# changelog

author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.2-1
changelog:
  - Fix regression with unavailable optional commands
  - All missing backend messages should be warnings
  - Individual calls for missing restore commands
  - Only one authenticate call for add and remove options and also sequences
  - New service RH-Satellite-6
  - Fixed selinux-policy conflict version for RHEL-7


author: Thomas Woerner <twoerner@redhat.com> - 0.4.3.3-1
changelog:
  - Fix CVE-2016-5410: Firewall configuration can be modified by any logged in
    user
  - firewall/server/firewalld: Make getXSettings and getLogDenied CONFIG_INFO
  - Update AppData configuration file.
  - tests/firewalld_rich.py: Use new import structure and FirewallClient classes
  - tests/firewalld_direct.py: Use new import structure
  - tests: firewalld_direct: Fix assert to check for True instead of False
  - tests: firewalld_config: Fix expected value when querying the zone target
  - tests: firewalld_config: Use real nf_conntrack modules
  - firewalld.spec: Added comment about make call for %build
  - firewall-config: Use also width_request and height_request with default size
  - Updated firewall-config screenshot
  - firewall-cmd: Fixed typo in help output (RHBZ#1367171)
  - test-suite: Ignore stderr to get default zone also for missing firewalld.conf
  - firewall.core.logger: Warnings should be printed to stderr per default
  - firewall.core.fw_nm: Ignore NetworkManager if NM.Client connect fails
  - firewall-cmd, firewallctl: Gracefully fail if SystemBus can not be aquired
  - firewall.client: Generate new DBUS_ERROR if SystemBus can not be aquired
  - test-suite: Do not fail on ALREADY_ENABLED --add-destination tests
  - firewall.command: ALREADY_ENABLED, NOT_ENABLED, ZONE_ALREADY_SET are warnings
  - doc/xml/firewalld.dbus.xml: Removed undefined reference
  - doc/xml/transform-html.xsl.in: Fixed references in the document
  - doc/xml/firewalld.{dbus,zone}.xml: Embed programlisting in para
  - doc/xml/transform-html.xsl.in: Enhanced html formatting closer to the man page
  - firewall: core: fw_nm: Instantiate the NM client only once
  - firewall/core/io/*.py: Do not traceback on a general sax parsing issue
  - firewall-offline-cmd: Fix --{add,remove}-entries-from-file
  - firewall-cmd: Add missing action to fix --{add,remove}-entries-from-file
  - firewall.core.prog: Do not output stderr, but return it in the error case
  - firewall.core.io.ifcfg.py: Fix ifcfg file reader and writer (RHBZ#1362171)
  - config/firewall.service.in: use KillMode=mixed
  - config/firewalld.service.in: use network-pre.target
  - firewall-config: Add missing gettext.textdomain call to fix translations
  - Add UDP to transmission-client.xml service
  - tests/firewall-[offline-]cmd_test.sh: Hide errors and warnings
  - firewall.client: Fix ALREADY_ENABLED errors in icmptype destination calls
  - firewall.client: Fix NOT_ENABLED errors in icmptype destination calls
  - firewall.client: Use {ALREADY,NOT}_ENABLED errors in icmptype destination
    calls
  - firewall.command: Add the removed FirewallError handling to the action
    (a17ce50)
  - firewall.command: Do not use query methods for sequences and also single
    options
  - Add missing information about MAC and ipset sources to man pages and help
    output
  - firewalld.spec: Add BuildRequires for libxslt to enable rebuild of man pages
  - firewall[-offline]-cmd, firewallctl, firewall.command: Use sys.{stdout,stderr}
  - firewallctl: Fix traceback if not connected to firewalld
  - firewall-config: Initialize value in on_richRuleDialogElementChooser_clicked
  - firewall.command: Convert errors to string for Python3
  - firewall.command: Get proper firewall error code from D-BusExceptions
  - firewall-cmd: Fixed traceback without args
  - Add missing service files to Makefile.am
  - shell-completion: Add shell completion support for
    --{get,set}--{description,short}
  - Updated RHEL-7 selinux-policy and squid conflict


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4-1
changelog:
  - Fix dist-check
  - src/Makefile.am: Install new helper files
  - config/Makefile.am: Install helpers
  - Merged translations
  - Updated translations from zanata
  - firewalld.spec: Adapt requires for PyQt5
  - firewall-applet: Fix fromUTF8 for python2 PyQt5 usage
  - firewall-applet: Use PyQt5
  - firewall-config: New nf_conntrack_select dialog, use nf_conntrack_helpers D-Bus property
  - shell-completion/bash/firewall-cmd: Updates for helpers and also some fixes
  - src/tests/firewall-[offline-]cmd_test.sh: New helper tests, adapted module tests for services
  - doc/xml/seealso.xml: Add firewalld.helper(5) man page
  - doc/xml/seealso.xml: Add firewalld.ipset(5) man page
  - Fixed typo in firewalld.ipset(5) man page
  - Updated firewalld.dbus(5) man page
  - New firewalld.helper(5) man page
  - doc/xml/firewall-offline-cmd.xml: Updated firewall-offline-cmd man page
  - doc/xml/firewall-cmd.xml: Updated firewall-cmd man page
  - firewall-offline-cmd: New support for helpers
  - firewall-cmd: New support for helpers
  - firewall.command: New check_helper_family, check_module and print_helper_info methods
  - firewall.core.fw_test: Add helpers also to offline backend
  - firewall.server.config: New AutomaticHelpers property (rw)
  - firewall.server.config: Fix an dict size changed error for firewall.conf file changes
  - firewall.server.config: Make LogDenied property readwrite to be consistent
  - Some renames of nf_conntrack_helper* functions and structures, helpers is a dict
  - firewall.core.fw: Properly check helper setting in set_automatic_helpers
  - firewall.errors: Add missing BUILTIN_HELPER error code
  - No extra interface for helpers needed in runtime, dropped DBUS_INTERFACE_HELPER
  - firewall.server.firewalld: Drop unused queryHelper D-Bus method
  - New helpers Q.931 and RAS from nf_conntrack_h323
  - firewall.core.io.helper: Allow dots in helper names, remove underscore
  - firewall.core.io.firewalld_conf: Fixed typo in FALLBACK_AUTOMATIC_HELPERS
  - firewall-[offline-]cmd: Use sys.excepthook to force exception_handler usage always
  - firewall.core.fw_config: new_X methods should also check builtins
  - firewall.client: Set helper family to "" if None
  - firewall.client: Add missing module string to FirewallClientHelperSettings.settings
  - config/firewalld.conf: Add possible values description for AutomaticHelpers
  - helpers/amanda.xml: Fix typo in helper module
  - firewall-config: Added support for helper module setting
  - firewall.client: Added support for helper module setting
  - firewall.server.config_helper: Added support for helper module setting
  - firewall.core.io.service, firewall.server.config_service: Only replace underscore by dash if module start with nf_conntrack_
  - firewall.core.fw_zone: Use helper module instead of a generated name from helper name
  - helpers: Added kernel module
  - firewall.core.io.helper: Add module to helper
  - firewall-cmd: Removed duplicate --get-ipset-types from help output
  - firewall.core.fw_zone: Add zone bingings for PREROUTING in the raw table
  - firewall.core.ipXtables: Add PREROUTING default rules for zones in raw table
  - firewall-config: New support to handle helpers, new dialogs, new helper tab, ..
  - config/org.fedoraproject.FirewallConfig.gschema.xml.in: New show-helpers setting
  - firewall.client: New helper management for runtime and permanent configuration
  - firewall.server.firewalld: New runtime helper management, new nf_conntrack_helper property
  - firewall.server.config_service: Fix module name handling (no nf_conntrack_ prefix needed)
  - firewall.server.config: New permanent D-Bus helper management
  - New firewall.server.config_helper to provide the permanent D-Bus interface for helpers
  - firewall.core.fw_zone: Use helpers fw.nf_conntrack_helper for services using helpers
  - firewall.core.fw: New helper management, new _automatic_helpers and nf_conntrack_helper settings
  - firewall.core.fw_config: Add support for permanent helper handling
  - firewall.core.io.service: The module does not need to start with nf_conntrack_ anymore
  - firewall.functions: New functions to get and set nf_conntrack_helper kernel setting
  - firewall.core.io.firewalld_conf: New support for AutomaticHelpers setting
  - firewall.config.dbus: New D-Bus definitions for helpers, new DBUS_INTERFACE_REVISION 12
  - New firewall.core.fw_helper providing FirewallHelper backend
  - New firewall.core.helper with HELPER_MAXNAMELEN definition
  - config/firewalld.conf: New AutomaticHelpers setting with description
  - firewall.config.__init__.py.in: New helpers variables
  - firewalld.spec: Add new helpers directory
  - config/Makefile.am: Install new helpers
  - New helper configuration files for amanda, ftp, irc, netbios-ns, pptp, sane, sip, snmp and tftp
  - firewall.core.io.helper: New IO handler for netfilter helpers
  - firewall.errors: New INVALID_HELPER error code
  - firewall.core.io.ifcfg: Use .bak for save files
  - firewall-config: Set internal log_denied setting after changing
  - firewall.server.config: Copy props before removing items
  - doc/xml/firewalld.ipset: Replaced icmptype name remains with ipset
  - firewall.core.fw_zone: Fix LOG rule placement for LogDenied
  - firewall.command: Use "source-ports" in print_zone_info
  - firewall.core.logger: Use syslog.openlog() and syslog.closelog()
  - firewall-[offline-]cmd man pages: Document --path-{zone,icmptype,ipset,service}
  - firewall-cmd: Enable --path-{zone,icmptype,service} options again
  - firewall.core.{ipXtables,ebtables}: Copy rule before extracting items in set_rules
  - firewall.core.fw: Do not abort transaction on failed ipv6_rpfilter rules
  - config/Makefile.am: Added cfengine, condor-collector and smtp-submission services
  - Makefile.am: New dist-check used in the archive target
  - src/Makefile.am: Reordered nobase_dist_python_DATA to be sorted
  - config/Makefile.am: New CONFIG_FILES variable to contain the config files
  - Merge pull request #150 from hspaans/master
  - Merge pull request #146 from canvon/bugfix/spelling
  - Merge pull request #145 from jcpunk/condor
  - Command line tools man pages: New section about sequence options and exit codes
  - Creating service file for SMTP-Submission.
  - Creating service file for CFEngine.
  - Fix typo in documentation: iptables mangle table
  - Only use sort on lists of main items, but not for item properties
  - firewall.core.io.io_object: import_config should not change ordering of lists
  - firewall.core.fw_transaction: Load helper modules in FirewallZoneTransaction
  - firewall.command: Fail with NOT_AUTHORIZED if authorization fails (RHBZ#1368549)
  - firewall.command: Fix sequence exit code with at least one succeeded item
  - Add condor collector service
  - firewall-cmd: Fixed --{get,set}-{description,short} for permanent zones
  - firewall.command: Do not use error code 254 for {ALREADY,NOT}_ENABLED sequences


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.1-1
changelog:
  - firewall-config: Use proper source check in sourceDialog (fixes issue#162)
  - firewallctl: New support for helpers
  - Translation updates


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.2-1
changelog:
  - New firewalld-selinux sub package delivering the SELinux policy module for
    firewalld (RHBZ#1396765) (RHBZ#1394625) (RHBZ#1394578) (RHBZ#1394573)
    (RHBZ#1394569)
  - New firewalld release 0.4.4.2:
    - firewalld.spec: Added helpers and ipsets paths to firewalld-filesystem
    - firewall.core.fw_nm: create NMClient lazily
    - Do not use hard-coded path for modinfo, use autofoo to detect it
    - firewall.core.io.ifcfg: Dropped invalid option warning with bad format
      string
    - firewall.core.io.ifcfg: Properly handle quoted ifcfg values
    - firewall.core.fw_zone: Do not reset ZONE with ifdown
    - Updated translations from zanata
    - firewall-config: Extra grid at bottom to visualize firewalld settings


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.2-2
changelog:
  - Dropping firewalld-selinux package again as the required fix made it into
    selinux-policy packages for F-23+, updated selinux-policy version conflicts


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.3-1
changelog:
  - Rebase to firewalld-0.4.4.3
    http://www.firewalld.org/2017/02/firewalld-0-4-4-3-release
  - Speed up of large file loading
  - Support for more ipset types
  - Speed up of adding or removing entries for ipsets from files
  - Support icmp-type usage in rich rules
  - Support for more icmp types
  - Support for h323 conntrack helper
  - New services
  - Code cleanup and several other bug fixes
  - Translation updates


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.4-1
changelog:
  - Rebase to firewalld-0.4.4.4
    http://www.firewalld.org/2017/03/firewalld-0-4-4-4-release
  - Drop references to fedorahosted.org from spec file and Makefile.am, use
    archive from github
  - Fix inconsistent ordering of rules in INPUT_ZONE_SOURCE (issue#166)
  - Fix ipset overloading from /etc/firewalld/ipsets
  - Fix permanent rich rules using icmp-type elements (RHBZ#1434594)
  - firewall-config: Deactivate edit, remove, .. buttons if there are no items
  - Check if ICMP types are supported by kernel before trying to use them
  - firewall-config: Show invalid ipset type in the ipset configuration dialog
    in a special label


author: Thomas Woerner <twoerner@redhat.com> - 0.4.4.5-1
changelog:
  - Rebase to firewalld-0.4.4.5
    http://www.firewalld.org/2017/06/firewalld-0-4-4-5-release
    - Fix build from spec
    - Fix –remove-service-from-zone option (RHBZ#1438127)
    - Support sctp and dccp in ports, source-ports, forward-ports, helpers and
      rich rules (RHBZ#1429808)
    - firewall-cmd: Fix –{set,get}-{short,description} for zone (RHBZ#1445238)
    - firewall.core.ipXtables: Use new wait option for restore commands if
      available
    - New services for oVirt:
      ctdb, ovirt-imageio, ovirt-storageconsole, ovirt-vmconsole and nrpe
    - Rename extension for policy choices (server and desktop) to .policy.choice
      (RHBZ#1449754)
    - D-Bus interfaces: Fix GetAll for interfaces without properties
      (RHBZ#1452017)
    - Load NAT helpers with conntrack helpers (RHBZ#1452681)
    - Translation updates
  - Additional upstream patches:
    - Rich-rule source validation (d69b7cb)
    - IPv6 ICMP type only rich-rule fix (cf50bd0)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.4.4.5-4
changelog:
  - Python 2 binary package renamed to python2-firewall
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Eric Garver <egarver@redhat.com> - 0.6.1-4
changelog:
  - backports for new failed state if startup fails
  - backports to use explicit RETURN on user defined ebtables chains
  - backports to fix nftables AUDIT log support


author: Eric Garver <egarver@redhat.com> - 0.6.1-5
changelog:
  - python3-firewalld can get by with python3-gobject-base
  - firewall-config can get by with python3-qt5-base


author: Eric Garver <egarver@redhat.com> - 0.6.3-4
changelog:
  - backport recent stable fixes
  - backport fix for lost NM interfaces during reload
  - backport rich rule priorities
  - backport fix for set entries not applied
  - update translations


author: Eric Garver <egarver@redhat.com> - 0.7.0-3
changelog:
  - backport patch to show service includes in service output
  - backport patches to fix dbus API break


author: Eric Garver <egarver@redhat.com> - 0.8.2-2
changelog:
  - fix(cli): add ipset type hash:mac is incompatible with the family parameter
  - fix(cli): add --zone is an invalid option with --direct
  - fix: update dynamic DCE RPC ports in freeipa-trust service
  - fix: core: rich: Catch ValueError on non-numeric priority values
  - fix(rich): icmptypes with one family
  - fix(direct): rule in a zone chain
  - plus additional upstream stable fixes


author: Eric Garver <egarver@redhat.com> - 0.8.2-3
changelog:
  - fix(nftables): packet marks with masks
  - fix(nftables): icmp types with code == 0
  - fix(rich icmptype): verify rule and icmptype families
  - fix(zone): cache rule_str for rich rules
  - improvement(service): IPsec: Update description and add TCP port 4500
  - feat(service): add collectd service
  - feat(service): Add rpc-rquotad.service


author: Akira TAGOH <tagoh@redhat.com> - 2.13.0-6
changelog:
  - Add Suggests: dejavu-sans-fonts to address pulling the unpredicted
    font package as dependency. (#1321551)


author: Akira TAGOH <tagoh@redhat.com> - 2.13.1-3
changelog:
  - Stop cleaning up .uuid file even when a directory is empty.
    resolves: rhbz#1653171
  - Use Rachana instead of Meera for serif subsitution.
    resolves: rhbz#1650491


author: Jan Safranek <jsafrane@redhat.com> - 1.0.1:1
changelog:
  - Updated to freeipmi-1.0.1, see announce at
    http://lists.gnu.org/archive/html/freeipmi-users/2011-01/msg00006.html
  - Configuration files moved from /etc/ to /etc/freeipmi/. Support legacy config
    files for backwards compatibility.
  - More detailed release information can be found in the NEWS file.


author: Jan Safranek <jsafrane@redhat.com> - 1.0.2-1
changelog:
  - Updated to freeipmi-1.0.2, see announce at
    http://lists.gnu.org/archive/html/freeipmi-users/2011-02/msg00027.html


author: Jan Safranek <jsafrane@redhat.com> - 1.0.3-1
changelog:
  - Updated to freeipmi-1.0.3, see announce at
    http://lists.gnu.org/archive/html/freeipmi-users/2011-03/msg00017.html


author: Jan Safranek <jsafrane@redhat.com> - 1.2.1-1
changelog:
  - Reworked RPM scriptlets to use systemd-rpm macros (#850117).
  - Updated to freeipmi-1.2.1:
   - Support new ipmiseld daemon, a daemon that regularly polls the SEL
     and stores the events to the local syslog.
   - In ipmipower, support --oem-power-type option to support OEM
     specific power control operations.  Included in this support were
     the follow changes to ipmipower:
     - Support initial OEM power type of C410X.
     - Re-architect to allow input of extra information for an OEM power
       operation via the '+' operator after the hostname.
     - Re-architect to allow input of target hostname multiple times
       under OEM power cases.
     - Re-architect to allow serialization of power control operations to
       the same host.
   - Globally in tools, support --target-channel-number and
     --target-slave-address to specify specific targets.
   - Globally in tools, support ability to specify alternate port via
     optional [:port] in hostname or host config.
   - In ipmi-fru, support --bridge-fru option to allow reading FRU entries
     from satellite controllers.
   - In bmc-config, add configuration support for
     Maximum_Privilege_Cipher_Suite_Id_15 under RMCPplus_Conf_Privilege.
   - Globally support Cipher Suite ID 15 and 16 based on comments from
     Intel.
   - In ipmi-sensors, support --output-sensor-thresholds, to allow
     outputting of sensor thresholds in default output for scripting.
   - In ipmi-sel, support new --post-clear option.
   - In bmc-device, support new --set-sensor-reading-and-event-status
     option.
   - In ipmi-oem, support additional Intel Node Manager commands,
     including:
     - get-node-manager-capabilities
     - node-manager-policy-control 
     - get-node-manager-policy
     - set-node-manager-policy
     - remove-node-manager-policy
     - get-node-manager-alert-thresholds
     - set-node-manager-alert-thresholds
     - get-node-manager-policy-suspend-periods
     - set-node-manager-policy-suspend-periods
     - set-node-manager-power-draw-range
   - In ipmi-oem, support Wistron OEM commands extensions.
   - In ipmi-sel, support Wistron OEM SEL interpretations.
   - In ipmi-fru, support Wistron OEM FRU records.
   - In ipmi-pef-config, support configuration volatile Alert String 0
     and Lan Alert Destination 0.


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.2-1
changelog:
  - Updated to freeipmi-1.2.2:
   - Support new --sol-payload-instance and --deactivate-all-instances
     options in ipmiconsole.
   - Fix ipmiseld compile issue with -Werror=format-security.


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.3-1
changelog:
  - Updated to freeipmi-1.2.3:
   - In ipmi-oem, support new Dell Poweredge R720 OEM commands extensions,
     including:
    - get-nic-selection-failover
    - set-nic-selection-failover
    - power-monitoring-over-interval
    - power-monitoring-interval-range
    - get-last-post-code
   - In ipmi-oem, update active-lom-status for Dell Poweredge R720.
   - In ipmi-oem, support new Dell Poweredge R720 get-system-info option
     'cmc-info'.
   - In ipmi-oem, Dell get-system-info "slot-number" key changed to
     "blade-slot-info".  Legacy option still supported.
   - In ipmi-sel, support Dell Poweredge R720 OEM SEL extensions.
   - In all tools, support nochecksumcheck workaround option.
   - In all daemons (ipmiseld, ipmidetectd, bmc-watchdog), check for
     syscall errors during daemon setup.

