu) [2055451]
  - net/mlx5_vdpa: Offer VIRTIO_NET_F_MTU when setting MTU (Cindy Lu) [2055451]
  - vdpa: add driver_override support (Cindy Lu) [2055451]
  - docs: document sysfs ABI for vDPA bus (Cindy Lu) [2055451]
  - ifcvf/vDPA: fix misuse virtio-net device config size for blk dev (Cindy Lu) [2055451]
  - vdpa: Consider device id larger than 31 (Cindy Lu) [2055451]
  - virtio: always enter drivers/virtio/ (Cindy Lu) [2055451]
  - vdpa: check that offsets are within bounds (Cindy Lu) [2055451]
  - vdpa_sim: avoid putting an uninitialized iova_domain (Cindy Lu) [2055451]
  - vhost-vdpa: clean irqs before reseting vdpa device (Cindy Lu) [2055451]
  - vdpa/mlx5: Forward only packets with allowed MAC address (Cindy Lu) [2055451]
  - vdpa/mlx5: Support configuration of MAC (Cindy Lu) [2055451]
  - vdpa/mlx5: Fix clearing of VIRTIO_NET_F_MAC feature bit (Cindy Lu) [2055451]
  - vdpa_sim_net: Enable user to set mac address and mtu (Cindy Lu) [2055451]
  - vdpa: Enable user to set mac and mtu of vdpa device (Cindy Lu) [2055451]
  - vdpa: Use kernel coding style for structure comments (Cindy Lu) [2055451]
  - vdpa: Introduce query of device config layout (Cindy Lu) [2055451]
  - vdpa: Introduce and use vdpa device get, set config helpers (Cindy Lu) [2055451]
  - vdpa/mlx5: Propagate link status from device to vdpa driver (Cindy Lu) [2055451]
  - vdpa/mlx5: Rename control VQ workqueue to vdpa wq (Cindy Lu) [2055451]
  - vdpa/mlx5: Remove mtu field from vdpa net device (Cindy Lu) [2055451]
  - vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE (Cindy Lu) [2055451]
  - virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min} (Cindy Lu) [2055451]
  - vdpa: min vq num of vdpa device cannot be greater than max vq num (Cindy Lu) [2055451]
  - vdpa: add new callback get_vq_num_min in vdpa_config_ops (Cindy Lu) [2055451]
  - vp_vdpa: add vq irq offloading support (Cindy Lu) [2055451]
  - vdpa: fix typo (Cindy Lu) [2055451]
  - vhost-vdpa: Fix the wrong input in config_cb (Cindy Lu) [2055451]
  - vhost_vdpa: unset vq irq before freeing irq (Cindy Lu) [2055451]
  - vdpa: potential uninitialized return in vhost_vdpa_va_map() (Cindy Lu) [2055451]
  - vdpa/mlx5: Avoid executing set_vq_ready() if device is reset (Cindy Lu) [2055451]
  - vdpa/mlx5: Clear ready indication for control VQ (Cindy Lu) [2055451]
  - vdpa: Support transferring virtual addressing during DMA mapping (Cindy Lu) [2055451]
  - vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap() (Cindy Lu) [2055451]
  - vdpa: Add an opaque pointer for vdpa_config_ops.dma_map() (Cindy Lu) [2055451]
  - vhost-iotlb: Add an opaque pointer for vhost IOTLB (Cindy Lu) [2055451]
  - vhost-vdpa: Handle the failure of vdpa_reset() (Cindy Lu) [2055451]
  - vdpa: Add reset callback in vdpa_config_ops (Cindy Lu) [2055451]
  - vdpa: Fix some coding style issues (Cindy Lu) [2055451]
  - vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro (Cindy Lu) [2055451]
  - vdpa/mlx5: Add multiqueue support (Cindy Lu) [2055451]
  - vdpa/mlx5: Add support for control VQ and MAC setting (Cindy Lu) [2055451]
  - vdpa/mlx5: Ensure valid indices are provided (Cindy Lu) [2055451]
  - vdpa/mlx5: Decouple virtqueue callback from struct mlx5_vdpa_virtqueue (Cindy Lu) [2055451]
  - vdpa/mlx5: function prototype modifications in preparation to control VQ (Cindy Lu) [2055451]
  - vdpa/mlx5: Remove redundant header file inclusion (Cindy Lu) [2055451]
  - vDPA/ifcvf: enable multiqueue and control vq (Cindy Lu) [2055451]
  - vDPA/ifcvf: detect and use the onboard number of queues directly (Cindy Lu) [2055451]
  - vDPA/ifcvf: implement management netlink framework for ifcvf (Cindy Lu) [2055451]
  - vDPA/ifcvf: introduce get_dev_type() which returns virtio dev id (Cindy Lu) [2055451]
  - x86/hyperv: Output host build info as normal Windows version number (Vitaly Kuznetsov) [2060708]
  - lib/irq_poll: Declare IRQ_POLL softirq vector as ksoftirqd-parking safe (Desnes A. Nunes do Rosario) [2059555]
  - tick/rcu: Stop allowing RCU_SOFTIRQ in idle (Desnes A. Nunes do Rosario) [2059555]
  - tick/rcu: Remove obsolete rcu_needs_cpu() parameters (Desnes A. Nunes do Rosario) [2059555]
  - tick: Detect and fix jiffies update stall (Desnes A. Nunes do Rosario) [2059555]
  - rcu: Move rcu_needs_cpu() to tree.c (Desnes A. Nunes do Rosario) [2059555]
  - rcu: Remove the RCU_FAST_NO_HZ Kconfig option (Desnes A. Nunes do Rosario) [2059555]
  - torture: Remove RCU_FAST_NO_HZ from rcu scenarios (Desnes A. Nunes do Rosario) [2059555]
  - torture: Remove RCU_FAST_NO_HZ from rcuscale and refscale scenarios (Desnes A. Nunes do Rosario) [2059555]
  - copy_process(): Move fd_install() out of sighand->siglock critical section (Waiman Long) [2051855]
  - redhat/configs: enable CONFIG_INTEL_VSEC for x86 (David Arcari) [2058806]
  - platform/x86/intel: Move intel_pmt from MFD to Auxiliary Bus (David Arcari) [2058806]
  - platform/x86: intel_pmt_telemetry: Ignore zero sized entries (David Arcari) [2058806]
  - platform/x86/intel: Move Intel PMT drivers to new subfolder (David Arcari) [2058806]
  - driver core: auxiliary bus: Add driver data helpers (David Arcari) [2058806]
  - PCI: Add #defines for accessing PCIe DVSEC fields (David Arcari) [2058806]
  - tools headers UAPI: Sync powerpc syscall table file changed by new futex_waitv syscall (Joel Savitz) [2038794]
  - tools headers UAPI: Sync s390 syscall table file changed by new futex_waitv syscall (Joel Savitz) [2038794]
  - futex: Wireup futex_waitv syscall (Joel Savitz) [2038794]
  - tools headers UAPI: Sync MIPS syscall table file changed by new futex_waitv syscall (Joel Savitz) [2038794]
  - parisc: Wire up futex_waitv (Joel Savitz) [2038794]
  - s390: wire up sys_futex_waitv system call (Joel Savitz) [2038794]
  - MIPS: syscalls: Wire up futex_waitv syscall (Joel Savitz) [2038794]
  - tools headers UAPI: Sync files changed by new futex_waitv syscall (Joel Savitz) [2038794]
  - futex2: Documentation: Document sys_futex_waitv() uAPI (Joel Savitz) [2038794]
  - selftests: futex: Test sys_futex_waitv() wouldblock (Joel Savitz) [2038794]
  - selftests: futex: Test sys_futex_waitv() timeout (Joel Savitz) [2038794]
  - selftests: futex: Add sys_futex_waitv() test (Joel Savitz) [2038794]
  - futex,arm: Wire up sys_futex_waitv() (Joel Savitz) [2038794]
  - futex,x86: Wire up sys_futex_waitv() (Joel Savitz) [2038794]
  - futex: Implement sys_futex_waitv() (Joel Savitz) [2038794]
  - futex: Simplify double_lock_hb() (Joel Savitz) [2038794]
  - futex: Split out wait/wake (Joel Savitz) [2038794]
  - futex: Split out requeue (Joel Savitz) [2038794]
  - futex: Rename mark_wake_futex() (Joel Savitz) [2038794]
  - futex: Rename: match_futex() (Joel Savitz) [2038794]
  - futex: Rename: hb_waiter_{inc,dec,pending}() (Joel Savitz) [2038794]
  - futex: Split out PI futex (Joel Savitz) [2038794]
  - futex: Rename: {get,cmpxchg}_futex_value_locked() (Joel Savitz) [2038794]
  - futex: Rename hash_futex() (Joel Savitz) [2038794]
  - futex: Rename __unqueue_futex() (Joel Savitz) [2038794]
  - futex: Rename: queue_{,un}lock() (Joel Savitz) [2038794]
  - futex: Rename futex_wait_queue_me() (Joel Savitz) [2038794]
  - futex: Rename {,__}{,un}queue_me() (Joel Savitz) [2038794]
  - futex: Split out syscalls (Joel Savitz) [2038794]
  - futex: Move to kernel/futex/ (Joel Savitz) [2038794]
  - cifs: fix double free race when mount fails in cifs_get_root() (Ronnie Sahlberg) [1979175]