   - In libfreeipmi, support Dell R720 OEM extension intepretations.
   - In libfreeipmi, libipmimonitoring, and libipmiconsole, support
     NO_CHECKSUM_CHECK workaround flag.
   - In libipmiconsole, IPMICONSOLE_DEBUG_FILE logs debug to files in
     current working directory and not /var/log.  PID is also appended to
     debug files.


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.4-1
changelog:
  - Updated to freeipmi-1.2.4:
   - Support Supermicro X9DRI-LN4F+ OEM sensors and events.
   - Fix output corner case for "session-based" channels.
   - Fix ipmi-oem set-power-restore-delay corner case in time settings.
   - Fix ipmiseld memleak.
   - Fix libfreeipmi potential fd leak when generating random numbers.
   - Fix libfreeipmi error output bug in RMCP interface.
   - Fix several minor corner cases discovered by static code analysis.


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.5-1
changelog:
  - Updated to freeipmi-1.2.5:
   - Support Supermicro X9SPU-F-O OEM sensors and events.
   - Support Supermicro X9DRI-LN4F+ OEM intepretations (previously
     forgotten).


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.6-1
changelog:
  - Updated to freeipmi-1.2.6
   - Support HP Proliant DL160 G8 OEM sensors.
   - Support Supermicro X9SCM-iiF OEM sensors and events.
   - Support output of temperature sampling period to ipmi-dcmi.
   - Clarify error message when SOL session cannot be stolen in
     ipmiconsole/libipmiconsole.
   - Fix dcmi rolling average time period output error
   - Fix ipmi-dcmi output errors with --get-dcmi-sensor-info.
   - Fix corner case in calculation of confidentiality pad length with
     AES-CBC-128 encryption.  Incorrect pad effects some vendor firmware
     implementations.
   - Send IPMI 2.0 packets differently than IPMI 1.5 packets, as the
     former does not require legacy pad data to be appended to payloads.
   - Fix Intel OEM SEL buffer overflow.
   - Fix out of trunk source build.
   - Support new ipmi_rmcpplus_sendto() and ipmi_rmcpplus_recvfrom()
     functions.
   - Support new HP Proliant DL160 G8 OEM sensor events.


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.6-2
changelog:
  - spec update by Christopher Meng <rpm@cicku.me>
  - hardened build flags should include PIE also for bmc-watchdog.


author: Ales Ledvinka <aledvink@redhat.com> - 1.2.9-1
changelog:
  - Updated to upstream freeipmi-1.2.9
   - Fix threshold output corner case in ipmi-sensors.
   - Fix invalid declaration in libipmimonitoring header.
   - Fix older compiler build problems.
   -
   - Fix portability build bug on ARM systems.
   - Add 'internal IPMI error' troubleshooting to manpages.
   - Fix bmc-info corner case on Bull 510 systems.


author: Ales Ledvinka <aledvink@redhat.com> - 1.3.1-1
changelog:
  - Updated to freeipmi-1.3.1
   - Timestamp UTC/localtime reporting compliant with specification.
     Remote timestamp expected to be in localtime already.
   - Timestamp reporting options --utc-to-localtime,
     --localtime-to-utc and --utc-offset.
   - In ipmi-fru, support output of DDR3 SDRAM modules.
   - In ipmi-fru, support output of new FRU multirecords, most notably
     extended DC output and extended DC load (per FRU Revision 1.2).
   - Support additional chassis types (per FRU Revision 1.2 update).
   - and more


author: Ales Ledvinka <aledvink@redhat.com> - 1.3.2-1
changelog:
  - Updated to freeipmi-1.3.2
   - Update FreeIPMI tools to check libfreeipmi API error codes
     correctly.
   - Update ipmi-api.h to list mappings of IPMI completion codes and
     RMCPPlus codes to API Error codes.


author: Ales Ledvinka <aledvink@redhat.com> - 1.3.3-1
changelog:
  - Updated to freeipmi-1.3.3
   - Add support for intelnm get-node-manager-alert-destination and
     set-node-manager-alert-destination in ipmi-oem.
   - Under very verbose mode, ipmi-sel will now record types for OEM
     records.  This should allow OEM parses outside of FreeIPMI to more
     effectively parse OEM specific SEL records.
   - Fix big endian portability bugs.


author: Ales Ledvinka <aledvink@redhat.com> - 1.3.4-2
changelog:
  - Module alias dependencies.
  - Changes for previous 1.3.4 update:
   - Support 'solchannelsupport' workraound in ipmiconsole /
     IPMICONSOLE_WORKAROUND_SKIP_CHANNEL_PAYLOAD_SUPPORT workaround flag in
     libipmiconsole.
   - Fix SDR cache workaround for motherboards with invalid SDR record
     counts listed.
   - Workaround Supermicro bug in bmc-watchdog. 
   - Fix error checks in sensor decoding functions, leading to possible
     problems in ipmi-sensors-config.
   - Update documentation with additional workarounds for motherboards.


author: Ales Ledvinka <aledvink@redhat.com> - 1.4.1-1
changelog:
  - Updated to upstream freeipmi-1.4.1
   - Support new tool ipmi-config.  Ipmi-config is a consolidated
     configuration tool implementing everything that was previously in
     bmc-config, ipmi-pef-config, ipmi-sensors-config, and
     ipmi-chassis-config.
     - The consolidated tool will allow users to checkout, commit, and
       diff sections/fields across the four former tools using only one
       tool.
     - The consolidated tool will also allow users to checkout, commit,
       and diff new sections/fields not yet covered in the four former
       tools.
     - Legacy scripts for bmc-config, ipmi-pef-config,
       ipmi-sensors-config, and ipmi-chassis-config will point to the new
       tool with all appropriate options to ensure full backwards
       compatability.
     - The ipmi-pef-config --info option has been made legacy.  It is
       still supported but no longer advertised.
   - Support Intel Data Center Host Interface / Management Engine as
     optional driver type for in-band communication.
     - Typically these are loaded as /dev/dcmi and /dev/mei drivers.
     - This driver is identified as the "inteldcmi" type, as it is
       specific to Intel systems.
   - Support OEM extensions for Intel Windmill, Wiwynn Windmill, and
     Quanta Winterfell motherboards in ipmi-sel and ipmi-sensors.  These
     motherboards are also know as motherboards for the Open Compute
     Project (OCP).
   - Support DCMI configuration in ipmi-config.
   - Update FreeIPMI for changes in IPMI 2.0 Errata 5.  Include are:
     - New sensor events for Power Supply and OS Boot sensors.  New
       events are supported in all areas, ipmi-sensors, ipmi-sel,
       libipmimonitoring, etc.
     - PEF now supports 255 filter numbers, not 127.  This is supported
       in ipmi-config (formerly ipmi-pef-config).
     - Support get/set of new System Info Parameters Present OS Version,
       BMC URL, and Base OS/Hypervisor URL.  This is supported in
       bmc-info and bmc-device.
   - Update ipmi-oem Intel Node Manager OEM commands for changes listed
     in Intelligent Power Node Manager 2.0 specification.
     - Due to changes in the specification, minor text changes may exist
       in some output from intelnm OEM commands.
   - Update ipmi-sel to support new SEL events in Intelligent Power Node
     Manager 2.0 specification.
   - Support 'serialalertsdeferred' workaround in ipmiconsole.
   - Support 'solpacketseq' workaround in ipmiconsole.
   - Fix portability issues for Apple / OS X.
   - Fix bmc-info output of GUID, format was output with two bytes out of
     order.
     - May affect scripts parsing and using the GUID.
   - Bmc-info now supports --get-system-guid and outputs the System GUID
     as well as the Device GUID by default.
     - The Device GUID is not prefixed with the text "Device GUID"
       instead of just "GUID".  Any scripts scripting against this will
       need to be adjusted.
   - Bmc-info now supports a workaround of 'guidformat' to read the GUID
     with a format a number of vendors have incorrectly used.
   - In ipmi-config's sensor configuration, decimal values that cannot be
     encoded accurately now report a clearer error message.


author: Ales Ledvinka <aledvink@redhat.com> - 1.4.3-1
changelog:
  - Updated to upstream freeipmi-1.4.3
   - In ipmi-oem, support Supermicro get-power-supply-status and
     get-pmbus-power-supply-status commands.
   - Support 'ipmiping' workaround in ipmipower.
   - Minor documentation updates.


author: Ales Ledvinka <aledvink@redhat.com> - 1.4.6-1
changelog:
  - Updated to upstream freeipmi-1.4.6
   - In ipmi-fru, support output of DDR4 SDRAM modules.
   - Fix EFI probing on non IA64 systems.
   - Fix corner case in ipmi-raw w/ standard input or --file and empty lines.
   - Fix parsing corner case in ipmi-chassis.
   - Support SSIF bridging.
   - Fix libipmiconsole calculation bug w/ SOL character send size.
   - Support Supermicro H8DGU and H8DG6 OEM sensors and events.
   - Minor documentation updates.


author: Christopher Meng <rpm@cicku.me> - 1.4.8-1
changelog:
  - Updated to freeipmi-1.4.8
   - Fix segfault in crypt code with libgcrypt versions >= 1.6.0.
   - Fix --fanout command line parse bug.
   - Fix typ - from FRU spec, language "Tegulu" is actually "Telugu".
   - Fix typ - in SEL session output, "Invalid Username of Password" to
    "Invalid Username or Password".
   - Loop on select() call if interrupted by EINTR in openipmi, ssif, and
    sunbmc inband drivers.
   - Fix integer overflow bug in ipmi-config when configure vlan ID > 255.
   - Add workaround for ipmi-config issue on Supermicr - X10DDW-i.
   - Fix error handling bug in bmc-info.


author: Josef Ridky <jridky@redhat.com> - 1.5.6-1
changelog:
  - New upstream release 1.5.6 (#1468062)
  - Fix issue with capital letters in commands in manpage (#1468984)


author: Pavel Cahyna <pcahyna@redhat.com> - 1.6.14-2
changelog:
  - Apply upstream patch 41d0d70f
    ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type


author: Marek Kasik <mkasik@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Test bitmap size earlier for PNGs
  - Fix memory leak in pngshim.c
  - Enable man pages for demos
  - Resolves: #1887084, #1890211


author: Akira TAGOH <tagoh@redhat.com> - 2.10.4-3
changelog:
  - Enable HarfBuzz support
  - Add bootstrap without HarfBuzz
  - Resolves: #1853937
  - Resolves: #1906714


author: Pavel Reichl <preichl@redhat.com> - 2.9.7-16
changelog:
  - Back-port max_pages support,
  - caching symlinks in kernel page cache,
  - and in-kernel readdir caching
  - Fixed rhbz#2080000


author: Thorsten Leemhuis <fedora[AT]leemhuis[DOT]info> - 2.4.1-2
changelog:
  - Rename packages a bit
  - use makedev.d/40-fuse.nodes
  - fix /sbin/mount.fuse
  - Use a fuse group to restict access to fuse-filesystems


author: Thorsten Leemhuis <fedora[AT]leemhuis[DOT]info> - 2.4.1-3
changelog:
  - Add README.fedora
  - Add hint to README.fedora and that you have to be member of the group "fuse"
    in the description
  - Use groupadd instead of fedora-groupadd


author: Tom "spot" Callaway <tcallawa@redhat.com> 2.7.0-2
changelog:
  - redefine exec_prefix to /
  - redefine bindir to /bin
  - redefine libdir to %{_lib}
  - don't pass --disable-static to configure
  - manually rm generated static libs


author: Richard Hughes <richard@hughsie.com> 1.5.5-1
changelog:
  - Rebase package to include support for latest OEM hardware and to
    support deploying UEFI SecureBoot dbx updates.
  - Resolves: #1870811


author: Richard Hughes <richard@hughsie.com> 1.5.5-2
changelog:
  - Do not invalidate all remote timestamps during package install to fix rpm -V.
  - Backport some important high priority fixes from upstream.
  - Resolves: #1926382


author: Richard Hughes <richard@hughsie.com> 1.5.9-3
changelog:
  - Rebase to include the SBAT metadata section to allow fixing BootHole
  - Resolves: rhbz#1933012
  - Resolves: rhbz#1932953
  - Resolves: rhbz#1932909
  - Resolves: rhbz#1932882
  - Resolves: rhbz#1932579
  - Resolves: rhbz#1932553
  - Resolves: rhbz#1932423


author: Richard Hughes <richard@hughsie.com> 1.7.1-1
changelog:
  - New upstream release
  - Backport upstream changes
  - Include support for Dell TBT4 Docking stations
  - Resolves: rhbz#1969472
  - Resolves: rhbz#1976408


author: Richard Hughes <richard@hughsie.com> 1.7.1-2
changelog:
  - Disable the Logitech bulkcontroller plugin to avoid adding a dep to protobuf-c
    which lives in AppStream, not BaseOS.
  - Resolves: rhbz#2029333


author: Richard Hughes <richard@hughsie.com> 1.7.4-1
changelog:
  - Include support for Lenovo TBT4 Docking stations
  - Do not cause systemd-modules-load failures
  - Resolves: rhbz#2038258
  - Resolves: rhbz#2037294


author: Charles R. Anderson <cra@wpi.edu> - 2008_10_13-10
changelog:
  - Patch to apply CFLAGS/LDFLAGS to final link so RPM_OPT_FLAGS are picked up (rhbz#1548426)
  - Use CC=gcc explicitly
  - Regenerate fxload-noa3load.patch


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 4.1.4-7
changelog:
  - Revert previous change of adding 'awk*' symlinks for info pages (bug #1486924)
  - Added patch to correctly fix the info pages issue (bug #1486924)
  - specfile content refactored for better readability
  - Package now provides its ABI version via gawk(abi)
  - Added test for usage of correct gawk(abi) into %check section


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 4.2.0-1
changelog:
  - Update to latest stable release from upstream [new API version - 2.0]
  - Added latest relevant patches from upstream's gawk-4.2-stable branch


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 4.2.0-2
changelog:
  - 'noarch' removed from *-devel subpackage
  - added arch requirement for *-devel subpackage
  - updated the build process to use %make_build macro


author: <fjanus@redhat.com> - 1.18-2
changelog:
  - Add backward compatibility patch
  - Resolves: #2097704
  - Backport from upstream commit: 00ba17479ff31c6825f0e6f28b965f11525e83f6


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 1:1.18-2.0.1
changelog:
  - remove char *parseopt_program_doc and *parseopt_program_args in parseopt.c for compatible gcc10 build


author: Tomas Popela <tpopela@redhat.com> - 2.42.6-3
changelog:
  - Backport fixes for CVE-2021-46829 and CVE-2021-44648
  - Resolves: rhbz#2115213
  - Resolves: rhbz#2044346


author: Richard Hughes <rhughes@redhat.com> - 2.31.3-2
changelog:
  - Split out the modules as a subpackage to allows us to depend on the core
    library on the cloud image and not drag every image loader known to man.


author: Richard Hughes <rhughes@redhat.com> - 2.31.3-3
changelog:
  - Split out the xlib code as a subpackage to allows us to depend on the core
    library on the cloud image and not depends on half of Xorg.


author: Kalev Lember <klember@redhat.com> - 2.38.0-1
changelog:
  - Update to 2.38.0
  - Switch to the meson build system
  - Remove ancient conflicts
  - Remove ldconfig scriptlets


author: Andrew Price <anprice@redhat.com> - 3.2.0-9
changelog:
  - gfs2_jadd: Handle out-of-space issues
  - gfs2_jadd: error handling overhaul
    Resolves: rhbz#1833141
  - gfs2.5: Update some mentions of gfs2_tool
    Resolves: rhbz#1818983


author: Andrew Price <anprice@redhat.com> - 3.2.0-11
changelog:
  - gfs2_jadd: Use fallocate to preallocate journals
  - gfs2_jadd: Don't fsync after each block written
    Resolves: rhbz#1942434


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-8
changelog:
  - Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-9
changelog:
  - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-11
changelog:
  - Really fix authentication failures when sd-bus clients connect to GDBus servers
  - Resolves: #2217771


author: Colin Walters <walters@redhat.com> - 2.47.6.19.gad2092b-2
changelog:
  - git snapshot to work around https://bugzilla.gnome.org/show_bug.cgi?id=762637
  - Add --with-python=/usr/bin/python explicitly to hopefully fix a weird
    issue I am seeing where librepo fails to build in epel7 with this due to
    us requiring /bin/python.


author: Colin Walters <walters@redhat.com> - 2.48.0-2
changelog:
  - Explicitly require system pcre, though we happened to default to this now
    anyways due to something else pulling PCRE into the buildroot
    Closes rhbz#1287266


author: Colin Walters <walters@verbum.org> - 2.52.1-3
changelog:
  - Backport patches for gmain wakeup for qemu
    See: https://bugzilla.gnome.org/show_bug.cgi?id=761102


author: Debarshi Ray <rishi@fedoraproject.org> - 2.56.1-4
changelog:
  - Backport patch to fix possible invalid pointer in dbus callback in the FD.o
    notification backend (RH #1584916)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.60.0-2
changelog:
  - Make sure all .py files have fixed timestamps (fixes issue with
    parallel installability of i686 and amd64 -devel packages)
  - Switch to explicit byte compilation to override invalidation mode


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.1-3
changelog:
  - Add missing bundled provides
  - Add rpminspect gating configuration
  - Consolidate GDesktopAppInfo patchset
  - Resolves: #1951126


author: Carlos O'Donell <carlos@systemhalted.org> - 2.26-1
changelog:
  - Update to released glibc 2.26.
  - Auto-sync with upstream master,
    commit 2aad4b04ad7b17a2e6b0e66d2cb4bc559376617b.
  - getaddrinfo: Release resolver context on error in gethosts (swbz#21885)


author: Florian Weimer <fweimer@redhat.com> - 2.26-2
changelog:
  - Disable multi-arch (IFUNC string functions) on i686 (#1471427)
  - Remove nosegneg 32-bit Xen PV support libraries (#1482027)
  - Adjust spec file to RPM changes


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-3
changelog:
  - Auto-sync with upstream master,
    commit 403143e1df85dadd374f304bd891be0cd7573e3b:
  - x86-64: Align L(SP_RANGE)/L(SP_INF_0) to 8 bytes (swbz#21955)
  - powerpc: Add values from Linux 4.8 to <elf.h>
  - S390: Add new s390 platform z14.
  - Various locale fixes (swbz#14925, swbz#20008, swbz#20482, swbz#12349
    swbz#19982, swbz#20756, swbz#20756, swbz#21836, swbz#17563, swbz#16905,
    swbz#21920, swbz#21854)
  - NSS: Replace exported NSS lookup functions with stubs (swbz#21962)
  - i386: Do not set internal_function
  - assert: Suppress pedantic warning caused by statement expression (swbz#21242)
  - powerpc: Restrict xssqrtqp operands to Vector Registers (swbz#21941)
  - sys/ptrace.h: remove obsolete PTRACE_SEIZE_DEVEL constant (swbz#21928)
  - Remove __qaddr_t, __long_double_t
  - Fix uc_* namespace (swbz#21457)
  - nss: Call __resolv_context_put before early return in get*_r (swbz#21932)
  - aarch64: Optimized memcpy for Qualcomm Falkor processor
  - manual: Document getcontext uc_stack value on Linux (swbz#759)
  - i386: Add <startup.h> (swbz#21913)
  - Don't use IFUNC resolver for longjmp or system in libpthread (swbz#21041)
  - Fix XPG4.2 bits/sigaction.h namespace (swbz#21899)
  - x86-64: Add FMA multiarch functions to libm
  - i386: Support static PIE in start.S
  - Compile tst-prelink.c without PIE (swbz#21815)
  - x86-64: Use _dl_runtime_resolve_opt only with AVX512F (swbz#21871)
  - x86: Remove __memset_zero_constant_len_parameter (swbz#21790)


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 2.26-4
changelog:
  - Remove 'Buildroot' tag, 'Group' tag, and '%clean' section, and don't
    remove the buildroot in '%install', all per Fedora Packaging Guidelines
    (#1476839)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-5
changelog:
  - Auto-sync with upstream master,
    commit 2585d7b839559e665d5723734862fbe62264b25d:
  - Do not use generic selection in C++ mode
  - Do not use __builtin_types_compatible_p in C++ mode (#1481205)
  - x86-64: Check FMA_Usable in ifunc-mathvec-avx2.h (swbz#21966)
  - Various locale fixes (swbz#21750, swbz#21960, swbz#21959, swbz#19852)
  - Fix sigval namespace (swbz#21944)
  - x86-64: Optimize e_expf with FMA (swbz#21912)
  - Adjust glibc-rh827510.patch.


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-6
changelog:
  - Auto-sync with upstream master,
    commit b5889d25e9bf944a89fdd7bcabf3b6c6f6bb6f7c:
  - assert: Support types without operator== (int) (#1483005)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-8
changelog:
  - Auto-sync with upstream master,
    commit a8410a5fc9305c316633a5a3033f3927b759be35:
  - Obsolete matherr, _LIB_VERSION, libieee.a.


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-10
changelog:
  - Use an architecture-independent system call list (#1484729)
  - Drop glibc-fedora-include-bits-ldbl.patch (#1482105)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-11
changelog:
  - Auto-sync with upstream master,
    commit 3d7b66f66cb223e899a7ebc0f4c20f13e711c9e0:
  - string/stratcliff.c: Replace int with size_t (swbz#21982)
  - Fix tgmath.h handling of complex integers (swbz#21684)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-13
changelog:
  - Drop glibc-rh952799.patch, applied upstream (#952799, swbz#22025)
  - Auto-sync with upstream master,
    commit 5f9409b787c5758fc277f8d1baf7478b752b775d:
  - Various locale fixes (swbz#22022, swbz#22038, swbz#21951, swbz#13805,
    swbz#21971, swbz#21959)
  - MIPS/o32: Fix internal_syscall5/6/7 (swbz#21956)
  - AArch64: Fix procfs.h not to expose stdint.h types
  - iconv_open: Fix heap corruption on gconv_init failure (swbz#22026)
  - iconv: Mangle __btowc_fct even without __init_fct (swbz#22025)
  - Fix bits/math-finite.h _MSUF_ expansion namespace (swbz#22028)
  - Provide a C++ version of iszero that does not use __MATH_TG (swbz#21930)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-14
changelog:
  - Build glibc with -O2 (following the upstream default).
  - Auto-sync with upstream master,
    commit f4a6be2582b8dfe8adfa68da3dd8decf566b3983:
  - malloc: Abort on heap corruption, without a backtrace (swbz#21754)
  - getaddrinfo: Return EAI_NODATA for gethostbyname2_r with NO_DATA (swbz#21922)
  - getaddrinfo: Fix error handling in gethosts (swbz#21915) (swbz#21922)
  - Place $(elf-objpfx)sofini.os last (swbz#22051)
  - Various locale fixes (swbz#15332, swbz#22044)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-15
changelog:
  - Auto-sync with upstream master,
    commit b38042f51430974642616a60afbbf96fd0b98659:
  - Implement tmpfile with O_TMPFILE (swbz#21530)
  - Obsolete pow10 functions
  - math.h: Warn about an already-defined log macro


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-16
changelog:
  - Auto-sync with upstream master,
    commit 1e2bffd05c36a9be30d7092d6593a9e9aa009ada:
  - Add IBM858 charset (#1416405)
  - Update kernel version in syscall-names.list to 4.13
  - Add Linux 4.13 constants to bits/fcntl-linux.h
  - Add fcntl sealing interfaces from Linux 3.17 to bits/fcntl-linux.h
  - math: New generic powf, log2f, logf
  - Fix nearbyint arithmetic moved before feholdexcept (swbz#22225)
  - Mark __dso_handle as hidden (swbz#18822)
  - Skip PT_DYNAMIC segment with p_filesz == 0 (swbz#22101)
  - glob now matches dangling symbolic links (swbz#866, swbz#22183)
  - nscd: Release read lock after resetting timeout (swbz#22161)
  - Avoid __MATH_TG in C++ mode with -Os for fpclassify (swbz#22146)
  - Fix dlclose/exit race (swbz#22180)
  - x86: Add SSE4.1 trunc, truncf (swbz#20142)
  - Fix atexit/exit race (swbz#14333)
  - Use execveat syscall in fexecve (swbz#22134)
  - Enable unwind info in libc-start.c and backtrace.c
  - powerpc: Avoid misaligned stores in memset
  - powerpc: build some IFUNC math functions for libc and libm (swbz#21745)
  - Removed redundant data (LC_TIME and LC_MESSAGES) for niu_NZ (swbz#22023)
  - Fix LC_TELEPHONE for az_AZ (swbz#22112)
  - x86: Add MathVec_Prefer_No_AVX512 to cpu-features (swbz#21967)
  - x86: Add x86_64 to x86-64 HWCAP (swbz#22093)
  - Finish change from “Bengali” to “Bangla” (swbz#14925)
  - posix: fix glob bugs with long login names (swbz#1062)
  - posix: Fix getpwnam_r usage (swbz#1062)
  - posix: accept inode 0 is a valid inode number (swbz#19971)
  - Remove redundant LC_TIME data in om_KE (swbz#22100)
  - Remove remaining _HAVE_STRING_ARCH_* definitions (swbz#18858)
  - resolv: Fix memory leak with OOM during resolv.conf parsing (swbz#22095)
  - Add miq_NI locale for Miskito (swbz#20498)
  - Fix bits/math-finite.h exp10 condition (swbz#22082)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-17
changelog:
  - Move nss_compat to the main glibc package (#1400538)
  - Auto-sync with upstream master,
    commit 11c4f5010c58029e73e656d5df4f8f42c9b8e877:
  - crypt: Use NSPR header files in addition to NSS header files (#1489339)
  - math: Fix yn(n,0) without SVID wrapper (swbz#22244)
  - math: Fix log2(0) and log(10) in downward rounding (swbz#22243)
  - math: Add C++ versions of iscanonical for ldbl-96, ldbl-128ibm (swbz#22235)
  - powerpc: Optimize memrchr for power8
  - Hide various internal functions (swbz#18822)


author: Carlos O'Donell <carlos@systemhalted.org> - 2.26.90-18
changelog:
  - Auto-sync with upstream master,
    commit 1e26d35193efbb29239c710a4c46a64708643320.
  - malloc: Fix tcache leak after thread destruction (swbz#22111)
  - powerpc:  Fix IFUNC for memrchr.
  - aarch64: Optimized implementation of memmove for Qualcomm Falkor
  - Always do locking when iterating over list of streams (swbz#15142)
  - abort: Do not flush stdio streams (swbz#15436)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-19
changelog:
  - Move /var/db/Makefile to nss_db (#1498900)
  - Auto-sync with upstream branch master,
    commit 645ac9aaf89e3311949828546df6334322f48933:
  - openpty: use TIOCGPTPEER to open slave side fd


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-20
changelog:
  - Auto-sync with upstream branch master,
    commit d8425e116cdd954fea0c04c0f406179b5daebbb3:
  - nss_files performance issue in multi mode (swbz#22078)
  - Ensure C99 and C11 interfaces are available for C++ (swbz#21326)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-21
changelog:
  - Auto-sync with upstream branch master,
    commit 596f70134a8f11967c65c1d55a94a3a2718c731d:
  - Silence -O3 -Wall warning in malloc/hooks.c with GCC 7 (swbz#22052)
  - locale: No warning for non-symbolic character (swbz#22295)
  - locale: Allow "" int_curr_Symbol (swbz#22294)
  - locale: Fix localedef exit code (swbz#22292)
  - nptl: Preserve error in setxid thread broadcast in coredumps (swbz#22153)
  - powerpc: Avoid putting floating point values in memory (swbz#22189)
  - powerpc: Fix the carry bit on mpn_[add|sub]_n on POWER7 (swbz#22142)
  - Support profiling PIE (swbz#22284)


author: Florian Weimer <fweimer@redhat.com> - 2.26.90-22
changelog:
  - Auto-sync with upstream branch master,
    commit c38a4bfd596db2be2b9c1f96715bdc833eab760a:
  - malloc: Use compat_symbol_reference in libmcheck (swbz#22050)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-24
changelog:
  - Use make -O to serialize make output
  - Auto-sync with upstream branch master,
    commit 63b4baa44e8d22501c433c4093aa3310f91b6aa2:
  - sysconf: Fix missing definition of UIO_MAXIOV on Linux (#1504165)
  - Install correct bits/long-double.h for MIPS64 (swbz#22322)
  - malloc: Fix deadlock in _int_free consistency check
  - x86-64: Don't set GLRO(dl_platform) to NULL (swbz#22299)
  - math: Add _Float128 function aliases
  - locale: Add new locale mjw_IN (swbz#13994)
  - aarch64: Rewrite elf_machine_load_address using _DYNAMIC symbol
  - powerpc: fix check-before-set in SET_RESTORE_ROUND
  - locale: Use U+202F as thousands separators in pl_PL locale (swbz#16777)
  - math: Use __f128 to define FLT128_* constants in include/float.h for old GCC
  - malloc: Improve malloc initialization sequence (swbz#22159)
  - malloc: Use relaxed atomics for malloc have_fastchunks
  - locale: New locale ca_ES@valencia (swbz#2522)
  - math: Let signbit use the builtin in C++ mode with gcc < 6.x (swbz#22296)
  - locale: Place monetary symbol in el_GR, el_CY after the amount (swbz#22019)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-25
changelog:
  - Auto-sync with upstream branch master,
    commit 797ba44ba27521261f94cc521f1c2ca74f650147:
  - math: Add bits/floatn.h defines for more _FloatN / _FloatNx types
  - posix: Fix improper assert in Linux posix_spawn (swbz#22273)
  - x86-64: Use fxsave/xsave/xsavec in _dl_runtime_resolve (swbz#21265)
  - CVE-2017-15670: glob: Fix one-byte overflow (#1504807)
  - malloc: Add single-threaded path to _int_free
  - locale: Add new locale kab_DZ (swbz#18812)
  - locale: Add new locale shn_MM (swbz#13605)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-26
changelog:
  - Auto-sync with upstream branch master,
    commit 6b86036452b9ac47b4ee7789a50f2f37df7ecc4f:
  - CVE-2017-15804: glob: Fix buffer overflow during GLOB_TILDE unescaping
  - powerpc: Use latest string function optimization for internal function calls
  - math: No _Float128 support for ppc64le -mlong-double-64 (swbz#22402)
  - tpi_PG locale: Fix wrong d_fmt
  - aarch64: Disable lazy symbol binding of TLSDESC
  - tpi_PG locale: fix syntax error (swbz#22382)
  - i586: Use conditional branches in strcpy.S (swbz#22353)
  - ffsl, ffsll: Declare under __USE_MISC, not just __USE_GNU
  - csb_PL locale: Fix abmon/mon for March (swbz#19485)
  - locale: Various yesstr/nostr/yesexpr/noexpr fixes (swbz#15260, swbz#15261)
  - localedef: Add --no-warnings/--warnings option
  - powerpc: Replace lxvd2x/stxvd2x with lvx/stvx in P7's memcpy/memmove
  - locale: Use ASCII as much as possible in LC_MESSAGES
  - Add new locale yuw_PG (swbz#20952)
  - malloc: Add single-threaded path to malloc/realloc/calloc/memalloc
  - i386: Replace assembly versions of e_powf with generic e_powf.c
  - i386: Replace assembly versions of e_log2f with generic e_log2f.c
  - x86-64: Add powf with FMA
  - x86-64: Add logf with FMA
  - i386: Replace assembly versions of e_logf with generic e_logf.c
  - i386: Replace assembly versions of e_exp2f with generic e_exp2f.c
  - x86-64: Add exp2f with FMA
  - i386: Replace assembly versions of e_expf with generic e_expf.c


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-27
changelog:
  - Auto-sync with upstream branch master,
    commit f6e965ee94b37289f64ecd3253021541f7c214c3:
  - powerpc: AT_HWCAP2 bit PPC_FEATURE2_HTM_NO_SUSPEND
  - aarch64: Add HWCAP_DCPOP bit
  - ttyname, ttyname_r: Don't bail prematurely (swbz#22145)
  - signal: Optimize sigrelse implementation
  - inet: Check length of ifname in if_nametoindex (swbz#22442)
  - malloc: Account for all heaps in an arena in malloc_info (swbz#22439)
  - malloc: Add missing arena lock in malloc_info (swbz#22408)
  - malloc: Use __builtin_tgmath in tgmath.h with GCC 8 (swbz#21660)
  - locale: Replaced unicode sequences in the ASCII printable range
  - resolv: More precise checks in res_hnok, res_dnok (swbz#22409, swbz#22412)
  - resolv: ns_name_pton should report trailing \ as error (swbz#22413)
  - locale: mfe_MU, miq_NI, an_ES, kab_DZ, om_ET: Escape / in d_fmt (swbz#22403)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-28
changelog:
  - Auto-sync with upstream branch master,
    commit cccb6d4e87053ed63c74aee063fa84eb63ebf7b8:
  - sigwait can fail with EINTR (#1516394)
  - Add memfd_create function
  - resolv: Fix p_secstodate overflow handling (swbz#22463)
  - resolv: Obsolete p_secstodate
  - Avoid use of strlen in getlogin_r (swbz#22447)
  - lv_LV locale: fix collation (swbz#15537)
  - S390: Add cfi information for start routines in order to stop unwinding
  - aarch64: Optimized memset for falkor


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-29
changelog:
  - Enable -fstack-clash-protection (#1512531)
  - Auto-sync with upstream branch master,
    commit a55430cb0e261834ce7a4e118dd9e0f2b7fb14bc:
  - elf: Properly compute offsets of note descriptor and next note (swbz#22370)
  - cs_CZ locale: Base collation on iso14651_t1 (swbz#22336)
  - Implement the mlock2 function
  - Add _Float64x function aliases
  - elf: Consolidate link map sorting
  - pl_PL locale: Base collation on iso14651_t1 (swbz#22469)
  - nss: Export nscd hash function as __nss_hash (swbz#22459)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-30
changelog:
  - Add build dependency on bison
  - Auto-sync with upstream branch master,
    commit 7863a7118112fe502e8020a0db0fa74fef281f29:
  - math: New generic sinf (swbz#5997)
  - is_IS locale: Base collation on iso14651_t1 (swbz#22519)
  - intl: Improve reproducibility by using bison (swbz#22432)
  - sr_RS, bs_BA locales: make collation rules the same as for hr_HR (wbz#22534)
  - hr_HR locale: various updates (swbz#10580)
  - x86: Make a space in jmpbuf for shadow stack pointer
  - CVE-2017-17426: malloc: Fix integer overflow in tcache (swbz#22375)
  - locale: make forward accent sorting the default in collating (swbz#17750)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-31
changelog:
  - Add elision tunables.  Drop related configure flag.  (#1383986)
  - Auto-sync with upstream branch master,
    commit 37ac8e635a29810318f6d79902102e2e96b2b5bf:
  - Linux: Implement interfaces for memory protection keys
  - math: Add _Float64, _Float32x function aliases
  - math: Use sign as double for reduced case in sinf
  - math: fix sinf(NAN)
  - math: s_sinf.c: Replace floor with simple casts
  - et_EE locale: Base collation on iso14651_t1 (swbz#22517)
  - tr_TR locale: Base collation on iso14651_t1 (swbz#22527)
  - hr_HR locale: Avoid single code points for digraphs in LC_TIME (swbz#10580)
  - S390: Fix backtrace in vdso functions


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-32
changelog:
  - Obsolete the libcrypt-nss subpackage (#1525396)
  - armhfp: Disable -fstack-clash-protection due to GCC bug (#1522678)
  - ppc64: Disable power6 multilib due to GCC bug (#1522675)
  - Auto-sync with upstream branch master,
    commit 243b63337c2c02f30ec3a988ecc44bc0f6ffa0ad:
  - libio: Free backup area when it not required (swbz#22415)
  - math: Fix nextafter and nexttoward declaration (swbz#22593)
  - math: New generic cosf
  - powerpc: POWER8 memcpy optimization for cached memory
  - x86-64: Add sinf with FMA
  - x86-64: Remove sysdeps/x86_64/fpu/s_sinf.S
  - math: Fix ctanh (0 + i NaN), ctanh (0 + i Inf) (swbz#22568)
  - lt_LT locale: Base collation on copy "iso14651_t1" (swbz#22524)
  - math: Add _Float32 function aliases
  - math: Make cacosh (0 + iNaN) return NaN + i pi/2 (swbz#22561)
  - hsb_DE locale: Base collation on copy "iso14651_t1" (swbz#22515)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-34
changelog:
  - Auto-sync with upstream branch master,
    commit bad7a0c81f501fbbcc79af9eaa4b8254441c4a1f:
  - copy_file_range: New function to copy file data
  - nptl: Consolidate pthread_{timed,try}join{_np}
  - nptl: Implement pthread_self in libc.so (swbz#22635)
  - math: Provide a C++ version of iseqsig (swbz#22377)
  - elf: remove redundant __libc_enable_secure check from fillin_rpath
  - math: Avoid signed shift overflow in pow (swbz#21309)
  - x86: Add feature_1 to tcbhead_t (swbz#22563)
  - x86: Update cancel_jmp_buf to match __jmp_buf_tag (swbz#22563)
  - ld.so: Examine GLRO to detect inactive loader (swbz#20204)
  - nscd: Fix nscd readlink argument aliasing (swbz#22446)
  - elf: do not substitute dst in $LD_LIBRARY_PATH twice (swbz#22627)
  - ldconfig: set LC_COLLATE to C (swbz#22505)
  - math: New generic sincosf
  - powerpc: st{r,p}cpy optimization for aligned strings
  - CVE-2017-1000409: Count in expanded path in _dl_init_path (#1524867)
  - CVE-2017-1000408: Compute correct array size in _dl_init_paths (#1524867)
  - x86-64: Remove sysdeps/x86_64/fpu/s_cosf.S
  - aarch64: Improve strcmp unaligned performance


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-35
changelog:
  - Remove sln (#1531546)
  - Remove Sun RPC interfaces (#1531540)
  - Rebuild with newer GCC to fix pthread_exit stack unwinding issue (#1529549)
  - Auto-sync with upstream branch master,
    commit f1a844ac6389ea4e111afc019323ca982b5b027d:
  - CVE-2017-16997: elf: Check for empty tokens before DST expansion (#1526866)
  - i386: In makecontext, align the stack before calling exit (swbz#22667)
  - x86, armhfp: sync sys/ptrace.h with Linux 4.15 (swbz#22433)
  - elf: check for rpath emptiness before making a copy of it
  - elf: remove redundant is_path argument
  - elf: remove redundant code from is_dst
  - elf: remove redundant code from _dl_dst_substitute
  - scandir: fix wrong assumption about errno (swbz#17804)
  - Deprecate external use of libio.h and _G_config.h


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-36
changelog:
  - Auto-sync with upstream branch master,
    commit 579396ee082565ab5f42ff166a264891223b7b82:
  - nptl: Add test for callee-saved register restore in pthread_exit
  - getrlimit64: fix for 32-bit configurations with default version >= 2.2
  - elf: Add linux-4.15 VDSO hash for RISC-V
  - elf: Add RISC-V dynamic relocations to elf.h
  - powerpc: Fix error message during relocation overflow
  - prlimit: Replace old_rlimit RLIM64_INFINITY with RLIM_INFINITY (swbz#22678)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-38
changelog:
  - nptl: Fix stack guard size accounting (#1527887)
  - Remove invalid Obsoletes: on glibc-header provides
  - Require python3 instead of python during builds
  - Auto-sync with upstream branch master,
    commit 09085ede12fb9650f286bdcd805609ae69f80618:
  - math: ldbl-128ibm lrintl/lroundl missing "invalid" exceptions (swbz#22690)
  - x86-64: Add sincosf with vector FMA


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-39
changelog:
  - nptl: Open libgcc.so with RTLD_NOW during pthread_cancel (#1527887)
  - Introduce libnsl subpackage and remove NIS headers (#1531540)
  - Use versioned Obsoletes: for libcrypt-nss.
  - Auto-sync with upstream branch master,
    commit 08c6e95234c60a5c2f37532d1111acf084f39345:
  - nptl: Add tst-minstack-cancel, tst-minstack-exit (swbz#22636)
  - math: ldbl-128ibm log1pl (-qNaN) spurious "invalid" exception (swbz#22693)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-40
changelog:
  - libnsl: Do not install libnsl.so, libnsl.a (#1531540)
  - Use unversioned Supplements: for langpacks (#1490725)
  - Auto-sync with upstream branch master,
    commit 9a08a366a7e7ddffe62113a9ffe5e50605ea0924:
  - hu_HU locale: Avoid double space (swbz#22657)
  - math: Make default libc_feholdsetround_noex_ctx use __feholdexcept
    (swbz#22702)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-41
changelog:
  - CVE-2018-1000001: Make getcwd fail if it cannot obtain an absolute path
    (#1533837)
  - elf: Synchronize DF_1_* flags with binutils (#1439328)
  - Auto-sync with upstream branch master,
    commit 860b0240a5645edd6490161de3f8d1d1f2786025:
  - aarch64: fix static pie enabled libc when main is in a shared library
  - malloc: Ensure that the consolidated fast chunk has a sane size