author: Neal Gompa <ngompa@centosproject.org> [5.14.0-76.hs1.el9]
changelog:
  - redhat/configs: Disable fbdev drivers and use simpledrm instead (Javier Martinez Canillas) [1986223]
  - drm/simpledrm: Add "panel orientation" property on non-upright mounted LCD panels (Javier Martinez Canillas) [1986223]
  - drm/simpledrm: Request memory region in driver (Javier Martinez Canillas) [1986223]
  - drm/simpledrm: Add [AX]RGB2101010 formats (Javier Martinez Canillas) [1986223]
  - drm: simpledrm: fix wrong unit with pixel clock (Javier Martinez Canillas) [1986223]
  - drm/simpledrm: Support virtual screen sizes (Javier Martinez Canillas) [1986223]
  - drm/fb-helper: Allocate shadow buffer of surface height (Javier Martinez Canillas) [1986223]
  - drm: fb_helper: improve CONFIG_FB dependency (Javier Martinez Canillas) [1986223]
  - drm: fb_helper: fix CONFIG_FB dependency (Javier Martinez Canillas) [1986223]
  - efi: sysfb_efi: fix build when EFI is not set (Javier Martinez Canillas) [1986223]
  - drivers/firmware: Don't mark as busy the simple-framebuffer IO resource (Javier Martinez Canillas) [1986223]
  - drivers/firmware: Add missing platform_device_put() in sysfb_create_simplefb (Javier Martinez Canillas) [1986223]
  - drivers/firmware: fix SYSFB depends to prevent build failures (Javier Martinez Canillas) [1986223]
  - drivers/firmware: consolidate EFI framebuffer setup for all arches (Javier Martinez Canillas) [1986223]
  - drivers/firmware: move x86 Generic System Framebuffers support (Javier Martinez Canillas) [1986223]
  - redhat: Fix "make dist-release-finish" to use the correct NVR variables (Neal Gompa) [2053836]
  - redhat/configs: Enable the Btrfs file system (Neal Gompa)