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-43
changelog:
  - Enable static PIE support on i386, x86_64 (#1247050)
  - Remove add-on support (already gone upstream)
  - Rework test suite status reporting
  - Auto-sync with upstream branch master,
    commit 64f63cb4583ecc1ba16c7253aacc192b6d088511:
  - malloc: Fix integer overflows in memalign and malloc functions (swbz#22343)
  - x86-64: Properly align La_x86_64_retval to VEC_SIZE (swbz#22715)
  - aarch64: Update bits/hwcap.h for Linux 4.15
  - Add NT_ARM_SVE to elf.h


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-44
changelog:
  - Correct the list of static PIE architectures (#1247050)
  - glibc_post_upgrade: Remove process restart logic
  - glibc_post_upgrade: Integrate into the build process
  - glibc_post_upgrade: Do not clean up tls subdirectories
  - glibc_post_upgrade: Drop ia64 support
  - Remove architecture-specific symbolic link for iconvconfig
  - Auto-sync with upstream branch master,
    commit 4612268a0ad8e3409d8ce2314dd2dd8ee0af5269:
  - powerpc: Fix syscalls during early process initialization (swbz#22685)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-45
changelog:
  - Drop static PIE support on aarch64.  It leads to crashes at run time.
  - Remove glibc-rpcgen subpackage.  See rpcsvc-proto.  (#1531540)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-48
changelog:
  - Auto-sync with upstream branch master,
    commit 21c0696cdef617517de6e25711958c40455c554f:
  - locale: Implement alternative month names (swbz#10871)
  - locale: Change month names for pl_PL (swbz#10871)


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-50
changelog:
  - Auto-sync with upstream branch master,
    commit cdd14619a713ab41e26ba700add4880604324dbb:
  - libnsl: Turn remaining symbols into compat symbols (swbz#22701)
  - be_BY, be_BY@latin, lt_LT, el_CY, el_GR, ru_RU, ru_UA, uk_UA:
    Add alternative month names (swbz#10871)
  - x86: Revert Intel CET changes to __jmp_buf_tag (swbz#22743)
  - aarch64: Revert the change of the __reserved member of mcontext_t


author: Florian Weimer <fweimer@redhat.com> - 2.26.9000-51
changelog:
  - Explicitly run ldconfig in the buildroot
  - Do not run ldconfig from scriptlets
  - Put triggers into the glibc-common package, do not pass arguments to ldconfig


author: Richard W.M. Jones <rjones@redhat.com> - 2.26.9000-52
changelog:
  - Disable -fstack-clash-protection on riscv64:
    not supported even by GCC 7.3.1 on this architecture.


author: Carlos O'Donell <carlos@redhat.com> - 2.27-1
changelog:
  - Update to released glibc 2.27.
  - Auto-sync with upstream branch master,
    commit 23158b08a0908f381459f273a984c6fd328363cb.


author: Florian Weimer <fweimer@redhat.com> - 2.27-2.1
changelog:
  - Linux: use reserved name __key in pkey_get (#1542643)
  - Auto-sync with upstream branch release/2.27/master,
    commit 56170e064e2b21ce204f0817733e92f1730541ea.


author: Florian Weimer <fweimer@redhat.com> - 2.27-3
changelog:
  - Spec file cleanups:
    - Remove %defattr(-,root,root)
    - Use shell to run ldconfig %transfiletrigger
    - Move %transfiletrigger* to the glibc-common subpackage
    - Trim changelog
    - Include ChangeLog.old in the source RPM


author: Richard W.M. Jones <rjones@redhat.com> - 2.27-4
changelog:
  - riscv64: Add symlink from /usr/lib64/lp64d -> /usr/lib64 for ABI compat.
  - riscv64: Disable valgrind smoke test on this architecture.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-6
changelog:
  - Switch back to upstream master branch
  - Drop glibc-rh1013801.patch, applied upstream.
  - Drop glibc-fedora-nptl-linklibc.patch, no longer needed.
  - Auto-sync with upstream branch master,
    commit bd60ce86520b781ca24b99b2555e2ad389bbfeaa.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-7
changelog:
  - Auto-sync with upstream branch master,
    commit 1a2f44a848663036c8a14671fe0faa3fed0b2a25:
  - Remove spurios reference to libpthread_nonshared.a


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-13
changelog:
  - Auto-sync with upstream branch master,
    commit d39c0a459ef32a41daac4840859bf304d931adab:
  - CVE-2017-18269: memory corruption in i386 memmove (#1580934)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-17
changelog:
  - Avoid exporting some Sun RPC symbols with default versions (#1577210)
  - Inherit the -mstackrealign flag if it is set
  - Inherit compiler flags in the original order
  - Auto-sync with upstream branch master,
    commit 89aacb513eb77549a29df2638913a0f8178cf3f5:
  - CVE-2018-11236: realpath: Fix path length overflow (#1581270, swbz#22786)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-18
changelog:
  - Do not run telinit u on upgrades (#1579225)
  - Auto-sync with upstream branch master,
    commit 632a6cbe44cdd41dba7242887992cdca7b42922a.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-20
changelog:
  - Auto-sync with upstream branch master,
    commit 7f9f1ecb710eac4d65bb02785ddf288cac098323:
  - CVE-2018-11237: Buffer overflow in __mempcpy_avx512_no_vzeroupper (#1581275)
  - Drop glibc-rh1452750-allocate_once.patch,
    glibc-rh1452750-libidn2.patch.  Applied upstream.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-22
changelog:
  - Modernise nsswitch.conf defaults (#1581809)
  - Adjust build flags inheritence from redhat-rpm-config
  - Auto-sync with upstream branch master,
    commit 104502102c6fa322515ba0bb3c95c05c3185da7a.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-24
changelog:
  - Auto-sync with upstream branch master,
    commit 14beef7575099f6373f9a45b4656f1e3675f7372:
  - iconv: Make IBM273 equivalent to ISO-8859-1 (#1592270)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-28
changelog:
  - Drop glibc-rh1315108.patch.  extend_alloca was removed upstream. (#1315108)
  - Auto-sync with upstream branch master,
    commit c49e18222e4c40f21586dabced8a49732d946917.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-29
changelog:
  - Drop glibc-deprecate_libcrypt.patch.  Variant applied upstream. (#1566464)
  - Drop glibc-linux-timespec-header-compat.patch.  Upstreamed.
  - Auto-sync with upstream branch master,
    commit e69d994a63afc2d367f286a2a7df28cbf710f0fe.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-30
changelog:
  - Auto-sync with upstream branch master,
    commit b7b88cea4151d85eafd7ababc2e4b7ae1daeedf5:
  - New locale: dsb_DE (Lower Sorbian)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-36
changelog:
  - Auto-sync with upstream branch master,
    commit fd70af45528d59a00eb3190ef6706cb299488fcd:
  - Add the statx function
  - regexec: Fix off-by-one bug in weight comparison (#1582229)
  - nss_files: Fix re-reading of long lines (swbz#18991)
  - aarch64: add HWCAP_ATOMICS to HWCAP_IMPORTANT
  - aarch64: Remove HWCAP_CPUID from HWCAP_IMPORTANT
  - conform/conformtest.pl: Escape literal braces in regular expressions
  - x86: Use AVX_Fast_Unaligned_Load from Zen onwards.


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-38
changelog:
  - Auto-sync with upstream branch master,
    commit 93304f5f7a32f73b551266c5a181db51d97a71e4:
  - Install <bits/statx.h> header
  - Put the correct Unicode version number 11.0.0 into the generated files


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-41
changelog:
  - Build with --enable-cet on x86_64, i686
  - Auto-sync with upstream branch master,
    commit cfba5dbb10cc3abde632b46c60c10b2843917035:
  - Keep expected behaviour for [a-z] and [A-z] (#1607286)
  - Additional ucontext tests
  - Intel CET enhancements
  - ISO C11 threads support
  - Fix out-of-bounds access in IBM-1390 converter (swbz#23448)
  - New locale Yakut (Sakha) for Russia (sah_RU) (swbz#22241)
  - os_RU: Add alternative month names (swbz#23140)
  - powerpc64: Always restore TOC on longjmp (swbz#21895)
  - dsb_DE locale: Fix syntax error and add tests (swbz#23208)
  - Improve performance of the generic strstr implementation
  - regcomp: Fix off-by-one bug in build_equiv_class (swbz#23396)
  - Fix out of bounds access in findidxwc (swbz#23442)


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-42
changelog:
  - Auto-sync with upstream branch master,
    commit af86087f02a5522d8801a11d8381e04f95e33162:
  - x86/CET: Don't parse beyond the note end
  - Fix Linux fcntl OFD locks tests on unsupported kernels
  - x86: Populate COMMON_CPUID_INDEX_80000001 for Intel CPUs (swbz#23459)
  - x86: Correct index_cpu_LZCNT (swbz#23456)
  - Fix string/tst-xbzero-opt if build with gcc head


author: Florian Weimer <fweimer@redhat.com> - 2.27.9000-43
changelog:
  - Update to glibc 2.28 release tarball:
  - Translation updates
  - x86/CET: Fix property note parser (swbz#23467)
  - x86: Add tst-get-cpu-features-static to $(tests) (swbz#23458)


author: Patsy Griffin Franklin <patsy@redhat.com> - 2.28-48
changelog:
  - Add compiler barriers around modifications of the robust mutex list
    for pthread_mutex_trylock. (#1672773)


author: Florian Weimer <fweimer@redhat.com> - 2.28-65
changelog:
  - glibc-all-langpacks: Do not delete locale archive during update (#1717347)
  - Do not mark /usr/lib/locale/locale-archive as a configuration file
    because it is always automatically overwritten by build-locale-archive.


author: Arjun Shankar <arjun@redhat.com> - 2.28-79
changelog:
  - Remove unwanted whitespace from size lines and account for top chunk in
    malloc_info output (#1735747)


author: Arjun Shankar <arjun@redhat.com> - 2.28-80
changelog:
  - Fix race condition in tst-clone3 and add a new ldconfig test,
    tst-ldconfig-bad-aux-cache (#1764226)


author: Patsy Griffin <patsy@redhat.com> - 2.28-114
changelog:
  - CVE-2020-10029: Prevent stack corruption from crafted input in cosl, sinl,
    sincosl, and tanl function. (#1811796)


author: Patsy Griffin <patsy@redhat.com> - 2.28-130
changelog:
  - Fix avx2 strncmp offset compare condition check (#1871394)
  - Add strncmp and strcmp testcases for page boundary


author: Carlos O'Donell <carlos@redhat.com> - 2.28-153
changelog:
  - Support SEM_STAT_ANY via semctl. Return EINVAL for unknown commands to semctl,
    msgctl, and shmctl. (#1912670)


author: Arjun Shankar <arjun@redhat.com> - 2.28-174
changelog:
  - Introduce new glibc-doc.noarch subpackage (#2021671)
  - Move the reference manual info pages from glibc-devel to glibc-doc
  - Move debugger interface documentation from glibc to glibc-doc
  - Remove unnecessary README, INSTALL, NEWS files from glibc
  - Remove unnecessary README.timezone and gai.conf files from glibc-common


author: Florian Weimer <fweimer@redhat.com> - 2.28-175
changelog:
  - Fix dl-tls.c assert failure with pthread_create & dlopen (#1991001)
  - Fix x86_64 TLS lazy binding with auditors (#1950056)


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-188
changelog:
  - CVE-2022-23218, CVE-2022-23219: Fix buffer overflows in sunrpc clnt_create
    for "unix" and svcunix_create (#2045063).


author: Arjun Shankar <arjun@redhat.com> - 2.28-190
changelog:
  - Reduce installed size of some langpacks by de-duplicating LC_CTYPE (#2054790)
  - Fix localedef so it can handle symbolic links when generating locale-archive.


author: Carlos O'Donell <carlos@redhat.com> - 2.28-209
changelog:
  - Improve dynamic loader auditing interface (LD_AUDIT) (#2047981)
  - Add dlinfo() API support for RTLD_DI_PHDR (#2097898)


author: Florian Weimer <fweimer@redhat.com> - 2.28-211
changelog:
  - Preserve GLRO (dl_naudit) internal ABI (#2119304)
  - Avoid s390x ABI change due to z16 recognition on s390x (#2119304)


author: Arjun Shankar <arjun@redhat.com> - 2.28-216
changelog:
  - Retain .gnu_debuglink section for libc.so.6 (#2115830)
  - Remove .annobin* symbols from ld.so
  - Remove redundant ld.so debuginfo file


author: Rongwei Wang <rongwei.wang@linux.alibaba.com> - 2.28-236.0.1.12
changelog:
  - elf: Properly align PT_LOAD segments
  - Sync loongarch64 code to lnd.35. (lixing@loongson.cn)
  - Add patch for gb18030-2022 from upstream bug#30243 (fundawang@yeah.net)
  - aarch64: Increase small and medium cases for __memcpy_generic (bug#7060) (Kaiqiang Wang)
  - Add Hygon Support (Jing Li)


author: Rongwei Wang <rongwei.wang@linux.alibaba.com> - 2.28-236.0.1.7
changelog:
  - elf: Properly align PT_LOAD segments
  - Sync loongarch64 code to lnd.35. (lixing@loongson.cn)
  - Add patch for gb18030-2022 from upstream bug#30243 (fundawang@yeah.net)
  - aarch64: Increase small and medium cases for __memcpy_generic (bug#7060) (Kaiqiang Wang)


author: Florian Weimer <fweimer@redhat.com> - 2.28-251.2
changelog:
  - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34264)
  - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache (RHEL-34267)
  - CVE-2024-33601: nscd: crash on out-of-memory condition (RHEL-34271)
  - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules (RHEL-34273)


author: Rongwei Wang <rongwei.wang@linux.alibaba.com> - 2.28-251.0.1.2
changelog:
  - elf: Properly align PT_LOAD segments
  - Sync loongarch64 code to lnd.35. (lixing@loongson.cn)
  - Add patch for gb18030-2022 from upstream bug#30243 (fundawang@yeah.net)
  - aarch64: Increase small and medium cases for __memcpy_generic (bug#7060) (Kaiqiang Wang)
  - Add Hygon Support (Jing Li)
  - Sync loongarch64 code to lnd.36. (fanpeng@loongson.cn)


author: Patsy Griffin <patsy@redhat.com> - 2.28-251.4
changelog:
  - elf: Avoid some free (NULL) calls in _dl_update_slotinfo
  - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39994)


author: Patsy Griffin <patsy@redhat.com> - 2.28-251.5
changelog:
  - elf: Clarify and invert second argument of _dl_allocate_tls_init
  - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36147)


author: Rongwei Wang <rongwei.wang@linux.alibaba.com> - 2.28-251.0.1.13
changelog:
  - elf: Properly align PT_LOAD segments
  - Sync loongarch64 code to lnd.35. (lixing@loongson.cn)
  - Add patch for gb18030-2022 from upstream bug#30243 (fundawang@yeah.net)
  - aarch64: Increase small and medium cases for __memcpy_generic (bug#7060) (Kaiqiang Wang)
  - Add Hygon Support (Jing Li)
  - Sync loongarch64 code to lnd.36. (fanpeng@loongson.cn)

  - Restore internal ABI to avoid tooling false positives (RHEL-8381)


author: Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-57
changelog:
  - fixes bugs bz#1600379 bz#1689375 bz#1782428 bz#1798897 bz#1815462 
    bz#1889966 bz#1891403 bz#1901468 bz#1903911 bz#1908635 bz#1917488 bz#1918018 
    bz#1919132 bz#1925425 bz#1927411 bz#1927640 bz#1928676 bz#1942816 bz#1943467 
    bz#1945143 bz#1946171 bz#1957191 bz#1957641


author: Gluster Jenkins <dkhandel+glusterjenkins@redhat.com> - 6.0-60
changelog:
  - fixes bugs bz#1668303 bz#1853631 bz#1901468 bz#1904137 bz#1911665 
    bz#1962972 bz#1973566 bz#1994593 bz#1995029 bz#1997447 bz#2006205


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-13
changelog:
  - Fix: previous commit removed one function from the library and thus broke the ABI
  - function gmpn_preinv_divrem_1 should now not be removed
  Related: rhbz#2044216


author: Jeff Johnson <jbj@redhat.com> 1.0.20-1
changelog:
  - update to 1.0.20.
  - add --with-included-opencdk --with-included-libtasn1
  - add --with-included-libcfg --with-included-lzo
  - add --disable-srp-authentication.
  - do "make check" after build.


author: Tomas Mraz <tmraz@redhat.com> 1.4.5-2
changelog:
  - properly require install-info (patch by Ville Skyttä)
  - standard buildroot and use dist tag
  - add COPYING and README to doc


author: Tomas Mraz <tmraz@redhat.com> 2.4.1-1
changelog:
  - new upstream version
  - correct the license tag
  - explicit --with-included-opencdk not needed
  - use external lzo library, internal not included anymore


author: Tomas Mraz <tmraz@redhat.com> 2.8.5-3
changelog:
  - drop superfluous rpath from binaries
  - do not call autoreconf during build
  - specify the license on utils subpackage


author: Tomas Mraz <tmraz@redhat.com> 2.12.7-2
changelog:
  - fix problem when using new libgcrypt
  - split libgnutlsxx to a subpackage (#455146)
  - drop libgnutls-openssl (#460310)


author: Tomas Mraz <tmraz@redhat.com> 2.12.22-2
changelog:
  - rebuilt with new libtasn1
  - make guile bindings optional - breaks i686 build and there is
    no dependent package


author: Tomas Mraz <tmraz@redhat.com> 3.1.7-1
changelog:
  - new upstream version, requires rebuild of dependencies
  - this release temporarily includes old compatibility .so


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.2.7-1
changelog:
  - new upstream release
  - added dependency to autogen-libopts-devel to use the system's
    libopts library
  - added dependency to trousers-devel to enable TPM support


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.2.7-2
changelog:
  - Use the correct root key for unbound /var/lib/unbound/root.key (#1012494)
  - Pull asm fixes from upstream (#973210)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.1-2
changelog:
  - gnutls_global_deinit() will not do anything if the previous 
    initialization has failed (#1091053)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.3.1-4
changelog:
  - Replaced /etc/crypto-profiles/apps with /etc/crypto-policies/back-ends.
  - Added support for "very weak" profile.


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.3-2
changelog:
  - Don't link against trousers but rather dlopen() it when available.
    That avoids a dependency on openssl by the main library.


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.4-1
changelog:
  - new upstream release
  - no longer requires trousers patch
  - fixes issue in gnutls_x509_privkey_import (#1250020)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.6-1
changelog:
  - New upstream release (#1273672)
  - Enhances p11tool to write CKA_ISSUER and CKA_SERIAL_NUMBER (#1272178)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.7-1
changelog:
  - New upstream release (#1284300)
  - Documentation updates (#1282864)
  - Adds interface to set unique IDs in certificates (#1281343)
  - Allow arbitrary key sizes with ARCFOUR (#1284401)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> 3.4.13-1
changelog:
  - New upstream release (#1343258)
  - Addresses issue with setuid programs introduced in 3.4.12 (#1343342)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.1-2
changelog:
  - Prevent the loading of all PKCS#11 modules on certificate verification
    but only restrict to p11-kit trust module (#1507402)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.1-3
changelog:
  - Corrected regression from 3.6.1-2 which prevented the loading of
    arbitrary p11-kit modules (#1507402)


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.3-4
changelog:
  - Fixed support for ECDSA public keys (backported from Fedora)
  - Ensure that we do not cause issues with version rollback detection
    and TLS1.3.


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.6.4-5
changelog:
  - Fix issue with GOST ciphers (#1644193)
  - Made gnutls-serv use the default priorities if none is specified (#1644243)


author: Anderson Sasaki <ansasaki@redhat.com> - 3.6.5-1
changelog:
  - Update to upstream 3.6.5 release
  - Fixes CVE-2018-16868 (#1655395)
  - Removed ldconfig scriptlet
  - Added explicit Requires for nettle >= 3.4.1


author: Anderson Sasaki <ansasaki@redhat.com> - 3.6.5-3
changelog:
  - Fixed CVE-2019-3829 (#1693285)
  - Fixed CVE-2019-3836 (#1693288)
  - Added explicit BuildRequires for nettle-devel >= 3.4.1


author: Daiki Ueno <dueno@redhat.com> - 3.6.8-6
changelog:
  - Treat login error more gracefully when enumerating PKCS#11 tokens (#1705478)
  - Use deterministic ECDSA/DSA in FIPS selftests (#1716560)
  - Add gnutls_aead_cipher_{encrypt,decrypt}v2 functions (#1684461)


author: Daiki Ueno <dueno@redhat.com> - 3.6.8-9
changelog:
  - Fix CFB8 decryption when repeatedly called (#1757848)
  - Fix gnutls_aead_cipher_{en,de}cryptv2 with input not multiple of block size (#1757856)


author: Daiki Ueno <dueno@redhat.com> - 3.6.14-7
changelog:
  - Increase DH key bits to >= 2048 in self-tests (#1879506)
  - Implement self-tests for KDF and CMAC (#1890870)
  - Fix CVE-2020-24659: heap buffer-overflow when "no_renegotiation" alert is received (#1873959)


author: Daiki Ueno <dueno@redhat.com> - 3.6.16-1
changelog:
  - Update to upstream 3.6.16 release (#1956783)
  - Fix potential use-after-free in key_share handling (#1927597)
  - Fix potential use-after-free in pre_shared_key handling (#1927593)
  - Stop gnutls-serv relying on AI_ADDRCONFIG to decide listening address (#1908334)
  - Fix cert expiration issue in tests (#1908110)


author: Zoltan Fridrich <zfridric@redhat.com> - 3.6.16-6
changelog:
  - Fix x86_64 CPU feature detection when AVX is not available (#2131152)
  - Fix timing side-channel in TLS RSA key exchange (#2162598)


author: Liwei Ge <geliwei@openanolis.org> - 3.6.16-8.0.1.3
changelog:
  - Use datefudge to trick certificate expiry
  - cherry-pick `add sw arch #668c98f77bbc36384735f7be62faabe6941ad4fe`.(nijie@wxiat.com)


author: David King <amigadave@amigadave.com> - 1.68.0-6
changelog:
  - Add Requires on python-markdown for g-ir-doc-tool (#1979144)
  - Add license texts and documentation files (#1979144)


author: Robbie Harwood <rharwood@redhat.com> - 2.02-143
changelog:
  - x86-efi: Fix an incorrect array size in kernel allocation
  - Also merge with 8.7
  - Resolves: #2031288


author: Bo Ren <rb01097748@alibaba-inc.com> - 2.02-150.0.1
changelog:
  - Build pc-modules package on x86_64 (geliwei@openanolis.org)
  - Add loongarch64 base support (zhangwenlong@loongson.cn)(chenguoqi@loongson.cn)
  - Fix a bug in bls_make_list, blscfg. (zhonglingh@linux.alibaba.com)
  - Delete LoongArch64 support old version due to compile error(yangqiming@loongson.cn)
  - Add LoongArch64 support(yangqiming@loongson.cn)
  - LoongArch64 support fdt and phy-addr BIOS(yangqiming@loongson.cn)
  - Remove dtb dir with correct argument (Liwei Ge)
  - Remove unneeded buildrequires (Zhao Hang)


author: Peter Jones <pjones@redhat.com> - 1.99-1
changelog:
  - Update to grub-1.99 final.
  - Fix crt1.o require on x86-64 (fix from Mads Kiilerich)
  - Various CFLAGS fixes (from Mads Kiilerich)
    - -fexceptions and -m64
  - Temporarily ignore translations (from Mads Kiilerich)


author: Peter Jones <pjones@redhat.com> - 1.99-2
changelog:
  - Require os-prober (#678456) (patch from Elad Alfassa)
  - Require which (#734959) (patch from Elad Alfassa)


author: Peter Jones <pjones@redhat.com> - 1.99-4
changelog:
  - Don't do sysadminny things in %preun or %post ever. (#735259)
  - Actually include the changelog in this build (sorry about -3)


author: Peter Jones <pjones@redhat.com> - 1.99-6
changelog:
  - Use mv not cp to try to avoid moving disk blocks around for -5 fix
    Related: rhbz#735259
  - handle initramfs on xen better (patch from Marko Ristola)
    Resolves: rhbz#728775


author: Adam Williamson <awilliam@redhat.com> - 1.99-10
changelog:
  - /etc/default/grub is explicitly intended for user customization, so
    mark it as config(noreplace)


author: Peter Jones <pjones@redhat.com> - 1.99-12
changelog:
  - Lots of .spec fixes from Mads Kiilerich:
    Remove comment about update-grub - it isn't run in any scriptlets
    patch info pages so they can be installed and removed correctly when renamed
    fix references to grub/grub2 renames in info pages (#743964)
    update README.Fedora (#734090)
    fix comments for the hack for upgrading from grub2 < 1.99-4
    fix sed syntax error preventing use of $RPM_OPT_FLAGS (#704820)
    make /etc/grub2*.cfg %config(noreplace)
    make grub.cfg %ghost - an empty file is of no use anyway
    create /etc/default/grub more like anaconda would create it (#678453)
    don't create rescue entries by default - grubby will not maintain them anyway
    set GRUB_SAVEDEFAULT=true so saved defaults works (rbhz#732058)
    grub2-efi should have its own bash completion
    don't set gfxpayload in efi mode - backport upstream r3402
  - Handle dmraid better. Resolves: rhbz#742226


author: Peter Jones <pjones@redhat.com> - 1.99-17
changelog:
  - Update for newer autotools and gcc 4.7.0
    Related: rhbz#782144
  - Add /etc/sysconfig/grub link to /etc/default/grub
    Resolves: rhbz#800152
  - ExcludeArch s390*, which is not supported by this package.
    Resolves: rhbz#758333


author: Peter Jones <pjones@redhat.com> - 2.0-0.20
changelog:
  - Fix ppc64 vs ppc exclude according to what dwa tells me they need
  - Fix version number to better match policy.


author: Peter Jones <pjones@redhat.com> - 2.0-0.26.beta5
changelog:
  - Update to beta5.
  - Update how efi building works (kiilerix)
  - Fix theme support to bring in fonts correctly (kiilerix, pjones)


author: Peter Jones <pjones@redhat.com> - 2.0-0.27.beta5
changelog:
  - Fix license of theme (mizmo)
    Resolves: rhbz#820713
  - Fix some PPC bootloader detection IBM problem
    Resolves: rhbz#820722


author: Peter Jones <pjones@redhat.com> - 2.0-0.28.beta5
changelog:
  - Name grub.efi something that's arch-appropriate (kiilerix, pjones)
  - use EFI/$SOMETHING_DISTRO_BASED/ not always EFI/redhat/grub2-efi/ .
  - move common stuff to -tools (kiilerix)
  - spec file cleanups (kiilerix)


author: Matthew Garrett <mjg@redhat.com> - 2.00-2
changelog:
  - Set a prefix for the image - needed for installer work
  - Provide the font in the EFI directory for the same reason


author: Peter Jones <pjones@redhat.com> - 2.00-3
changelog:
  - Add some more code to support Secure Boot, and temporarily disable
    some other bits that don't work well enough yet.
    Resolves: rhbz#836695


author: Peter Jones <pjones@redhat.com> - 2.00-4
changelog:
  - Correct grub-mkimage invocation to use efidir RPM macro (jwb)
  - Sign with test keys on UEFI systems.
  - PPC - Handle device paths with commas correctly.
    Related: rhbz#828740


author: Peter Jones <pjones@redhat.com>
changelog:
  - Split module lists for UEFI boot vs UEFI cd images.
  - Add raid modules for UEFI image (related: #750794)
  - Include a prelink whitelist for binaries that need execstack (#839813)
  - Include fix efi memory map fix from upstream (#839363)


author: Peter Jones <pjones@redhat.com> - 2.00-5
changelog:
  - Work around AHCI firmware bug in efidisk driver.
  - Move to newer pesign macros
  - Don't allow insmod if we're in secure-boot mode.


author: Peter Jones <pjones@redhat.com> - 2.00-8
changelog:
  - Don't error on insmod on UEFI/SB, but also don't do any insmodding.
  - Increase device path size for ieee1275
    Resolves: rhbz#857936
  - Make network booting work on ieee1275 machines.
    Resolves: rhbz#857936


author: Peter Jones <pjones@redhat.com> - 2.00-10
changelog:
  - Various PPC fixes.
  - Fix crash fetching from http (gustavold, #860834)
  - Issue separate dns queries for ipv4 and ipv6 (gustavold, #860829)
  - Support IBM CAS reboot (pfsmorigo, #859223)
  - Include all modules in the core image on ppc (pfsmorigo, #866559)


author: Peter Jones <pjones@redhat.com> - 2.00-13
changelog:
  - Add vlan tag support (pfsmorigo, #871563)
  - Follow symlinks during PReP installation in grub2-install (pfsmorigo, #874234)
  - Improve search paths for config files on network boot (pfsmorigo, #873406)


author: Peter Jones <pjones@redhat.com> - 2.00-16
changelog:
  - Allow the user to disable submenu generation
  - (partially) support BLS-style configuration stanzas.


author: Peter Jones <pjones@redhat.com> - 2.00-17
changelog:
  - Fix booting from drives with 4k sectors on UEFI.
  - Move bash completion to new location (#922997)
  - Include lvm support for /boot (#906203)


author: Matthias Clasen <mclasen@redhat.com> - 2.00-18
changelog:
  - Move the starfield theme to a subpackage (#962004)
  - Don't allow SSE or MMX on UEFI builds (#949761)


author: Peter Jones <pjones@redhat.com> - 2.00-19
changelog:
  - Rebase to upstream snapshot.
  - Fix PPC build error (#967862)
  - Fix crash on net_bootp command (#960624)
  - Reset colors on ppc when appropriate (#908519)
  - Left align "Loading..." messages (#908492)
  - Fix probing of SAS disks on PPC (#953954)
  - Add support for UEFI OSes returned by os-prober
  - Disable "video" mode on PPC for now (#973205)
  - Make grub fit better into the boot sequence, visually (#966719)


author: Peter Jones <pjones@redhat.com> - 2.02-0.9
changelog:
  - Clean up the build a bit to make it faster
  - Make grubenv work right on UEFI machines
    Related: rhbz#1119943
  - Sort debug and rescue kernels later than normal ones
    Related: rhbz#1065360
  - Allow "fallback" to include entries by title as well as number.
    Related: rhbz#1026084
  - Fix a segfault on aarch64.
  - Load arm with SB enabled if available.
  - Add some serial port options to GRUB_MODULES.


author: Peter Jones <pjones@redhat.com> - 2.02-0.10
changelog:
  - Try to emit linux16/initrd16 and linuxefi/initrdefi when appropriate
    in 30_os-prober.
    Resolves: rhbz#1108296
  - If $fw_path doesn't work to find the config file, try $prefix as well
    Resolves: rhbz#1148652


author: Peter Jones <pjones@redhat.com> - 2.02-0.12
changelog:
  - Make backtrace and usb conditional on !arm
  - Make sure gcdaa64.efi is packaged.
    Resolves: rhbz#1163481


author: Ralf Corsépius <corsepiu@fedoraproject.org> - 2.02-0.14
changelog:
  - Move grub2.info/grub2-dev.info install-info scriptlets into *-tools package.
  - Use sub-shell in %__debug_install_post (RHBZ#1168732).
  - Cleanup grub2-starfield-theme packaging.


author: Peter Jones <pjones@redhat.com> - 2.02-0.17
changelog:
  - Don't build hardened (fixes FTBFS) (pbrobinson)
  - Reconcile with the current upstream
  - Fixes for gcc 5


author: Peter Jones <pjones@redhat.com> - 2.02-0.21
changelog:
  - Back out one of the debuginfo generation patches; it doesn't work right on
    aarch64 yet.
    Resolves: rhbz#1250197


author: Peter Jones <pjones@redhat.com> - 2.02-0.25
changelog:
  - Fix security issue when reading username and password
    Related: CVE-2015-8370
  - Do a better job of handling GRUB2_PASSWORD
    Related: rhbz#1284370


author: Peter Jones <pjones@redhat.com> - 2.02-0.34
changelog:
  - Fix power6 makefile bits for newer autoconf defaults.
  - efi/chainloader: fix wrong sanity check in relocate_coff() (Laszlo Ersek)
    Resolves: rhbz#1347291


author: Peter Jones <pjones@redhat.com> - 2.02-11
changelog:
  - Put grub2-mkimage in -tools, not -tools-extra.
  - Fix i686 building
  - Fix ppc HFS+ usage due to /boot/efi's presence.


author: Peter Jones <pjones@redhat.com> - 2.02-12
changelog:
  - Fix arm kernel command line allocation
    Resolves: rhbz#1484609
  - Get rid of the temporary extra efi packages hack.


author: Peter Jones <pjones@redhat.com> - 2.02-13
changelog:
  - Add some unconditional Provides:
    grub2-efi on grub2-efi-${arch}
    grub2-efi-cdboot on grub2-efi-${arch}-cdboot
    grub2 on all grub2-${arch} pacakges
  - Something is somehow adding /usr/lib/.build-id/... to all the -tools
    subpackages, so exclude all that.


author: Peter Jones <pjones@redhat.com> - 2.02-14
changelog:
  - Revert the /usr/lib/.build-id/ change:
    https://fedoraproject.org/wiki/Changes/ParallelInstallableDebuginfo
    says (without any particularly convincing reasoning):
      The main build-id file should not be in the debuginfo file, but in the
      main package (this was always a problem since the package and debuginfo
      package installed might not match). If we want to make usr/lib/debug/ a
      network resource then we will need to move the symlink to another
      location (maybe /usr/lib/.build-id).
    So do it that way.  Of course it doesn't matter, because exclude gets
    ignored due to implementation details.


author: Peter Jones <pjones@redhat.com> - 2.02-20
changelog:
  - Update to newer upstream for F28
  - Pull in patches for Apollo Lake hardware
    Resolves: rhbz#1519311


author: Peter Jones <pjones@redhat.com> - 2.02-21
changelog:
  - Fix grub2-efi-modules provides/obsoletes generation
    Resolves: rhbz#1506704
  - *Also* build grub-efi-ia32{,-*,!-modules} packages for i686 builds
    Resolves: rhbz#1502312
  - Make everything under /boot/efi be mode 0700, since that's what FAT will
    show anyway.


author: Peter Jones <pjones@redhat.com> - 2.02-23
changelog:
  - Only nerf annobin, not -fstack-crash-protection.
  - Fix a conflict on /boot/efi directory permissions between -cdboot and the
    normal bootloader.


author: Peter Jones <pjones@redhat.com> - 2.02-24
changelog:
  - Fix a merge error from 2.02-21 that affected kernel loading on Aarch64.
    Related: rhbz#1519311
    Related: rhbz#1506704
    Related: rhbz#1502312


author: Peter Jones <pjones@redhat.com> - 2.02-26
changelog:
  - Try to fix things for new compiler madness.
    I really don't know why gcc decided __attribute__((packed)) on a "typedef
    struct" should imply __attribute__((align (1))) and that it should have a
    warning that it does so.  The obvious behavior would be to keep the alignment
    of the first element unless it's used in another object or type that /also/
    hask the packed attribute.  Why should it change the default alignment at
    all?
  - Merge in the BLS patches Javier and I wrote.
  - Attempt to fix pmtimer initialization failures to not be super duper slow.


author: Peter Jones <pjones@redhat.com> - 2.02-33
changelog:
  - Work around some issues with older automake found in CentOS.
  - Make multiple initramfs images work in BLS.


author: Peter Jones <pjones@redhat.com> - 2.02-34
changelog:
  - Put the os-prober dep back in - we need to change test plans and criteria
    before it can go.
    Resolves: rhbz#1569411


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-36
changelog:
  - Use version field to sort BLS entries if id field isn't defined
  - Add version field to BLS fragments generated by 20-grub.install


author: Peter Jones <pjones@redhat.com> - 2.02-37
changelog:
  - Fixups to work with gcc 8
  - Experimental https boot support on UEFI
  - XFS fixes for sparse inode support
    Resolves: rhbz#1575797


author: Hans de Goede <hdegoede@redhat.com>
changelog:
  - Make the user session automatically set the boot_success grubenv flag
  - Make offline-updates increment the boot_indeterminate grubenv variable


author: Peter Jones <pjones@redhat.com> - 2.02-42
changelog:
  - Fix some minor BLS issues
  - Rework the FDT module linking to make aarch64 build and boot right
    Resolves: rhbz#1601835


author: Peter Jones <pjones@redhat.com> - 2.02-47
changelog:
  - BLS fixes from the F29 tree
    - Use /boot/loader/entries as BLS dir also on EFI systems
    - Make 20-grub.install to exit if there is no machine ID set
    - More fixes for BLS
    Resolves: rhbz#1620954


author: Peter Jones <pjones@redhat.com> - 2.02-48
changelog:
  - Go back to forcing all allocations on x86_64 to be 32-bit, as many UEFI
    implementations seem to have drivers with DMA issues for addresses
    above 4GB.
    Resolves: rhbz#1628346


author: pjones <pjones@redhat.com> - 1:2.02-50
changelog:
  - Disable TPM (again) on BIOS; it really does not work reliably.
    Resolves: rhbz#1579835
  - Make blscfg module loadable on other grub2 builds
    Resolves: rhbz#1633646
  - Include blscfg module on ppc builds
    Related: rhbz#1633646
  - Fix rpmdiff complaints about execstack
    Related: rhbz#1633646


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-51
changelog:
  - add 10_linux_bls grub.d snippet to generate menu entries from BLS files
    Resolves: rhbz#1636013
  - Fix syntax issues in 01_fallback_counting.in
    Resolves: rhbz#1615954


author: Peter Jones <pjones@redhat.com> - 2.02-54
changelog:
  - kernel-install: Remove existing initramfs if it's older than the kernel
    Resolves: rhbz#1638405
  - Update the saved entry correctly after a kernel install
    Resolves: rhbz#1638117


author: Peter Jones <pjones@redhat.com> - 2.02-56
changelog:
  - Rebuild for signing
    Resolves: rhbz#1625565
  - blscfg: Make 10_linux_bls sort the same way as well
    Related: rhbz#1638103


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-60
changelog:
  - Remove quotes when reading ID value from /etc/os-release
    Related: rhbz#1650706
  - blscfg: expand grub_users before passing to grub_normal_add_menu_entry()
    Resolves: rhbz#1650706


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-61
changelog:
  - Drop buggy downstream patch "efinet: retransmit if our device is busy"
    Resolves: rhbz#1649048
  - Make the menu entry users option argument to be optional
    Related: rhbz#1652434
  - 10_linux_bls: add missing menu entries options
    Resolves: rhbz#1652434


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-62
changelog:
  - Drop "Be more aggro about actually using the *configured* network device."
    Resolves: rhbz#1654388
  - Fix menu entry selection based on title
    Resolves: rhbz#1654936


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-63
changelog:
  - BLS files should only be copied by grub-switch-to-blscfg if BLS isn't set
    Related: rhbz#1638117
  - Fix get_entry_number() wrongly dereferencing the tail pointer
    Resolves: rhbz#1654936


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-64
changelog:
  - Make grub2-mkconfig to honour GRUB_CMDLINE_LINUX in /etc/default/grub
    Resolves: rhbz#1637875
  - docs: Stop using polkit / pkexec for grub-boot-success.timer / service
    Resolves: rhbz#1655687


author: Peter Jones <pjones@redhat.com> - 2.02-65
changelog:
  - Don't build the grub2-efi-ia32-* packages on i686; it causes multilib
    errors and we don't ship the result anyway.
    Related: rhbz#1637875


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-68
changelog:
  - Avoid grub2-efi package to overwrite existing /boot/grub2/grubenv file
    Resolves: rhbz#1680572
  - Try to set -fPIE and friends on libgnu.a (pjones)
  - blscfg: fallback to default_kernelopts if BLS option field isn't set
    Related: rhbz#1680572
  - Remove bogus load_env after blscfg command in 10_linux


author: Peter Jones <pjones@redhat.com> - 2.02-70
changelog:
  - Fix (once again) how CFLAGS and LDFLAGS propogate the settings for hardened
    builds, because rpmdiff doesn't like the current way failing.
    Related: rhbz#1653961


author: Peter Jones <pjones@redhat.com> - 2.02-71
changelog:
  - Fix (a fourth time, due to a typo) how LDFLAGS works on non-efi platforms.
    Related: rhbz#1653961


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-80
changelog:
  - Fix PRIxGRUB_EFI_STATUS definition
    Related: rhbz#1761811
  - TPM: Print messages if measuraments fail as debug instead of error
    Resolves: rhbz#1761811
  - unix/platform: Initialize variable to fix grub-install on UEFI system
    Resolves: rhbz#1768689
  - blscfg: add a space char when appending fields for variable expansion
    Resolves: rhbz#1669252