author: Nicola Sella <nsella@redhat.com> - 0.16.2-1
changelog:
  - Update to 0.16.2
  - Add module metadata support to createrepo_c (RhBug:1795936)
  - Fix various memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.2-1
changelog:
  - Update to 0.17.2
  - Fix Python deprecation (PY_SSIZE_T_CLEAN) (RhBug:1891785)
  - Revert back to old c API for destination file of cr_compress_file_with_stat and cr_compress_file to prevent a memory leak
  - Disable drpm for RHEL >= 9 (RhBug:1914828)
  - Setting updated/issued_date to None doesn't produce garbage values (RhBug:1921715)
  - Allow taking __repr__ (__str__) of closed xmlfile and sqlite (RhBug:1913465)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-1
changelog:
  - Update to 0.17.7
  - Remove insecure hashes SHA-1 and MD5 from the default build (RhBug:1935486)
  - Fix error when updating repo with removed modules metadata
  - Exit with status code 1 when loading of repo's metadata fails
  - Fix memory leaks (RhBug:1998426)
  - Fix valgrind warnings caused by subprocess calls


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-4
changelog:
  - Switch default of --keep-all-metadata to TRUE and add --discard-additional-metadata (RhBug:1992209)


author: Jeff Moyer <jmoyer@redhat.com> - 67-1.el8
changelog:
  - Rebase to v67.  This brings in the following features:
    - support for the 'security frozen' sysfs attribute
    - support for using pmem as system ram
    - various cleanup and bug fixes
  - Fix load-keys failure in initramfs (Jeff Moyer)
  - Resolves: bz#1724531 bz#1730673 bz#1741164 bz#1741165 bz#1749888 bz#1749889


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-4.el8
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
    - Fix enable-namespace all reporting errors incorrectly
    - Add support for inject-smart on papr scm
  - Related: bz#2090190 bz#1986185 bz#2040074


author: Anita Zhang <the.anitazha@gmail.com> - 71.1-4.1
changelog:
  - Patch 71.1 with diff between ea014c0..3ff031d from elake/ndctl fork for hs+fb
  - Sync changes from rhel/ndctl.spec (autogenerated by the GitHub Makefile)


author: Bryan Gurney <bgurney@redhat.com> - 71.1-7
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
  - Fix enable-namespace all reporting errors incorrectly
  - Add support for inject-smart on papr scm
  - Related: rhbz#2040075
  - Related: rhbz#1873851
  - Related: rhbz#1880578
  - Related: rhbz#1922538
  - Related: rhbz#2087707


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Dusty Mabe <dusty@dustymabe.com> - 053-4
changelog:
  - Backport: fix(dracut-logger.sh): double dash trigger unknown logger warnings during run
  - Backport: fix(network-manager): nm-run.service: don't kill forked processes
  - Backport: fix(network-manager): only run NetworkManager if rd.neednet=1
  - Backport: fix(network-manager): use /run/NetworkManager/initrd/neednet in initqueue


author: Harald Hoyer <harald@redhat.com> - 054-12.git20210521
changelog:
  - fix `get_maj_min` for kdump
  - suppress hardlink output
  - sane default --kerneldir for dracut-install
  - squash: don't mount the mount points if already mounted


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.16-1
changelog:
  - New release: 1.16
  - BTF encoder: Preserve and encode exported functions as BTF_KIND_FUNC.
  - BTF loader: Add support for BTF_KIND_FUNC
  - Pretty printer: Account inline type __aligned__ member types for spacing
  - Pretty printer: Fix alignment of class members that are structs/enums/unions
  - Pretty printer: Avoid infinite loop trying to determine type with static data member of its own type.
  - RPM spec file:  Add dwarves dependency on libdwarves1.
  - pfunct: type->type == 0 is void, fix --compile for that
  - pdwtags: Print DW_TAG_subroutine_type as well
  - core: Fix ptr_table__add_with_id() handling of pt->nr_entries
  - pglobal: Allow passing the format path specifier, to use with BTF
  - Tree wide: Fixup issues pointed out by various coverity reports.


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.17-1
changelog:
  - New release: 1.17
  - Support raw BTF as available in /sys/kernel/btf/vmlinux.
  - When the sole argument passed isn't a file, take it as a class name:
  - Do not require a class name to operate without a file name.
  - Make --find_pointers_to consider unions:
  - Make --contains and --find_pointers_to honour --unions
  - Add support for finding pointers to void:
  - Make --contains and --find_pointers_to to work with base types:
  - Make --contains look for more than just unions, structs:
  - Consider unions when looking for classes containing some class:
  - Introduce --unions to consider just unions:
  - Fix -m/--nr_methods - Number of functions operating on a type pointer


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.18-1
changelog:
  - New release: 1.18
  - Use debugging info to pretty print raw data
  - Store percpu variables in vmlinux BTF.
  - Fixes to address segfaults on the gdb testsuite binaries
  - Bail out on partial units for now, avoiding segfaults and providing warning to user.


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.19-1
changelog:
  - New release: 1.19
  - Split BTF
  - DWARF workarounds for DW_AT_declaration
  - Support cross-compiled ELF binaries with different endianness
  - Support showing typedefs for anonymous types
  - Speedups using libbpf algorithms
  - See changes-v1.19 for a complete and more detailed list of changes


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.20-1
changelog:
  - New release: v1.20
  - btf_encoder:
  - Improve ELF error reporting using elf_errmsg(elf_errno())
  - Improve objcopy error handling.
  - Fix handling of 'restrict' qualifier, that was being treated as a 'const'.
  - Support SHN_XINDEX in st_shndx symbol indexes
  - Cope with functions without a name
  - Fix BTF variable generation for kernel modules
  - Fix address size to match what is in the ELF file being processed.
  - Use kernel module ftrace addresses when finding which functions to encode.
  - libbpf:
  - Allow use of packaged version.
  - dwarf_loader:
  - Support DW_AT_data_bit_offset
  - DW_FORM_implicit_const in attr_numeric() and attr_offset()
  - Support DW_TAG_GNU_call_site, standardized rename of DW_TAG_GNU_call_site.
  - build:
  - Fix compilation on 32-bit architectures.