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-82
changelog:
  - Drop "Disable multiboot, multiboot2, and linux16 modules on EFI builds"
    Resolves: rhbz#1779480
  - efi/http: Export {fw,http}_path variables to make them global
    Resolves: rhbz#1811561
  - efi/http: Enclose literal IPv6 addresses in square brackets
  - efi/net: Allow to specify a port number in addresses
  - efi/ip4_config: Improve check to detect literal IPv6 addresses
  - efi/net: Print a debug message if parsing the address fails
    Resolves: rhbz#1811560
  - Set image base address before jumping to the PE/COFF entry point
    Resolves: rhbz#1819624


author: Peter Jones <pjones@redhat.com> - 2.02-85
changelog:
  - Fix several CVEs
    Resolves: CVE-2020-10713
    Resolves: CVE-2020-14308
    Resolves: CVE-2020-14309
    Resolves: CVE-2020-14310
    Resolves: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 2.02-86
changelog:
  - Couple more late fixes.
    Resolves: CVE-2020-10713
    Resolves: CVE-2020-14308
    Resolves: CVE-2020-14309
    Resolves: CVE-2020-14310
    Resolves: CVE-2020-14311


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-91
changelog:
  - Fix tps-rpmtest failing due /boot/grub2/grubenv attributes mismatch
    Resolves: rhbz#1813959
  - Include in EFI build the modules needed for LUKS support
    Resolves: rhbz#1873725
  - Fix keyboards that report IBM PC AT scan codes
    Resolves: rhbz#1897587


author: Jan Hlavac <jhlavac@redhat.com> - 2.02-92
changelog:
  - grub2-install: disable support for EFI platforms
    Resolves: rhbz#1737444
  - Include a few more modules to EFI build needed for LUKS support (javierm)
    Related: rhbz#1873725


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-93
changelog:
  - add keylayouts and at_keyboard modules to UEFI Grub2 (rmetrich)
    Related: rhbz#1897587
  - at_keyboard: use set 1 when keyboard is in Translate mode (rmetrich)
    Resolves: rhbz#1897587
  - add GRUB enhanced debugging features (rmetrich)
    Resolves: rhbz#1776249
  - ieee1275: Avoiding many unecessary open/close (diegodo)
    Resolves: rhbz#1862632
  - ieee1275: device mapper and fibre channel discovery support (diegodo)
    Resolves: rhbz#1873724


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-96
changelog:
  - Fix "Add 'at_keyboard_fallback_set' var to force the set manually"
  - Fix a boot failure due patch "ieee1275: claim up to 256MB memory"


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-98
changelog:
  - Fix another batch of CVEs
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Javier Martinez Canillas <javierm@redhat.com> - 2.02-99
changelog:
  - Fix bug of grub2-install not checking for the SBAT option
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Robbie Harwood <rharwood@redhat.com> - 2.02-127
changelog:
  - ppc64le: CAS improvements, prefix detection, and vTPM support
  - Resolves: #2076795
  - Resolves: #2026568
  - Resolves: #2051331


author: Robbie Harwood <rharwood@redhat.com> - 2.02-137
changelog:
  - CVE fixes for 2022-06-07
  - CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
  - CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
  - Resolves: #2070687


author: Kai Song <songkai01@inspur.com> - 2.02-150.0.2
changelog:
  - Fix CVE-2024-1048,CVE-2023-4692,CVE-2023-4693
  - util: Regenerate kernelopts if missing on ppc
  - kern/ieee1275/init: ppc64: Restrict high memory in presence of fadump
  - util: Enable default kernel for updates


author: Bo Ren <rb01097748@alibaba-inc.com> - 2.02-158.0.1
changelog:
  - Build pc-modules package on x86_64 (geliwei@openanolis.org)
  - Add loongarch64 base support (zhangwenlong@loongson.cn)(chenguoqi@loongson.cn)
  - Fix a bug in bls_make_list, blscfg. (zhonglingh@linux.alibaba.com)
  - Delete LoongArch64 support old version due to compile error(yangqiming@loongson.cn)
  - Add LoongArch64 support(yangqiming@loongson.cn)
  - LoongArch64 support fdt and phy-addr BIOS(yangqiming@loongson.cn)
  - Remove dtb dir with correct argument (Liwei Ge)


author: Leo Sandoval <lsandova@redhat.com> - 2.02-161
changelog:
  - Add Several CVE fixes
  - Resolves CVE-2024-45775 CVE-2025-0624
  - Resolves: #RHEL-75735
  - Resolves: #RHEL-79837


author: Nicolas Frayer <nfrayer@redhat.com> - 2.02-162
changelog:
  - ieee1275/ofnet: Fix grub_malloc() removed after added safe
  - Remove 'fs/ntfs: Implement attribute verification' patch
  - Related: #RHEL-79837


author: Bo Ren <rb01097748@alibaba-inc.com> - 2.02-162.0.1
changelog:
  - Build pc-modules package on x86_64 (geliwei@openanolis.org)
  - Add loongarch64 base support (zhangwenlong@loongson.cn)(chenguoqi@loongson.cn)
  - Fix a bug in bls_make_list, blscfg. (zhonglingh@linux.alibaba.com)
  - Delete LoongArch64 support old version due to compile error(yangqiming@loongson.cn)
  - Add LoongArch64 support(yangqiming@loongson.cn)
  - LoongArch64 support fdt and phy-addr BIOS(yangqiming@loongson.cn)
  - Remove dtb dir with correct argument (Liwei Ge)
  - Support use confidential computing provisioned secrets for disk decryption(hanliyang@hygon.cn)
  - Update for loongarch64 in sync with latest v2.04(liuxue@loongson.cn)


author: Jeremy Katz <katzj@redhat.com> - 7.0-1
changelog:
  - BR libblkid-devel now instead of e2fsprogs-devel
  - Add bits to switch to using dracut for new-kernel-pkg


author: Hans de Goede <hdegoede@redhat.com> - 7.0.7-1
changelog:
  - Remove writing rd_plytheme=$theme to kernel args in dracut mode (hansg)
  - Add a couple of test cases for extra initrds (rstrode)
  - Allow tmplLine to be NULL in getInitrdVal (rstrode)


author: Peter Jones <pjones@redhat.com> - 7.0.12-1
changelog:
  - compare rootdev using uuid instead of stat, for better btrfs support (josef)
    Resolves: rhbz#530108


author: Peter Jones <pjones@redhat.com> - 7.0.13-1
changelog:
  - Strip boot partition prefix from initrd path if present during --update.
    Related: rhbz#557922
  - add host only support for local kernel compiles (airlied)


author: Peter Jones <pjones@redhat.com> - 8.3-1
changelog:
  - Fix new-kernel-pkg invocation of grubby for grub (patch from Mads Kiilerich)
    Resolves: rhbz#725185


author: Adam Williamson <awilliam@redhat.com> - 8.4-1
changelog:
  - Update to 8.4:
  	+ fix Loading... line for updated kernels
  	+ Add new '--default-title' feature
  	+ Add new '--default-index' feature
  	+ add feature for testing the output of a grubby command
  	+ Fix detection when comparing stage1 to MBR
  	+ do not link against glib-2.0
  	+ Don't crash if grubConfig not found
  	+ Adding extlinux support for new-kernel-pkg
  	+ Look for Debian / Ubuntu grub config files (#703260)
  	+ Make grubby recognize Ubuntu's spin of Grub2 (#703260)


author: Peter Jones <pjones@redhat.com> - 8.9-1
changelog:
  - Refactor grub2 title extraction, making it a function (Cleber Rosa)
  - Include prefix when printing kernel information (Cleber Rosa)
  - Implement support for "default saved" for grub2 (Cleber Rosa)
  - Try to display title when printing information with '--info' (Cleber Rosa)
  - new-kernel-pkg fails to find U-Boot. (D. Marlin)
  - Add support to new-kernel-pkg to recognize ARCH == armv5tel needed for Kir
    (D.Marlin)
  - Include a / when one is missing in paths (#769641)
  - Fix hard coded paths so kernel's "make install" will DTRT.
  - Fix endswith() to correctly test its input for validity.


author: Peter Jones <pjones@redhat.com> - 8.10-1
changelog:
  - Update to 8.10
  - Use "isquote" where appropriate
  - Make --remove-kenrel support titles in grub2 (jianzhong.huang)
  - Use grub2 if it's there on ppc.


author: Peter Jones <pjones@redhat.com> - 8.12-1
changelog:
  - Update to 8.12
  - Preserve trailing indentation when splitting line elements (mads)
    Resolves: rhbz#742720
  - Pick last device mounted on / (pjones,bcl)
    Related: rhbz#820340
    Related: rhbz#820351


author: Peter Jones <pjones@redhat.com> - 8.21-1
changelog:
  - Use systemd vconsole.conf and locale.conf if present
    Resolves rhbz#881908
  - Avoid unnecessary stat calls (from Ville Skyttä)
    Resolves rhbz#741135
  - Spelling fixes (Ville Skyttä)
  - Add a test case for rhbz#742885
  - Handle case-insensitive extlinux config files properly (from Johannes Weiner)


author: Peter Jones <pjones@redhat.com> - 8.23-1
changelog:
  - Update to 8.23
  - Fix empty root device in case of an empty /etc/fstab (lemenkov)
  - General refactoring and cleanup (harald)
  - Don't clean up modules.* so aggressively (harald)


author: Peter Jones <pjones@redhat.com> - 8.25-1
changelog:
  - Error instead of segfaulting if we can't find any working config
    Resolves: rhbz#912873
    Resolves: rhbz#751608


author: Peter Jones <pjones@redhat.com> - 8.27-1
changelog:
  - Make grubby understand grub's "saved_entry" system
    Resolves: rhbz#768106
    Resolves: rhbz#736188
  - BuildRequire grub2 on appropriate platforms, for the test suite.


author: Peter Jones <pjones@redhat.com> - 8.34-1
changelog:
  - Make grub2 "--copy-default --add-kernel=foo --initrd=bar" work when default
    has no initrd line.
    Resolves: rhbz#1099627
    Related: rhbz#1096358


author: Peter Jones <pjones@redhat.com> - 8.35-5
changelog:
  - See if what people are seeing in 1141414 is actually 957681
    Related: rhbz#957681
    Related: rhbz#1141414


author: Peter Jones <pjones@redhat.com> - 8.35-7
changelog:
  - Revert "debug" image creation for now
    Resolves: rhbz#1153410
  - Fix minor quoting errors in dtbdir code
    Resolves: rhbz#1088933


author: Peter Jones <pjones@redhat.com> - 8.35-9
changelog:
  - Disable "make check" on arm builds; right now the test suite is broken
    there and raises false positives constantly.


author: Peter Jones <pjones@redhat.com> - 8.38-1
changelog:
  - Update to 8.38
  - Fix title extraction with some config file types
    Resolves: rhbz#1204353
    Resolves: rhbz#1204888
    Resolves: rhbz#1206943


author: Peter Jones <pjones@redhat.com> - 8.39-1
changelog:
  - Update to 8.39
  - Fix title extraction with some config file types
    Resolves: rhbz#1204353
    Resolves: rhbz#1204888
    Resolves: rhbz#1206943


author: Peter Jones <pjones@redhat.com> - 8.40-13
changelog:
  - Make the temporary config wrapper be what "grubby" contains, and put
    traditional grubby in grubby-deprecated.


author: Peter Jones <pjones@redhat.com> - 8.40-15
changelog:
  - Install installkernel-bls here as well, not just in the grub2 package,
    since s390x doesn't have grubby packages.
    Related: rhbz#1619344


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-17
changelog:
  - grubby-bls should only check if kernel exists and not if was installed
    Resolves: rhbz#1634740
  - Use ! instead of , as sed delimiter in grubby-bls script
    Resolves: rhbz#1634744
  - Print information about the entry set as default
    Resolves: rhbz#1636180


author: Peter Jones <pjones@redhat.com> - 8.40-19
changelog:
  - grubby-bls: Make grubby-bls sort everything the same way grub2 does
    Resolves: rhbz#1638103
  - grubby-bls: Consistently use the filename as the bls id
    Related: rhbz#1638103
  - grubby-bls: check if entry exists before attempting to print its info
    Resolves: rhbz#1634712


author: Peter Jones <pjones@redhat.com> - 8.40-20
changelog:
  - Add missing patches from RHEL-7 for grubby-deprecated.
    Resolves: rhbz#1561919
  - grubby-bls: make a copy of the cmdline if is modified for an entry
    Resolves: rhbz#1629054


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-21
changelog:
  - grubby-bls: escape delimiter character before replacing the options field
    Resolves: rhbz#1640017


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-29
changelog:
  - grubby-bls: print the absolute kernel and initramfs images paths
    Resolves: rhbz#1649778
  - grubby-bls: make info print the root parameter if is present in cmdline
    Resolves: rhbz#1649791


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-31
changelog:
  - grubby-bls: allow to specify the same kernel param multiple times
    Resolves: rhbz#1652486
  - grubby-bls: expand kernel options if these are environment variables
    Resolves: rhbz#1649785
  - grubby-bls: always generate the BLS snippets when adding new entries
    Resolves: rhbz#1653365
  - Improve man page for --info option (jstodola)
    Resolves: rhbz#1651672


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-37
changelog:
  - grubby-bls: unset default entry if is the one being removed
    Resolves: rhbz#1668329
  - grubby-bls: error if args or remove-args is used without update-kernel
    Related: rhbz#1690765
  - grubby-bls: make --update-kernel ALL to update kernelopts var in grubenv
    Resolves: rhbz#1690765
  - grubby-bls: fix --add-kernel not working when using the --args option
    Related: rhbz#1690765


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-38
changelog:
  - grubby-bls: don't print rpm-sort error messages
    Resolves: rhbz#1731924
  - grubby-bls: remove -o option and support -c for ppc64le grub config
    Resolves: rhbz#1758598
  - grubby-bls: fix logic to check if the kernelopts var is defined in a BLS
    Resolves: rhbz#1726514
  - grubby-bls: don't update grubenv when generating grub.cfg for ppc64le
    Related: rhbz#1726514


author: Javier Martinez Canillas <javierm@redhat.com> - 8.40-39
changelog:
  - grubby-bls: strip only /boot from paths
    Resolves: rhbz#1738238
  - Make grubby to also update GRUB_CMDLINE_LINUX in /etc/default/grub
    Resolves: rhbz#1152027
  - grubby-bls: fix corner case when a kernel param value contains a '='
    Resolves: rhbz#1787584
  - grubby-bls: update man page to match options in current wrapper script
    Resolves: rhbz#1812065
  - grubby-bls: always escape the delimiter character used in sed commands
    Related: rhbz#1787584
  - grubby-bls: add a --no-etc-grub-update option
    Related: rhbz#1152027


author: Tomas Popela <tpopela@redhat.com> - 40.0-6
changelog:
  - Require the Source Code Pro font instead of only recommending it to not break
    systems updated from 9.0.0.
    Resolves: rhbz#2093975


author: Jakub Martisko <jamartis@redhat.com> - 1.9-5
changelog:
  - Fix wrong skip size in gzexe
  - Add new test dealing with the ^^ (needs autoreconf)
  - Enable make check (needs less)
    Resolves: 1705413

   * Tue Aug 07 2018 Jakub Martisko <jamartis@redhat.com> - 1.9-4
   - Fix FTBFS bug (gnulib problems)
   - more details: https://lists.gnu.org/r/bug-gnulib/2018-03/msg00000.html
     Resolves 1611722


author: Francisco Javier Tsao Santín <tsao@gpul.org> - 1:1.3-1
changelog:
  - Patch by Todd Lewis that adds option -x to exclude files with pcre lib 
  - This patch solves RH Bugzilla ID's 955246 1322198


author: Tomasz Kłoczko <kloczek@fedoraproject.org> - 1:1.3-4
changelog:
  - remove manually added pcre2 requires (this is autogenerated)
  - removed BuildRoot, %defattr() and Group (new Fedora Packaging Guildline)
  - do not use straight gcc and add use %{__global_ldflags}
  - use %_licensedir is no longer needed
  - minor cleanups:
  -- reformat %description to 80 col
  -- added full URLs in Source fields
  -- more macros
  -- a bit simpler %prep


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Michal Grzedzicki <mge@fb.com> - 9.54-4
changelog:
  - backport fix for --dco-identify real max sectors calculation from upstream version 9.62 (#1959918)


author: Mike A. Harris <mharris@redhat.com> 0.30-1
changelog:
  - Reconfigured Cards database to default to XFree86 4.x for ALL video
    hardware, since 3.3.6 support is being removed.  Video cards not
    supported natively by 4.x will be changed to use the vesa or vga
    driver, or completely removed as unsupported.


author: Mike A. Harris <mharris@redhat.com> 0.31-1
changelog:
  - Modified ATI entries in pcitable to be able to autodetect the FireGL 8700
    and FireGL 8800 which both have the same ID, but different subdevice ID's.
    Added entries to Cards database for the 8700/8800 as well.


author: Bill Nottingham <notting@redhat.com> 0.33-1
changelog:
  - Eizo monitor updates (#56080, <triad@df.lth.se>)
  - pci.ids updates, corresponding pcitable updates
  - pcilint for pcitable


author: Mike A. Harris <mharris@redhat.com> 0.35-1
changelog:
  - Updated Cards db for CT69000
  - Various ATI cleanups and additions to Cards and pcitable
  - Updated S3 Trio3D to default to "vesa" driver (#59956)


author: Mike A. Harris <mharris@redhat.com> 0.37-1
changelog:
  - Changed Matrox G450 driver default options to fix bug (#66697)
  - Corrected S3 Trio64V2 bug in Cards file (#66492)


author: Bill Nottingham <notting@redhat.com> 0.44-1
changelog:
  - fix some of the Dell entries
  - add cardbus controller id (#71198)
  - add audigy mapping
  - add NEC monitor (#71320)


author: Bill Nottingham <notting@redhat.com> 0.61-1
changelog:
  - move pcmcia config file here
  - sort MonitorsDB, add some entries, remove dups
  - switch some network driver mappings


author: Mike A. Harris <mharris@redhat.com>
changelog:
  - Complete reconstruction of all Neomagic hardware entries in Cards
    database to reflect current XFree86, as well as pcitable update,
    and submitted cleaned up entries to sourceforge


author: Mike A. Harris <mharris@redhat.com> 0.65-1
changelog:
  - Added Card:S3 Trio64V2 (Unsupported RAMDAC) entry to pcitable, pci.ids, and
    Cards database to default this particular variant to "vesa" driver (#81659)


author: Mike A. Harris <mharris@redhat.com> 0.68-1
changelog:
  - Massive update of all ATI video hardware PCI IDs in pcitable and a fair
    number of additions and corrections to the Cards database as well


author: Mike A. Harris <mharris@redhat.com> 0.73-1
changelog:
  - Updated pcitable and Cards database to fix Savage entries up a bit, and
    change default Savage/MX driver to 'vesa' as it is hosed and with no sign
    of working in time for 4.3.0.  Fixes (#72476,80278,80346,80423,82394)


author: Mike A. Harris <mharris@redhat.com> 0.88-1
changelog:
  - Update MonitorsDB for new IBM monitors from upstream XFree86 bugzilla:
    http://bugs.xfree86.org/cgi-bin/bugzilla/show_bug.cgi?id=459


author: Mike A. Harris <mharris@redhat.com> 0.99-1
changelog:
  - Added entries for Radeon 9600/9600Pro/9800Pro to Cards
  - Fixed minor glitch in pcitable for Radeon 9500 Pro


author: Bill Nottingham <notting@redhat.com> 0.105-1
changelog:
  - many monitor updates (#114260, #114216, #113993, #113932, #113782,
    - add some PCMCIA cards (#113006, #112505)


author: Mike A. Harris <mharris@redhat.com> 0.110-1
changelog:
  - Added 3Dfx Voodoo Graphics and Voodoo II entries to the Cards database, both
    pointing to Alan Cox's new "voodoo" driver which is now included in XFree86
    4.3.0-62 and later builds in Fedora development.  Mapped their PCI IDs to
    the new Cards entry in pcitable.
  - Updated the entries for 3Dfx Banshee


author: Bill Nottingham <notting@redhat.com> 0.116-1
changelog:
  - move updfstab.conf here
  - add wireless card (#116865)
  - add laptop display panel (#117385)
  - add clipdrive (#119928)
  - add travelling disk (#119143)
  - add NEXDISK (#106782)


author: Bill Nottingham <notting@redhat.com> - 0.120-1
changelog:
  - mainly:
    fix upgradelist module for CMPci cards (#123647)
  - also:
    add another wireless card (#122676)
    add wireless card (#122625)
    add 1280x800 (#121548)
    add 1680x1050 (#121148)
    add IntelligentStick (#124313)


author: Mike A. Harris <mharris@redhat.com> 0.151-1
changelog:
  - Added one hundred billion new nvidia PCI IDs to pcitable and Cards to
    synchronize it with X.Org X11 6.8.2.  (#140601)


author: Bill Nottingham <notting@redhat.com> 0.152-1
changelog:
  - fix qlogic driver mappings, add upgradelist mappings for the modules
    that changed names (#150621)


author: Bill Nottingham <notting@redhat.com> - 0.159-1
changelog:
  - pcitable: make branding happy (#160047)
  - Cards: add required blank line (#157972)
  - add some monitors
  - add JVC CD-ROM (#160907, <richard@rsk.demon.co.uk>)
  - add hisax stuff to blacklist (#154799, #159068)


author: Bill Nottingham <notting@redhat.com> - 0.160-1
changelog:
  - move blacklist to /etc/modprobe.d, require new module-init-tools
  - add LG monitors (#162466, #161734)
  - add orinoco card (#161696)
  - more mptfusion stuff (#107088)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - migrate mpt module names (#161420)
  - remove pcitable entries for drivers in modules.pcimap
  - switch lone remaining 'Server' entry - that can't work right


author: Jeremy Katz <katzj@redhat.com> - 0.171-1
changelog:
  - r128 -> ati.  should fix the unresolved symbol and kem says its more 
    generally the "right" thing to do


author: Adam Jackson <ajackson@redhat.com> - 0.181-1
changelog:
  - Updated videodrivers to mention i945
  - New monitors: Sony CPD-G420 (#145902), Compaq P1110 (#155120).