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.21-1
changelog:
  - New release: v1.21
  - DWARF loader:
  - Handle DWARF5 DW_OP_addrx properly
  - Handle subprogram ret type with abstract_origin properly
  - Check .notes section for LTO build info
  - Check .debug_abbrev for cross-CU references
  - Permit merging all DWARF CU's for clang LTO built binary
  - Factor out common code to initialize a cu
  - Permit a flexible HASHTAGS__BITS
  - Use a better hashing function, from libbpf
  - btf_encoder:
  - Add --btf_gen_all flag
  - Match ftrace addresses within ELF functions
  - Funnel ELF error reporting through a macro
  - Sanitize non-regular int base type
  - Add support for the floating-point types
  - Pretty printer:
  - Honour conf_fprintf.hex when printing enumerations


author: Jiri Olsa <jolsa@redhat.com> - 1.21-1
changelog:
  - remove ftrace filter
  - New release: v1.21
  - DWARF loader:
  - Handle DWARF5 DW_OP_addrx properly
  - Handle subprogram ret type with abstract_origin properly
  - Check .notes section for LTO build info
  - Check .debug_abbrev for cross-CU references
  - Permit merging all DWARF CU's for clang LTO built binary
  - Factor out common code to initialize a cu
  - Permit a flexible HASHTAGS__BITS
  - Use a better hashing function, from libbpf
  - btf_encoder:
  - Add --btf_gen_all flag
  - Match ftrace addresses within ELF functions
  - Funnel ELF error reporting through a macro
  - Sanitize non-regular int base type
  - Add support for the floating-point types
  - Pretty printer:
  - Honour conf_fprintf.hex when printing enumerations


author: Jiri Olsa <jolsa@redhat.com> - 1.22-1
changelog:
  - New release: v1.22
  - Resolves: rhbz#2010414
  - Introduce -j/--jobs option to specify the number of threads to use.
  - Multithreaded DWARF loading, requires elfutils >= 0.178.
  - Preparatory work for multithreaded BTF encoding, the focus for 1.23.
  - Allow encoding BTF to a separate file.
  - Show all different types with the same name, not just the first one found.
  - Stop assuming that reading from stdin means pretty, add --prettify.
  - Improve type resolution for the --header command line option.
  - Do not consider the ftrace filter when encoding BTF for kernel functions.
  - Lock calls to non-thread safe elfutils' dwarf_decl_file() and dwarf_decl_line().
  - Change hash table size to one that performs better with current typical vmlinux files.
  - Allow tweaking the hash table size from the command line.
  - Add --kabi_prefix to avoid deduplication woes when using _RH_KABI_REPLACE().
  - Add --with_flexible_array to show just types with flexible arrays.
  - Support btfdiff with a detached BTF file.
  - Introduce sorted type output (--sort).
  - Disable incomplete CTF encoder.


author: Viktor Malik <vmalik@redhat.com> - 1.24-1
changelog:
  - Resolves: rhbz#2140020
  - New release: v1.23
  - Process DW_TAG_LLVM_annotation tags.
  - Initial support for DW_TAG_skeleton_unit.
  - Encode BTF_KIND_TYPE_TAG and BTF_KIND_DECL_TAG
  - Fix handling of percpu symbols on s390.
  - Use cacheline size to infer struct member alignment from BTF.
  - Add --skip_missing to not stop when not finding one of -C arguments.
  - Fix __attribute__((__aligned__(N)) printing alignment for struct members.
  - Fix nested __attribute__(__aligned__(N)) struct printing order.
  - New release: v1.24
  - Add support to BTF_KIND_ENUM64.
  - Support multithreaded BTF encoding.
  - Encode char type as signed in BTF.
  - Introduce --lang and --lang_exclude to pahole.
  - Introduce --compile to pahole.
  - Don't segfault when processing bogus files.


author: Gerd Hoffmann <kraxel@redhat.com> - 20220526git16779ede2d36-1
changelog:
  - update to new edk2 stable tag (2022-05), refresh patches.
  - add amdsev and inteltdx builds
  - drop qosb


author: Gerd Hoffmann <kraxel@redhat.com> - 20220526git16779ede2d36-2
changelog:
  - fix PcdResizeXterm patch.
  - minor specfile cleanup.
  - add 0021-OvmfPkg-Sec-fix-stack-switch.patch
  - Resolves rhbz#2093745


author: Adam Williamson <awilliam@redhat.com> - 3.4-5
changelog:
  - Backport fix for upstream #28105 to fix zgrep
    Resolves: rhbz#1872913
  - Remove some non-portable tests that fail on armv7hl (Paul Eggert)
    Resolves: rhbz#1863830


author: Jaroslav Škarvada <jskarvad@redhat.com> - 3.7-1
changelog:
  - New version
    Resolves: rhbz#1993631
  - Temporarily switch to the included regex until glibc bug (glibc#11053)
    is fixed


author: Karel Zak <kzak@redhat.com> 2.32.1-23
changelog:
  - fix #1826251 - remove MD metadata 0.90 based tests from util-linux CI
  - fix #1812576 - RFE: Bitlocker detection for RHEL 8.3
  - fix #1817726 - add libblkid BLOCK_SIZE
  - fix #1803753 - RHEL-8: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit
  - fix #1812118 - mount -a always tries to mount smb3 share subdir despite being already mounted
  - fix #1824727 - util-linux: Include python3-libmount package in the release
  - fix #1829245 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir


author: Davide Cavalca <dcavalca@fb.com> 2.32.1-24.fb1
changelog:
  - Facebook rebuild
  - Build against more recent kernel headers to properly support new
    BPF capabilities


author: Karel Zak <kzak@redhat.com> 2.32.1-25
changelog:
  - fix #1884194 - RHEL-8: chrt command does not support the -R option
  - fix #1855759 - mount.8: clarify (no)suid behavior on file capabilities
  - fix #1861670 - lsblk can not show serial information for virtio disk
  - fix #1883783 - lscpu: avoid segfault on PowerPC systems with valid hardware configurations
  - fix #1900498 - libfdisk/libmount: backport two patches for upstream systemd
  - fix #1883056 - lscpu support for Fujitsu A64FX
  - fix #1882740 - lscpu: use SMBIOS Type 4 strings for CPU vendor and model on ARM


author: Anita Zhang <anitazha@fb.com> 2.32.1-27.1
changelog:
  - Backport https://github.com/karelzak/util-linux/commit/89f95425746e0371c033260c2bc0ef176eba6a37
    for setpriv --reset-env support
  - Remove FB kernel headers BuildRequires since RH kernel has them


author: Davide Cavalca <dcavalca@centosproject.org> 2.32.1-27.4
changelog:
  - Backport three losetup upstream fixes:
    https://github.com/karelzak/util-linux/commit/3ff6fb802de1efafbd90af228f91461691ac190c
    https://github.com/karelzak/util-linux/commit/75cd5e2f281cec16c7da49b65c0f3cadd51749b8
    https://github.com/karelzak/util-linux/commit/3e03cb680668e4d47286bc7e6ab43e47bb84c989


author: Karel Zak <kzak@redhat.com> 2.32.1-29
changelog:
  - fix #1988955 - script command continues without stopping.
  - fix #2041498 - incorrect partition size calculation for BLKPG_* ioctls
  - fix #2011602 - logger from util-linux incorrectly handles long messages
  - fix #1916151 - [RFE] spread fstrim.timer across time
  - fix #1894192 - Update or backport setpriv --pdeathsig
  - fix #2026511 - blkid fails to complete when targeting  non-block devices


author: Karel Zak <kzak@redhat.com> 2.32.1-31
changelog:
  - improve #2026511 fix - blkid fails to complete when targeting non-block devices
  - fix #1950187 - Ambient capabilities failed to applied to non-root user


author: Karel Zak <kzak@redhat.com> 2.32.1-36
changelog:
  - fix #2060030 - Please backport patches for atari partition detection to RHEL 8
  - fix #2069187 - Internal testsuite for lscpu failed on aarch64
  - fix #2093166 - lslogins reports incorrect "Password is locked" status
  - fix #2059241 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd
  - fix #2044592 - Move /var/log/lastlog ownership to systemd


author: Karel Zak <kzak@redhat.com> 2.32.1-40
changelog:
  - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2142496 - update upstream tests
  - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES
  - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38
  - fix #2160321 - [last] ut->ut_user is not null terminated


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly.
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.3-2
changelog:
  - fix #2021462 - partitons detection broken on systems not including the parent name in partition name
  - fix #2033622 - logger from util-linux incorrectly handles long messages
  - fix #2000137 - pam_env bypassed for root user when using su
  - fix #2000477 - rpm -V setup fail on /var/log/lastlog
  - fix #2047952 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Vojtech Trefny <vtrefny@redhat.com> - 2.19-9
changelog:
  - Remove device-mapper-multipath dependency from fs and part plugins (vtrefny)
    Resolves: rhbz#1700297


author: Vojtech Trefny <vtrefny@redhat.com> - 2.19-12
changelog:
  - Use cryptsetup to check LUKS2 label
    Resolves: rhbz#1778689
  - Fix expected cache pool name with newest LVM
    Related: rhbz#1778689


author: Lukas Hrazky <lhrazky@redhat.com> - 0.63.0-8
changelog:
  - Substitute all repository config options (fixes substitution of baseurl)
  - Use solvfile userdata to store and check checksums and solv versions
  - Fix handling transaction id in resolveTransactionItemReason
  - Set short action for Reason Change


author: Lukas Hrazky <lhrazky@redhat.com> - 0.63.0-10
changelog:
  - Do not print errors on failovermethod repo option
  - the dnf_context_remove() function accepts `<package-spec>`, doc updates
  - advisory upgrade: filter out advPkgs with different arch


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.63.0-1
changelog:
  - Update to 0.62.0
  - Hardening: add signature check with rpmcliVerifySignatures (RhBug:1932079)
  - Support allow_vendor_change setting in dnf context API
  - Add a new option module_obsoletes
  - Add new API applyObsoletes() function to apply modular obsoletes
  - Do not allow 1 as installonly_limit value (RhBug:1926261)
  - Add a config option to check TLS certificate revocation status (using OCSP stapling), defaults to false (RhBug:1814383)
  - Swdb: Add a method to get the current transaction
  - [context,API] Functions for accessing main/global configuration options
  - [context,API] Function for adding setopt
  - Add getter for modular obsoletes from ModuleMetadata
  - Add ModulePackage.getStaticContext() and getRequires()
  - Fix modular queries with the new solver
  - Fix: Fully set ssl in newHandle function
  - [conf] Add options for working with certificates used with proxy
  - Modify module NSVCA parsing - context definition (RhBug:1926771)
  - [context] Fix: dnf_package_is_installonly (RhBug:1928056)
  - Add getApplicablePackages to advisory and isApplicable to advisorymodule
  - Keep isAdvisoryApplicable to preserve API
  - [context] Support config file option "proxy_auth_method", defaults "any"
  - Support main config file options "installonlypkgs" and "protected_packages". Changes behaviour of microdnf and PackageKit.
  - Properly handle multiple collections in updateinfo.xml (RhBug:1804234)
  - Fix a crash when [media] section in .treeinfo is missing for bootable media (RhBug:1946024)
  - Add new dnf_context_module_install() C API