author: Adam Jackson <ajackson@redhat.com> - 0.182-1
changelog:
  - Added ast driver description to videodrivers
  - Numerous Dell monitor additions (#196734)
  - Numerous Belinea monitor additions (#198087)


author: Phil Knirsch <pknirsch@redhat.com> - 0.183-1
changelog:
  - Updated pci.ids before FC6 final (#198994)
  - Added several missing Samsung monitors (#197463)
  - Included a new inf2mondb.py from Matt Domsch (#158723)


author: Karsten Hopp <karsten@redhat.com> 0.194-1
changelog:
  - Update to latest pci.ids/usb.ids for RHEL5
  - Resolves: #220182
    Add some Dell monitors to MonitorDB


author: Karsten Hopp <karsten@redhat.com> 0.205-1
changelog:
  - really update pci.ids, update-pciids downloaded an old file
  - disable iwl4965 blacklist as it is not approved yet (#245379)


author: Karsten Hopp <karsten@redhat.com> 0.207-1
changelog:
  - pull new upstream pci.ids and rebuild
  - Resolves: bz #251732
  - Resolves: bz #251734
  - Resolves: bz #252195
  - Resolves: bz #252196
  - Resolves: bz #241274


author: Karsten Hopp <karsten@redhat.com> 0.212-1
changelog:
  - pull new upstream pci.ids, usb.ids
  - Resolves: #300831
  - added HP TFT5600 LCD Monitor
  - Resolves: #250569
  - added Acer AL1916W, Eizo L568/L568D, Samsung 795DF
  - Resolves: #250582
  - Add Samsung 205BW/206BW/225BW/226BW
  - Resolves: #250584
  - Add Samsung 931BF
  - Resolves: #250587


author: Karsten Hopp <karsten@redhat.com> 0.217-1
changelog:
  - update pci.ids, oui.txt
  - update usb.ids, fixes #439963
  - add HP w1907 LCD monitor, fixes #431359
  - fix many monitor entries (Stanislav Ievlev, #430276)


author: Karsten Hopp <karsten@redhat.com> 0.220-1
changelog:
  - update pci.ids, usb.ids, oui.txt
  - MonitorsDB: add some Samsung monitors (Ronald Warsow)
  - MonitorsDB: add Dell E1609W (Matt Domsch)
  - MonitorsDB: add 7 Dell monitors (Matt Domsch)
  - MonitorsDB: add a bunch of Hyundai and ImageQuest monitors


author: Karsten Hopp <karsten@redhat.com> 0.220-1
changelog:
  - add new monitor entries from Mandriva hardware database (Thierry Vignaud)
  - make generic entries have properly formated frequencies (Thierry Vignaud)
  - remove duplicate Dell monitor entries (Thierry Vignaud)
  - more vendor name fixes
  - fix extra field in 'Compudyne KD-1500N' definition (Thierry Vignaud)
  - make Dell monitors case consistent (Thierry Vignaud)
  - make all GoldStar monitors have the same vendor name (Thierry Vignaud)
  - add URL of git repository
  - fix spacing (Thierry Vignaud)
  - sort MonitorDB file with LANG=C sort -f -t ";" -k1,2
  - add Samsung SyncMaster 2443BWX (Marc van den Dikkenberg)
  - add some Lenovo monitors (Im Sza)


author: Karsten Hopp <karsten@redhat.com> 0.223-1
changelog:
  - update usb.ids pci.ids oui.txt
  - rename /etc/modprobe.d/blacklist to /etc/modprobe.d/blacklist.conf


author: Karsten Hopp <karsten@redhat.com> 0.232-1
changelog:
  - update usb.ids, out.txt and pci.ids (#550020, #611860)
  - fix incorrect syntax doc/comment in blacklist.conf (Ville Skyttä, #532802)
  - add Acer B243HL and BenQ G2420HDBL (Ville Skyttä, #590787)
  - add HP LP2475w and Samsung 2494HM (Ville Skyttä, #595059)


author: Karsten Hopp <karsten@redhat.com> 0.233-7
changelog:
  - bump release
  - update oui.txt URL
  - fix tarball name in spec file
  - update usb.ids, out.txt and pci.ids


author: Michal Minar <miminar@redhat.com> 0.247-1
changelog:
  - Moved blacklist.conf from /etc/modprobe.d to /usr/lib/modprobe.d.
  - Renamed it to dist-blacklist.conf.
  - Data files update


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.1-0
changelog:
  - 1.1 rel# Patch to the 1.1 fix 2967 http://www.open-mpi.org/software/hwloc/nightly/v1.1/hwloc-1.1rc6r2967.tar.bz2
  - Fix hwloc_bitmap_to_ulong right after allocating the bitmap.
  - Fix the minimum width of NUMA nodes, caches and the legend in the graphical lstopo output.
  - Cleanup error management in hwloc-gather-topology.sh.
  - Add a manpage and usage for hwloc-gather-topology.sh on Linux.
  - Rename hwloc-gather-topology.sh to hwloc-gather-topology to be consistent with the upcoming version 1.2ease


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.3-0
changelog:
  - 1.3 release
  - added dependency on libibverbs-devel pciutils-devel
  - cannot provide support for cuda (cuda_runtime_api.h).
  - Nvidia CUDA is free but not open-source therefore not in Fedora.


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.8-2
changelog:
  - Unversioned docdir change, more info on
    https://fedoraproject.org/wiki/Changes/UnversionedDocdirs


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9-1
changelog:
  - Update to 1.9
  - Split out lstopo into a -gui subpackage, so the hwloc base package
    does not pull in all of X.


author: Orion Poplwski <orion@cora.nwra.com> - 1.11.0-1
changelog:
  - Update to version 1.11.0 (fixes bug #1208279)
  - Drop arm patch applied upstream
  - Make hwloc-devel require libibverbs-devel (bug #1191770)
  - Fix man page manipulation (bug #1235954)


author: Michal Schmidt <mschmidt@redhat.com> - 1.11.8-3
changelog:
  - BuildRequire rdma-core-devel on s390(x).
  - Install the hwloc-dump-hwdata.service systemd service on x86/x86_64.


author: Michal Schmidt <mschmidt@redhat.com> - 1.11.9-1
changelog:
  - Update to 1.11.9.
  - BuildRequire gcc, gcc-c++. Drop Group tags.
  - BuildRequire numactl-devel on s390x too.


author: Honggang Li <honli@redhat.com> - 32.0-4
changelog:
  - Update to upstream stable release v32.1
  - Fix mlx5 pyverbs CQ test
  - Resolves: bz1915745, bz1907377


author: Honggang Li <honli@redhat.com> - 37.1-1
changelog:
  - Update to upstream v37.1 release for features and fixes
  - Resolves: bz1982200, bz1990120, bz1982131


author: Kamal Heib <kheib@redhat.com> - 46.0-1
changelog:
  - Rebase to upstream release v46.0
  - Resolves: rhbz#2170066, rhbz#2209685, rhbz#2159635, rhbz#2167517


author: Jarod Wilson <jarod@redhat.com> - 12-3
changelog:
  - Take libi40iw out of tech-preview state (rhbz 1428930)
  - Add ibv_*_pingpong man pages (rhbz 1416541)


author: Jarod Wilson <jarod@redhat.com> - 12-4
changelog:
  - Clean up devel files list
  - Fix up a few dependencies rpmdiff complained about (rhbz 1404035)
  - Add Requires: pciutils for dracut to behave in minimalist cases (rhbz 1429046)
  - Adjust Conflicts: on infiniband-diags to match RHEL packaging (rhbz 1428785)


author: Jarod Wilson <jarod@redhat.com> - 13-1
changelog:
  - Update to rdma-core v13 release (rhbz 1404035)
  - Mellanox mlx5 Direct Verbs support (rhbz 1426430)
  - Get build working on s390x, less mlx5 (rhbz 1434029)


author: Jarod Wilson <jarod@redhat.com> 13-6
changelog:
  - Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
  - Add necessary Provides/Obsoletes for old -static packages
  - Remove ibverbs providers that we aren't currently able to support
  - Resolves: rhbz#1453096, rhbz#1451607


author: Jarod Wilson <jarod@redhat.com> 15-2
changelog:
  - Fix ibacm segfault and improper multicast handling
  - Resolves: rhbz#1502745
  - Resolves: rhbz#1502759


author: Honggang Li <honli@redhat.com> 15-3
changelog:
  - srp_daemon: Don't create async_ev_thread if only run once
  - srp_daemon: Remove unsupported systemd configurations
  - srp_daemon: Start srp_daemon service after network target
  - Resolves: bz1525193
  - Resolves: bz1528671


author: Jarod Wilson <jarod@redhat.com> 15-4
changelog:
  - Add support for extended join multicast API in librdmacm
  - Add support for striding RQ on mlx5
  - Resolves: rhbz#1515487, rhbz#1516571


author: Jarod Wilson <jarod@redhat.com> 15-5
changelog:
  - libmlx4: report RSS caps for improved DPDK support
  - Fix double mutex unlock in iwpmd
  - Resolves: rhbz#1527350
  - Resolves: rhbz#1542362


author: Jarod Wilson <jarod@redhat.com> 15-7
changelog:
  - i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
    causing problems with suspend and resume, and fall back to load via
    systemd rdma initscript.
  - Resolves: rhbz#1561566


author: Jarod Wilson <jarod@redhat.com> 17.1-1
changelog:
  - Rebase to upstream rdma-core v17.1 stable release
  - No more libibcm or ib sysv initscripts
  - Remove ibverbs provider for unsupported CXGB3 devices
  - Remove ibverbs provider for unsupported OCRDMA devices
  - Resolves: rhbz#1492324
  - Resolves: rhbz#1492924
  - Resolves: rhbz#1503621
  - Resolves: rhbz#1504528
  - Resolves: rhbz#1504581
  - Resolves: rhbz#1503723


author: Jarod Wilson <jarod@redhat.com> 18.1-2
changelog:
  - Disable nes, mthca and ipath libibverbs providers, this
    old hardware is no longer supported, and fix disabling
    of cxgb3 and ocrdma


author: Jarod Wilson <jarod@redhat.com> - 19.1-1
changelog:
  - Update to v19.1 stable branch release
  - Fix SRQ support in libi40iw
  - Backport libqedr support for SRQ
  - Resolves: rhbz#1639692
  - Switch rxe_cfg from ifconfig to iproute2
  - Resolves: rhbz#1640637


author: Jarod Wilson <jarod@redhat.com> - 22-1
changelog:
  - Update to upstream v22 release for features and fixes
  - Include legacy ibdev2netdev helper script
  - Resolves: rhbz#1643904


author: Jarod Wilson <jarod@redhat.com> - 22.3-1
changelog:
  - Update to upstream v22.3 stable release for fixes
  - Enable support for Broadcom 57500 hardware
  - Enable support for Mellanox ConnectX-6 DX hardware
  - Resolves: rhbz#1678276
  - Resolves: rhbz#1687435


author: Jarod Wilson <jarod@redhat.com> - 26.0-2
changelog:
  - Add Obsoletes/Provides pair for infiniband-diags-devel
  - Pull in upstream stable-v26 branch patches
  - Fix %postun scriptlet failures by removing superfluous -p options
  - Add new BuildRequires: on pandoc
  - Related: rhbz#1722257


author: Honggang Li <honli@redhat.com> - 29.0-2
changelog:
  - Suppress ibdev2netdev warning messgae
  - Unversioned documentation directory
  - Resolves: bz1794904, bz1824853


author: Honggang Li <honli@redhat.com> - 32.0-1
changelog:
  - Update to upstream v32 release for features and fixes
  - Support Amazon Elastic Fabric Adapter
  - Enable pyverbs
  - Add a check for udevadm in the specfile
  - Resolves: bz1851721, bz1856076, bz1887396, bz1868804


author: Jacob Wang <jacob.wang@openanolis.org> - 48.0-1.0.1
changelog:
  - Support loongarch64 (Hang Zhao)
  - Fix build error (geliwei@openanolis.org)
  - cherry-pick `add sw Patch #9532175ecea28d05bb1173c2fb3e8ddf05b3e516`. (nijie@wuxiat.com)
  - Add erdma provider support (chengyou@linux.alibaba.com)


author: Mike FABIAN <mfabian@redhat.com> - 60.2-4
changelog:
  - Add negative-daylight-savings.patch from upstream.
    (see http://bugs.icu-project.org/trac/ticket/13566 and
    http://bugs.icu-project.org/trac/changeset/40954)


author: Parag Nemade <pnemade AT redhat DOT com> - 60.2-7
changelog:
  - Resolves:rh#1602551 - Fix specfile by adding compile options
  - also add BuildRequires for gcc and gcc-c++
  - Correct the upstream URL


author: Mike FABIAN <mfabian@redhat.com> - 60.3-1
changelog:
  - Update to 60.3 maintenance release including support for new Japanese era Reiwa (令和).
  - Resolves: rhbz#1677093


author: Mike FABIAN <mfabian@redhat.com> - 60.3-2
changelog:
  - Apply ICU-13634-Adding-integer-overflow-logic-to-ICU4C-num.patch
  - Apply ICU-20958-Prevent-SEGV_MAPERR-in-append.patch
  - Resolves: rhbz#1808238


author: Jan Macku <jamacku@redhat.com> - 10.00.10-1
changelog:
  - Allow updating rfkill switch status while in readonly root mode
  - service: Prevent variables from globbing
  - Allow updating mlocate.db while in readonly root mode


author: Jan Macku <jamacku@redhat.com> - 10.00.16-1
changelog:
  - rename_device: also support dracut-style kernel cmdline configuration
  - ifup-routes: Log when using `ip $type replace`
  - ifup-routes: Use `ip route repace` to avoid race


author: Jan Macku <jamacku@redhat.com> - 10.00.17-1
changelog:
  - ifup-routes: Revert quotes
  - ifup-routes: Use `ip replace` only on type `route`
  - ci: introduce GA ci from master to rhel8-branch
  - ci: Setup packit for RHEL8 branch
  - ci: Get rid of old ci files (travis and zanata)


author: Charalampos Stratakis <cstratak@redhat.com> - 0.6-10
changelog:
  - SPEC file cleanup
  - Added licence tag
  - Removal of old and unneeded macros
  - Use of newest python macros
  - Removed Python 2 dependency
  - Added patch for Python 3 build


author: Andrea Claudi <aclaudi@redhat.com> - 5.15.0-2.el8
changelog:
  - vdpa: Enable user to set mtu of the vdpa device (Andrea Claudi) [2036880]
  - vdpa: Enable user to set mac address of vdpa device (Andrea Claudi) [2036880]
  - vdpa: Enable user to query vdpa device config layout (Andrea Claudi) [2036880]
  - vdpa: align uapi headers (Andrea Claudi) [2036880]


author: Andrea Claudi <aclaudi@redhat.com> - 5.15.0-3.el8
changelog:
  - tc: u32: add json support in `print_raw`, `print_ipv4`, `print_ipv6` (Andrea Claudi) [1989591]
  - tc: u32: add support for json output (Andrea Claudi) [1989591]


author: Andrea Claudi <aclaudi@redhat.com> - 5.15.0-4.el8
changelog:
  - vdpa: Update man page with added support to configure max vq pair (Andrea Claudi) [2056827]
  - vdpa: Support reading device features (Andrea Claudi) [2056827]
  - vdpa: Support for configuring max VQ pairs for a device (Andrea Claudi) [2056827]
  - vdpa: Allow for printing negotiated features of a device (Andrea Claudi) [2056827]
  - vdpa: Remove unsupported command line option (Andrea Claudi) [2056827]
  - uapi: update vdpa.h (Andrea Claudi) [2056827]
  - Update kernel headers and import virtio_net (Andrea Claudi) [2056827]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-2.el8
changelog:
  - macvlan: Add bclim parameter (Andrea Claudi) [2188134]
  - Update kernel headers (Andrea Claudi) [2188134]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-4.el8
changelog:
  - ip vrf: make ipvrf_exec SELinux-aware (Andrea Claudi) [1780023]
  - lib: add SELinux include and stub functions (Andrea Claudi) [1780023]
  - ss: make SELinux stub functions conformant to API definitions (Andrea Claudi) [1780023]
  - ss: make is_selinux_enabled stub work like in SELinux (Andrea Claudi) [1780023]


author: Liwei Ge <geliwei@openanolis.org> - 6.2.0-5.0.1
changelog:
  - delete the rt_dsfield file due to three Aones (hengqi@linux.alibaba.com)
  - [kernelself-tests]net.fib_rule_tests.sh: TEST rule4 del by pref, rule6 del by pref FAIL


author: Helge Deller <hdeller@redhat.de>
changelog:
  - updated to iproute2-2.2.4-now-ss001007.tar.gz
  - bzip2 source tar file
  - "License" replaces "Copyright"
  - added "BuildPrereq: tetex-latex tetex-dvips psutils"
  - rebuilt for 7.2


author: Phil Knirsch <pknirsch@redhat.com> 2.4.7-3
changelog:
  - Fixed missing diffserv and atm support in config (#57278).
  - Fixed inconsistent numeric base problem for command line (#65473).


author: Phil Knirsch <pknirsch@redhat.com>
changelog:
  - Updated to latest version. Used by other distros, so seems stable. ;-)
  - Quite a few patches needed updating in that turn.
  - Added ss (#107363) and several other new nifty tools.


author: Phil Knirsch <pknirsch@redhat.com> 2.4.7-14
changelog:
  - Fixed -f option for ss (#118355).
  - Small description fix (#110997).
  - Added initialization of some vars (#74961).
  - Added patch to initialize "default" rule as well (#60693).


author: Radek Vokal <rvokal@redhat.com> - 2.6.18-1
changelog:
  - upgrade to upstream 2.6.18
  - initcwnd patch merged
  - bug fix for xfrm monitor
  - alignment fixes for cris
  - documentation corrections


author: Marcela Maslanova <mmaslano@redhat.com> - 2.6.23-2
changelog:
  - rebuild with fix tetex and linuxdoc-tools -> manual pdf
  - clean unnecessary patches
  - add into spec *.so objects, new BR linux-atm-libs-devel


author: Marcela Maslanova <mmaslano@redhat.com> - 2.6.23-3
changelog:
  - rebuild without tetex files. It isn't working in rawhide yet. Added
    new source for ps files.
  - #431179 backward compatibility for previous iproute versions


author: Marcela Maslanova <mmaslano@redhat.com> - 2.6.27-1
changelog:
  - aead support was included into upstream version
  - patch for moving libs is now deprecated
  - update to 2.6.27


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.27-2
changelog:
  - 475130 - Negative preferred lifetimes of IPv6 prefixes/addresses
    displayed incorrectly
  - 472878 - “ip maddr show” in IB interface causes a stack corruption
  - both patches will be probably in iproute v2.6.28


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.28-2
changelog:
  - 483484 install distribution files into /usr/share and also fixed
   install paths in spec
  - add the latest change from git which add DRR support
   c86f34942a0ce9f8203c0c38f9fe9604f96be706


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.29-1
changelog:
  - update to 2.6.29
  - remove DDR patch which became part of sourc
  - add patch with correct headers 1957a322c9932e1a1d2ca1fd37ce4b335ceb7113


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.29-2
changelog:
  - c3651bf4763d7247e3edd4e20526a85de459041b ip6tunnel: Fix no default
   display of ip4ip6 tunnels
  - e48f73d6a5e90d2f883e15ccedf4f53d26bb6e74 missing arpd directory