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.63.0-2
changelog:
  - Fix: dnf_context_module_install: memory leaks
  - covscan: remove unused vars, mark private func static, return values
  - DNF does not fail on non UTF-8 file names in a package


author: Matthew Almond <malmond@fb.com> - 1.12.0-3.1
changelog:
  - PR234 bugfix (RhBug:1935465)
  - PR211 for syncing file data before xattrs
  - PR222 for RPMCoW (RhBug:1915976)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Fix the key string parsing in url_substitution
  - When zchunk enabled and not using HTTP/S protocol, download the whole file (RhBug:1886706)
  - Add an option LRO_SSLVERIFYSTATUS to check TLS certificate revocation status (using OCSP stapling) (RhBug:1814383)
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for working with certificates used with proxy
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.2-1
changelog:
  - Update to 1.14.2
  - Reduce time to load metadata
  - Fix resource leaks and memory leaks
  - Remove build dependency on python3-flask


author: Manu Bretelle <chantra@fb.com> - 1.14.2-3.1
changelog:
  - Rebuild for Hyperscale
  - Adapt 222.patch to apply after 0002-Fix-alloc-free-mismatches-from-covscan.patch


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.5-1
changelog:
  - Update to 1.14.5
  - Detailed error message when using non-existing TMPDIR (RhBug:2019993)
  - Make error messages about repodata and rpm mismatch more user friendly


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.3.1-3
changelog:
  - Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets
    rhbz#1902232


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.4.0-3
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
    Resolves: rhbz#1970826 rhbz#1970839 rhbz#1970857 rhbz#1970847


author: Tomas Bzatek <tbzatek@redhat.com> - 2.8.3-1
changelog:
  - Rebased to upstream 2.8.3 release (#1685210)
  - Fix leaking filedescriptors (#1614774)
  - Fix udisksctl pager scrolling (#1662336)
  - Fix LVM2 plugin CreateSnapshot() error (#1668291)
  - Add ISCSI plugin GetInitiatorNameRaw() method (#1710257)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.5.1-2
changelog:
  - Disable amd64 assembly on non-intel architectures (#2035802):
    this should avoid the issue where an executable stack is created.


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1-3
changelog:
  - fix handling of zero-length messages
  - minimize default configuration
  - remove obsolete build requirement


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-1
changelog:
  - update to 3.1.1 (#1979954 CVE-2021-3570 CVE-2021-3571)
  - add read-only UDS port
  - add option to set clockClass threshold
  - don't repeat some log messages in multi-port configuration
  - increase default TX timestamp timeout to 10 ms
  - limit unicast message rate per address and grant duration


author: Davide Cavalca <dcavalca@centosproject.org> - 3.1.1^20220726git6c42e5-1.1
changelog:
  - Hyperscale build
  - Update to git snapshot and drop merged patches
  - Backport FB patches pending upstreaming
  - Disable broken tests


author: Davide Cavalca <dcavalca@centosproject.org> - 3.1.1^20221207git6bac46-1.1
changelog:
  - Update to the latest git snapshot and drop merged patches
  - Backport two more bugfix patches
  - Temporarily ignore test failures


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - Update to 4.1.1
  - Enable psm2 support
  - fbtl-posix: link to common_ompio
  - Revert upstream commit c36d7459b6331c4d
  - Resolve: rhbz#1869443


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-22
changelog:
  - Avoid spirous message on connecting to the machine with ssh-rsa keys
    Related: rhbz#2115246
  - Set minimal value of RSA key length via configuration option
    Related: rhbz#2066882


author: Michel Lind <salimma@fedoraproject.org> - 4.1.3-1
changelog:
  - Fix CVE-2023-41915
  - Update upstream source URL; pmix/pmix redirects to openpmix/openpmix
  - Use SPDX license identifier


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-15
changelog:
  - Add out-of-bounds checks to hdrblobInit() (#1929445)
  - Fixes CVE-2021-20266
  - Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-16
changelog:
  - Add support for read-only sqlite rpmdb (#1938928)
  - Drop compat .decode() method from returned Py3 strings (#1840142)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-20
changelog:
  - Add --path query option (#1940895)
  - Macroize find-debuginfo script location (#2019540)
  - Validate and require subkey binding sigs on PGP pubkeys (#1958480)
  - Fixes CVE-2021-3521


author: Manu Bretelle <chantra@fb.com> - 4.14.3-21.2
changelog:
  - Include PR1534
  - Rebase PR1470 on top of PR1534
  - Include support to validate signature while transcoding file


author: Manu Bretelle <chantra@fb.com> - 4.14.3-21.6
changelog:
  - Make `rpm -i` work without `--nodigest`
  - Remove need of executable stack for reflink plugin
  - Split RPM CoW diffs in individual patches


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-22
changelog:
  - Fix spurious %transfiletriggerpostun execution (#2023693)
  - Skip recorded symlinks in --setperms (#1900662)


author: Richard Phibel <richardphibel@meta.com> - 4.14.3-26.2
changelog:
  - Fix issue for transaction with transcoded and non-transcoded packages
  - Fix stack overflow in rpm2extents and various memory leaks


author: David Johansen <david@makewhat.is> - 0.6.6-1
changelog:
  - Bump to version 0.6.6 and include patches for ras-mc-ctl fixes
  - Include patches for page-offlining fixes


author: David Johansen <david@makewhat.is> - 0.6.7-1
changelog:
  - Build release 0.6.7 and remove backport patches
  - shardstatdir/rasdaemon is now created at runtime.


author: Paul Wouters <pwouters@redhat.com> - 1.7.4.1-1
changelog:
  - Resolves: rhbz#1805132 socat does not recognize IP addresses of the SAN extensions in ssl mode
  - Resolves: rhbz#1870279 Transfer via socat fails with openssl enabled
  - Resolves: rhbz#1914989 Socat udp4-recvfrom cause endless loop error when target is not vaild


author: Bruno Wolff III <bruno@wolff.to> - 4.5-24.20220308git8b6ee89
changelog:
  - Continue testing upstream patches prior to 4.5.1 release.
  - Minor fixes
  - Man page tweaks
  - Tentative 4.5.1 change log


author: Neal Gompa <ngompa@fedoraproject.org> - 251.4-53
changelog:
  - Set compile-time fallback hostname to "localhost"
    https://fedoraproject.org/wiki/Changes/FallbackHostname


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 252.4-598.6
changelog:
  - Bump release for 252.4
  - Sync from rawhide
  - Build with libqrencode
  - Build with libfido2
  - Build with homed/userdb
  - Drop pam config directory override
  - Use python3dist() where applicable
  - Drop llvm-toolset in favor of having systemd use bpftool gen object
  - Add back standalone binary packages


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 252.4-598.11
changelog:
  - Backport fixes for journald crashes and bad behavior when dealing with
    corrupted journals.
  - Fix changelog date


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 252.4-598.12
changelog:
  - Remove selinux bcond in favor of boolean dependency on selinux-policy so that
    systemd-selinux is only installed if selinux-policy is installed
  - Add selinux file contexts for /efi
  - Remove policycoreutils-python-utils dependency from systemd-selinux


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 251.4-1
changelog:
  - Version 251.4 (fixes rhbz#2112551)
  - A bunch of fixes to documentation, crashes in systemd-resolved,
    systemd-networkd, systemd itself, and other smaller fixes.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 251.4-2
changelog:
  - Backport patches and do a full preset on first boot (#2114065,
    https://fedoraproject.org/wiki/Changes/Preset_All_Systemd_Units_on_First_Boot)


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 253.5-1.1
changelog:
  - Add back python3-zstd on c9s now that it's been added to EPEL 9
  - Add back support for c8s builds (without ukify)
  - Add full backport of bpftool version requirement lowering


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 253.5-1.1
changelog:
  - Replace bpftool version requirement patch with sed so it works across systemd
    releases
  - Do selinux build in /tmp/selinux to avoid polluting source directory
  - Make sure we override existing output files when calling bzip2.


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 253.5-1.1
changelog:
  - Gate out systemd-selinux dependency on Facebook specific builds
  - Backport custom %clean implementation from rawhide
  - Backport selinux triggers logging revert from rawhide


author: Anita Zhang <the.anitazha@gmail.com> - 253.7-1.4
changelog:
  - Gate out selinux-policy-base versioning for facebook
  - Move repart fixes to staging repo (#28479, #28812)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 248.4-1
changelog:
  - Assorted fixes (some systemd-resolved crashes, invalid
    systemd-tmpfiles assertion, etc.)
  - systemd-networkd workaround for TALOS-2020-1142, CVE-2020-13529.
  - A big update of hardware descriptions.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 248.5-1
changelog:
  - Various minor documentation and correctness fixes.
  - CVE-2021-33910, #1984020: an unchecked stack allocation could be used to
    crash systemd and cause the system to reboot by creating a very long
    fuse mountpoint path.


author: Davide Cavalca <dcavalca@centosproject.org> - 248.5-1.2
changelog:
  - Add missing SELinux rules for 248
    (https://pagure.io/centos-sig-hyperscale/package-bugs/issue/1)


author: Michael Catanzaro <mcatanzaro@redhat.com> - 249.2-1
changelog:
  - Build with -Ddefault-dns-over-tls=opportunistic
    (https://fedoraproject.org/wiki/Changes/DNS_Over_TLS, #1889901)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 249.2-1
changelog:
  - Latest bugfix release (a minor hwdb regression bugfix, and correction
    to kernel commandline handling when reexecuting PID 1 in a container)


author: Davide Cavalca <dcavalca@centosproject.org> - 248.5-1.3
changelog:
  - Add missing SELinux rules for the GNOME and KDE LiveDVD spins
    (https://pagure.io/centos-sig-hyperscale/package-bugs/issue/7)


author: Anita Zhang <the.anitazha@gmail.com> - 249.2-1.1
changelog:
  - New release for 249
  - Drop merged patches
  - Split networkd and resolved into their own subpackages.


author: Anita Zhang <the.anitazha@gmail.com> - 249.2-1.2
changelog:
  - Remove Obsoletes lines on systemd-resolved and systemd-networkd since we don't
    want to install these by default.


author: Anita Zhang <the.anitazha@gmail.com> - 249.4-1.1
changelog:
  - New stable point release
  - Backport optimization for read_virtual_file() (#20743)
  - Backport new features for systemd-networkd (#20743, #20472, #20477, #20484)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 249.3-1
changelog:
  - Latest bugfix release: improved compatibility with latest glibc,
    various small documentation fixes, and fixes for systemd-networkd bridging,
    other minor fixes.
  - systemctl set-property accepts glob patterns now (#1986258)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 249.4-1
changelog:
  - Latest bugfix release: various fixes for systemd-networkd,
    systemd-resolved, systemd, systemd-boot.
  - Backport of macros to restart systemd user units (#1993244)


author: Anita Zhang <the.anitazha@gmail.com> - 249.4-2.5
changelog:
  - Remove duplicate Address= properties in network configs (part of PR #20892)
  - Serialize bpf device programs across reloads/reexecs (PR #20978)
  - Don't rewrite sysctls that are already set (PR #20676)


author: Anita Zhang <the.anitazha@gmail.com> - 249.4-2.8
changelog:
  - Remove revert_d219a2b07cc5dc8ffd5010f08561fab2780d8616.patch and replace with
    proper fix (PR #21221)


author: Anita Zhang <the.anitazha@gmail.com> - 249.4-2.10
changelog:
  - Re-enable fdisk and repart since util-linux-2.32.1-26 in C8s has the fix
    it needs for tests to pass.


author: Anita Zhang <the.anitazha@gmail.com> - 249.4-2.12
changelog:
  - Backport PR #20695: Sync if_arp.h with Linux 5.14
  - FB-only backport PR #22426: MemoryZSwapMax= to configure memory.zswap.max


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 249-2.13
changelog:
  - Move to dist-git layout used by Fedora (no more SOURCES/ and SPECS/)
  - Switch to .gitignore from commit 46a40810 from the Fedora RPM repo
  - Add back removed files from commit 46a40810 from the Fedora RPM repo


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 250.3-1
changelog:
  - Third stable release after v250: fixes for sd-boot on fringe hardware (e.g. VirtualBox),
    various man page updates, sd-journal file verification is now stricter,
    systemd-networkd by default will not add routes for wireguard AllowedIPs=
    systemd nss modules shouldn't try to read kernel command line
  - Don't do sd-boot updates when not installed (#2038289)
  - xdg-autostart-service will ignore ExecCondition= when the helper binary is missing
  - kernel-install does cleanup better (#2016630)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 250.3-3
changelog:
  - Add pam_namespace to systemd-user pam config (rhbz#2053098)
  - Drop 20-grubby.install plugin for kernel-install (rhbz#2033646)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 250.3-4
changelog:
  - Drop scriptlet for handling nobody user upgrades from Fedora <28
  - Specify owner of /var/log/journal as root in the rpm listing (#2018913)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 250.3-5
changelog:
  - Move part of %post scriptlet for resolved to %posttrans (#2018913)
  - Specify owner of utmp/wtmp/btmp/lastlog as root in the rpm listing


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 250.3-6.1
changelog:
  - New release for v250
  - Sync latest changes from Fedora rawhide
  - Use source archives from https://pagure.io/centos-sig-hyperscale/systemd
    instead of github. All Hyperscale patches have moved to pagure
  - Added llvm-toolset to BuildRequires (for llvm-strip) to make build succeed
  - Enable p11kit and pwquality options in the systemd build


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 250.3-6.3
changelog:
  - Move systemd-network-generator and networkd man pages to networkd package to
    avoid conflicts with systemd-extras from EPEL


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 250.3-6.4
changelog:
  - Make sure our packages override the corresponding backports from EPEL.
  - Modify the networkd fix from the previous release so that it can be merged
    into the c9s branch.


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 250.3-6.6
changelog:
  - Fixed bug in networkd changes to split-files.py that caused the
    /etc/systemd/network to get moved to the networkd package (which we don't
    want because that's where link files for udev are also stored).


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 250.3-6.7
changelog:
  - Backported https://github.com/systemd/systemd/pull/23254 and
    https://github.com/systemd/systemd/pull/23205
  - Move more files to the networkd package


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 251~rc3-1
changelog:
  - Update to latest upstream prerelease (just various bugfixes)
  - Udev rule processing should be now fixed (#2076459)
  - Run sysusers and hwdb and catalog updates also if systemd is not running
    (#2085481)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 251-1
changelog:
  - Latest upstream release, for details see
    https://raw.githubusercontent.com/systemd/systemd/v251/NEWS.
  - Fixes for #2071034, #2084955, #2086166.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 251.1-2
changelog:
  - Supress errors from useradd/groupadd (#2090129)
  - Drop "v" from the version tag, add tilde back
  - The tag for shared-libraries is reintroduced (#1906010)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 251.2-1
changelog:
  - A bunch of man page fixes, a few memory-access correctness fixes,
    remove excessive messages to utmp sessions, suppress messages about
    bpf setup in the user manager (#2084955)


author: Javier Martinez Canillas <javierm@redhat.com> - 2.0.0-1
changelog:
  - Download the distributed tarball instead of the source code tarball
  - Update URLs to point to the new project location
  - Update to 2.0.0 release


author: Mark Wielaard <mjw@fedoraproject.org>
changelog:
  - Add valgrind-3.18.1-ppc64-cmov.patch
  - Add valgrind-3.18.1-arm64-atomics-rdm.patch
  - Add valgrind-3.18.1-rust-demangle-suffix.patch


author: Michal Ruprich <mruprich@redhat.com> - 1:3.6.0-1
changelog:
  - New version 3.6.0
  - Fix for CVE-2021-39920, CVE-2021-39921, CVE-2021-39922, CVE-2021-39923, CVE-2021-39924, CVE-2021-39925, CVE-2021-39926, CVE-2021-39928, CVE-2021-39929


author: Michal Ruprich <mruprich@redhat.com> - 1:3.6.1-1
changelog:
  - New version 3.6.1
  - Fix for CVE-2021-4181, CVE-2021-4182, CVE-2021-4183, CVE-2021-4184, CVE-2021-4185, CVE-2021-4190


author: Michal Ruprich <mruprich@redhat.com> - 1:3.6.2-1
changelog:
  - New version 3.6.2
  - Fix for CVE-2022-0581, CVE-2022-0582, CVE-2022-0583, CVE-2022-0585, CVE-2022-0586