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.29-3
changelog:
  - new iptables (xtables) bring problems to tc, when ipt is used.
    rhbz#497344 still broken. tc_modules.patch brings correct paths to
    xtables, but that doesn't fix whole issue.
  - 497355 ip should allow creation of an IPsec SA with 'proto any'
    and specified sport and dport as selectors


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.32-2
changelog:
  - add macvlan aka VESA support d63a9b2b1e4e3eab0d0577d0a0f412d50be1e0a7
  - kernel headers 2.6.33 ab322673298bd0b8927cdd9d11f3d36af5941b93
    are needed for macvlan features and probably for other added later.
  - fix number of release which contains 2.6.32 kernel headers and features
    but it was released as 2.6.31


author: Marcela Mašláňová <mmaslano@redhat.com> - 2.6.33-2
changelog:
  - 578729 6rd tunnel correctly 3979ef91de9ed17d21672aaaefd6c228485135a2
  - change BR texlive to tex according to guidelines


author: Petr Sabata <psabata@redhat.com> - 2.6.38.1-2
changelog:
  - General cleanup
  - Use global instead of define
  - Buildroot removal
  - Correcting URL and Source links
  - Install genl, ifstat, routef, routel and rtpr (rhbz#697319)


author: Petr Sabata <psabata@redhat.com> - 2.6.38.1-3
changelog:
  - Install ctstat, rtstat and routef manpage symlinks
  - Install m_xt & m_ipt tc modules
  - Creating devel and virtual static subpackages with libnetlink


author: Petr Šabata <contyk@redhat.com> - 3.1.0-1
changelog:
  - 3.1.0 bump
  - Point URL and Source to the new location on kernel.org
  - Remove now obsolete defattr
  - Dropping various patches now included upstream
  - Dropping iproute2-2.6.25-segfault.patch; I fail to understand the reason for
    this hack


author: Petr Šabata <contyk@redhat.com> - 3.6.0-3
changelog:
  - Include section 7 manpages (#876857)
  - Fix ancient bogus dates in the changelog (correction based upon commits)
  - Explicitly require some TeX fonts no longer present in the base distribution


author: Petr Šabata <contyk@redhat.com> - 3.10.0-1
changelog:
  - 3.10.0 bump
  - Drop the SHAREDIR patch and revert to upstream ways (#966445)
  - Fix an XFRM regression with FORTIFY_SOURCE


author: Petr Šabata <contyk@redhat.com> - 3.10.0-4
changelog:
  - lnstat -i: Run indefinitely if the --count isn't specified (#977845)
  - Switch to unversioned %docdir


author: Phil Sutter <psutter@redhat.com> - 4.5.0-3
changelog:
  - Fix upgrade path by adding correct Requires/Obsoletes statements to spec file
  - Move README.iproute2+tc into tc subpackage


author: Phil Sutter <psutter@redhat.com> - 4.10.0-1
changelog:
  - Ship new header iproute2/bpf_elf.h
  - Document content of remaining docs fixup patch in spec file
  - Drop patches already applied upstream
  - New version 4.10.0


author: Phil Sutter <psutter@redhat.com> [4.17.0-1.el8]
changelog:
  - rdma: print driver resource attributes (Phil Sutter) [1610334]
  - rdma: update rdma_netlink.h to get new driver attributes (Phil Sutter) [1610334]
  - rdma: Print net device name and index for RDMA device (Phil Sutter) [1610334]
  - devlink: CTRL_ATTR_FAMILY_ID is a u16 (Phil Sutter) [1589317]
  - tc: Do not use addattr_nest_compat on mqprio and netem (Phil Sutter) [1589317]
  - ipaddress: Fix and make consistent label match handling (Phil Sutter) [1589317]
  - rt_dsfield: Ship deprecated values for compatibility (Phil Sutter) [1595683]
  - New version 4.17.0 including upstream-suggested fixes (Phil Sutter) [1589317]


author: Phil Sutter <psutter@redhat.com> [4.18.0-2.el8]
changelog:
  - bridge/mdb: fix missing new line when show bridge mdb (Phil Sutter) [1625500]
  - ip-route: Fix segfault with many nexthops (Phil Sutter) [1625358]
  - Update kernel headers (Phil Sutter) [1615915]
  - tc/flower: Add match on encapsulating tos/ttl (Phil Sutter) [1615915]
  - tc/act_tunnel_key: Enable setup of tos and ttl (Phil Sutter) [1615915]
  - iprule: Fix destination prefix output (Phil Sutter) [1623503]
  - ip: Add missing -M flag to help text (Phil Sutter) [1612704]
  - man: ss.8: Describe --events option (Phil Sutter) [1612704]
  - rtmon: List options in help text (Phil Sutter) [1612704]
  - man: rtacct.8: Fix nstat options (Phil Sutter) [1612704]
  - man: ifstat.8: Document --json and --pretty options (Phil Sutter) [1612704]
  - genl: Fix help text (Phil Sutter) [1612704]
  - man: devlink.8: Document -verbose option (Phil Sutter) [1612704]
  - devlink: trivial: Make help text consistent (Phil Sutter) [1612704]
  - bridge: trivial: Make help text consistent (Phil Sutter) [1612704]
  - man: bridge.8: Document -oneline option (Phil Sutter) [1612704]


author: Phil Sutter <psutter@redhat.com> [4.18.0-4.el8]
changelog:
  - iplink_vxlan: take into account preferred_family creating vxlan device (Phil Sutter) [1626321]
  - ip-addrlabel: Fix printing of label value (Phil Sutter) [1639412]
  - bridge: fdb: Fix for missing keywords in non-JSON output (Phil Sutter) [1636532]


author: Phil Sutter <psutter@redhat.com> [4.18.0-5.el8]
changelog:
  - utils: fix get_rtnl_link_stats_rta stats parsing (Phil Sutter) [1626306]
  - uapi: add snmp header file (Phil Sutter) [1626306]
  - macsec: fix off-by-one when parsing attributes (Phil Sutter) [1628428]
  - json: make 0xhex handle u64 (Phil Sutter) [1628428]


author: Phil Sutter <psutter@redhat.com> [4.18.0-6.el8]
changelog:
  - Update kernel headers (Phil Sutter) [1637440]
  - tc_util: Add support for showing TCA_STATS_BASIC_HW statistics (Phil Sutter) [1637440]
  - tc: Remove pointless assignments in batch() (Phil Sutter) [1602555]
  - tipc: Drop unused variable 'genl' (Phil Sutter) [1602555]
  - ip-route: Fix parse_encap_seg6() srh parsing (Phil Sutter) [1602555]
  - rdma: Don't pass garbage to rd_check_is_filtered() (Phil Sutter) [1602555]
  - ip-route: Fix for memleak in error path (Phil Sutter) [1602555]
  - rdma: Fix for ineffective check in add_filter() (Phil Sutter) [1602555]
  - devlink: Fix error reporting in cmd_resource_set() (Phil Sutter) [1602555]
  - libnetlink: fix use-after-free of message buf (Phil Sutter) [1602555]
  - libnetlink: don't return error on success (Phil Sutter) [1602555]
  - libnetlink: fix leak and using unused memory on error (Phil Sutter) [1602555]
  - tc: htb: Print default value in hex (Phil Sutter) [1641053]


author: Phil Sutter <psutter@redhat.com> [4.18.0-7.el8]
changelog:
  - ip-route: Fix nexthop encap parsing (Phil Sutter) [1625358]
  - man: ip-route.8: Document nexthop limit (Phil Sutter) [1625358]


author: Phil Sutter <psutter@redhat.com> [4.18.0-11.el8]
changelog:
  - tc: m_tunnel_key: Add tunnel option support to act_tunnel_key (Phil Sutter) [1654761]
  - tc: f_flower: add geneve option match support to flower (Phil Sutter) [1654761]
  - l2tp: Fix printing of cookie and peer_cookie values (Phil Sutter) [1643805]


author: Andrea Claudi <aclaudi@redhat.com> [4.18.0-12.el8]
changelog:
  - devlink: Add param command support (Andrea Claudi) [1663199]
  - rdma: Fix representation of PortInfo CapabilityMask (Andrea Claudi) [1664694]
  - uapi: update ib_verbs (Andrea Claudi) [1664694]
  - tc: flower: Add support for QinQ (Andrea Claudi) [1615928]
  - ip rule: Add ipproto and port range to filter list (Andrea Claudi) [1678111]


author: Andrea Claudi <aclaudi@redhat.com> [4.18.0-13.el8]
changelog:
  - ip-xfrm: Respect family in deleteall and list commands (Andrea Claudi) [1656717]
  - Update kernel headers (Andrea Claudi) [1716361]
  - uapi: update bpf header (Andrea Claudi) [1716361]
  - uapi: update headers to 4.20-rc1 (Andrea Claudi) [1716361]
  - bpf: add btf func and func_proto kind support (Andrea Claudi) [1716361]
  - lib/bpf: fix build warning if no elf (Andrea Claudi) [1716361]
  - bpf: initialise map symbol before retrieving and comparing its type (Andrea Claudi) [1716361]
  - Include bsd/string.h only in include/utils.h (Andrea Claudi) [1716361]
  - Use libbsd for strlcpy if available (Andrea Claudi) [1716361]
  - bpf: check map symbol type properly with newer llvm compiler (Andrea Claudi) [1716361]
  - bpf: implement btf handling and map annotation (Andrea Claudi) [1716361]
  - bpf: implement bpf to bpf calls support (Andrea Claudi) [1716361]
  - bpf: remove strict dependency on af_alg (Andrea Claudi) [1716361]
  - bpf: move bpf_elf_map fixup notification under verbose (Andrea Claudi) [1716361]
  - iplink: add support for reporting multiple XDP programs (Andrea Claudi) [1716361]
  - rdma: Document IB device renaming option (Andrea Claudi) [1663228]
  - rdma: Add an option to rename IB device interface (Andrea Claudi) [1663228]
  - rdma: Introduce command execution helper with required device name (Andrea Claudi) [1663228]
  - rdma: Update kernel include file to support IB device renaming (Andrea Claudi) [1663228]
  - libnetlink: Convert GETADDR dumps to use rtnl_addrdump_req (Andrea Claudi) [1716772]


author: Andrea Claudi <aclaudi@redhat.com> [4.18.0-15.el8]
changelog:
  - netns: make netns_{save,restore} static (Andrea Claudi) [1719759]
  - ip vrf: use hook to change VRF in the child (Andrea Claudi) [1719759]
  - netns: switch netns in the child when executing commands (Andrea Claudi) [1719759]
  - m_mirred: don't bail if the control action is missing (Andrea Claudi) [1711760]
  - tc: introduce support for chain templates (Andrea Claudi) [1710291]
  - ip: reset netns after each command in batch mode (Andrea Claudi) [1671016]


author: Andrea Claudi <aclaudi@redhat.com> [5.3.0-2.el8]
changelog:
  - man: ip.8: Add missing vrf subcommand description (Andrea Claudi) [1780010]
  - xfrm: not try to delete ipcomp states when using deleteall (Andrea Claudi) [1808634]
  - ip-xfrm: Fix help messages (Andrea Claudi) [1796045]
  - man: rdma.8: Add missing resource subcommand description (Andrea Claudi) [1786576]
  - man: rdma-statistic: Add filter description (Andrea Claudi) [1786565]
  - tc: implement support for action flags (Andrea Claudi) [1770671]
  - Update kernel headers (Andrea Claudi) [1770671]
  - Update kernel headers (Andrea Claudi) [1770671]


author: Andrea Claudi <aclaudi@redhat.com> [5.3.0-3.el8]
changelog:
  - xfrm: also check for ipv6 state in xfrm_state_keep (Andrea Claudi) [1828033]
  - man: bridge.8: fix bridge link show description (Andrea Claudi) [1817571]
  - ip: fix ip route show json output for multipath nexthops (Andrea Claudi) [1738633]
  - ip link: xstats: fix TX IGMP reports string (Andrea Claudi) [1796041]
  - nstat: print useful error messages in abort() cases (Andrea Claudi) [1824896]


author: Andrea Claudi <aclaudi@redhat.com> [5.3.0-4.el8]
changelog:
  - tc: f_flower: add options support for erspan (Andrea Claudi) [1830485]
  - tc: f_flower: add options support for vxlan (Andrea Claudi) [1830485]
  - tc: m_tunnel_key: add options support for erpsan (Andrea Claudi) [1830485]
  - tc: m_tunnel_key: add options support for vxlan (Andrea Claudi) [1830485]
  - iproute_lwtunnel: add options support for erspan metadata (Andrea Claudi) [1830485]
  - iproute_lwtunnel: add options support for vxlan metadata (Andrea Claudi) [1830485]
  - iproute_lwtunnel: add options support for geneve metadata (Andrea Claudi) [1830485]
  - Update kernel headers (Andrea Claudi) [1830485]
  - man: ip.8: add reference to mptcp man-page (Andrea Claudi) [1812207]
  - man: mptcp man page (Andrea Claudi) [1812207]
  - ss: allow dumping MPTCP subflow information (Andrea Claudi) [1812207]
  - Update kernel headers (Andrea Claudi) [1812207]
  - Update kernel headers (Andrea Claudi) [1812207]
  - add support for mptcp netlink interface (Andrea Claudi) [1812207]
  - Update kernel headers and import mptcp.h (Andrea Claudi) [1812207]
  - ip: xfrm: add espintcp encapsulation (Andrea Claudi) [1844045]
  - Update kernel headers and import udp.h (Andrea Claudi) [1844045]


author: Andrea Claudi <aclaudi@redhat.com> [5.3.0-5.el8]
changelog:
  - man: tc-ct.8: Add manual page for ct tc action (Andrea Claudi) [1844637]
  - tc: flower: Add matching on conntrack info (Andrea Claudi) [1844637]
  - tc: Introduce tc ct action (Andrea Claudi) [1844637]
  - tc: add NLA_F_NESTED flag to all actions options nested block (Andrea Claudi) [1844637]
  - Import tc_act/tc_ct.h uapi file (Andrea Claudi) [1844637]
  - ss: allow dumping kTLS info (Andrea Claudi) [1812207]
  - devlink: Add health error recovery status monitoring (Andrea Claudi) [1821039]


author: Andrea Claudi <aclaudi@redhat.com> [5.9.0-2.el8]
changelog:
  - tc: flower: fix json output with mpls lse (Andrea Claudi) [1885770]
  - tc-mpls: fix manpage example and help message string (Andrea Claudi) [1885770]
  - tc-vlan: fix help and error message strings (Andrea Claudi) [1885770]
  - m_mpls: test the 'mac_push' action after 'modify' (Andrea Claudi) [1885770]
  - m_mpls: add mac_push action (Andrea Claudi) [1885770]
  - m_vlan: add pop_eth and push_eth actions (Andrea Claudi) [1885770]
  - Update kernel headers (Andrea Claudi) [1885770]


author: Andrea Claudi <aclaudi@redhat.com> [5.12.0-1.el8]
changelog:
  - tc: f_flower: Add missing ct_state flags to usage description (Andrea Claudi) [1957243]
  - tc: f_flower: Add option to match on related ct state (Andrea Claudi) [1957243]


author: Andrea Claudi <aclaudi@redhat.com> [5.12.0-3.el8]
changelog:
  - tc: htb: improve burst error messages (Andrea Claudi) [1910745]
  - tc: u32: Fix key folding in sample option (Andrea Claudi) [1979425]
  - police: Fix normal output back to what it was (Andrea Claudi) [1981393]
  - police: Add support for json output (Andrea Claudi) [1981393]
  - police: add support for packet-per-second rate limiting (Andrea Claudi) [1981393]
  - Update kernel headers (Andrea Claudi) [1981393]
  - mptcp: add support for port based endpoint (Andrea Claudi) [1984733]


author: Liwei Ge <geliwei@openanolis.org> - 6.2.0-6.0.1
changelog:
  - delete the rt_dsfield file due to three Aones (hengqi@linux.alibaba.com)
  - [kernelself-tests]net.fib_rule_tests.sh: TEST rule4 del by pref, rule6 del by pref FAIL
  - cherry-pick `add sw patch #89d57a068e2a72e13980eef179ae85fa0f9dd348`. (nijie@wxiat.com)
  - Disable bpf feature for sw_64. (Weisson@linux.alibaba.com)


author: Stefano Brivio <sbrivio@redhat.com> - 6.38-3
changelog:
  - Fix loading of sets with dependencies on other sets (RHBZ#1647096), and
    hardcode 6.38-1.el7 for ipset-service upgrade and downgrade triggers, so that
    we don't run into issues with z-stream updates


author: Stefano Brivio <sbrivio@redhat.com> - 7.1-1
changelog:
  - Rebase to 7.1 (RHBZ#1649090):
    - Add compatibility support for strscpy()
    - Correct the manpage about the sort option
    - Add missing functions to libipset.map
    - configure.ac: Fix build regression on RHEL/CentOS/SL (Serhey Popovych)
    - Implement sorting for hash types in the ipset tool
    - Fix to list/save into file specified by option (reported by Isaac Good)
    - Introduction of new commands and protocol version 7, updated kernel include files
    - Add compatibility support for async in pernet_operations
    - Use more robust awk patterns to check for backward compatibility
    - Prepare the ipset tool to handle multiple protocol version
    - Fix warning message handlin
    - Correct to test null valued entry in hash:net6,port,net6 test
    - Library reworked to support embedding ipset completely
    - Add compatibility to support kvcalloc()
    - Validate string type attributes in attr2data() (Stefano Brivio)
    - manpage: Add comment about matching on destination MAC address (Stefano Brivio)
      (RHBZ#1649079)
    - Add compatibility to support is_zero_ether_addr()
    - Fix use-after-free in ipset_parse_name_compat() (Stefano Brivio) (RHBZ#1649085)
    - Fix leak in build_argv() on line parsing error (Stefano Brivio) (RHBZ#1649085)
    - Simplify return statement in ipset_mnl_query() (Stefano Brivio) (RHBZ#1649085)
    - tests/check_klog.sh: Try dmesg too, don't let shell terminate script (Stefano Brivio) 
  - Fixes:
    - Fix all shellcheck warnings in init script (RHBZ#1649085)
    - Make error reporting consistent, introduce different severities (RHBZ#1683711)
    - While restoring, on invalid entries, remove them and retry (RHBZ#1683713)
    - Fix covscan SC2166 warning in init script (RHBZ#1649085)


author: Preston Brown <pbrown@redhat.com>
changelog:
  - move iptables to /sbin.
  - excludearch alpha for now, not building there because of compiler bug(?)


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - 1.2
  - fix up ipv6 split
  - add init script
  - Move the plugins from /usr/lib/iptables to /lib/iptables.
    This needs to work before /usr is mounted...
  - Use -O1 on alpha (compiler bug)


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fix bugzilla #25986 (initscript not marked as config file)
  - fix bugzilla #25962 (iptables-restore)
  - mv chkconfig --del from postun to preun


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Yet another initscript fix (#30173)
  - Fix the fixes; they fixed some issues but broke more important
    stuff :/ (#30176)


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.4-1
changelog:
  - Update to 1.2.4 (various fixes, including security fixes; among others:
    - Fix init script (#31133)


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.2.5-2
changelog:
  - Merge ip6tables improvements from Ian Prowell <iprowell@prowell.org>
    - Update URL (#59354)
  - Use /sbin/chkconfig rather than chkconfig in %postun script


author: Karsten Hopp <karsten@redhat.de>
changelog:
  - fixed iptables and ip6tables initscript output, based on #70511
  - check return status of all iptables calls, not just the last one
    in a 'for' loop.


author: Florian La Roche <Florian.LaRoche@redhat.de>
changelog:
  - remove check for very old kernel versions in init scripts
  - sync up both init scripts and remove some further ugly things
  - add some docu into rpm


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-5
changelog:
  - new config option IPTABLES_SAVE_ON_RESTART
  - init script: new status, save and restart
  - fixes #44905, #65389, #80785, #82860, #91040, #91560 and #91374


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-6
changelog:
  - IPTABLES_SAVE_COUNTER defaults to no, now
  - install config file in /etc/sysconfig
  - exchange unload of ip_tables and ip_conntrack
  - fixed start function


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-12.1
changelog:
  - fixed lost udp port range in ip6tables-save (#104484)
  - fixed non numeric multiport port output in ipXtables-savs


author: Thomas Woerner <twoerner@redhat.com> 1.2.8-13
changelog:
  - marked all messages in iptables init script for translation (#107462)
  - enabled devel package (#105884, #106101)
  - bumped build for fedora for libipt_recent.so (#106002)


author: Thomas Woerner <twoerner@redhat.com> 1.2.9-1
changelog:
  - vew version 1.2.9
  - new config options in ipXtables-config:
    IPTABLES_MODULES_UNLOAD
  - more documentation in ipXtables-config
  - fix for netlink security issue in libipq (devel package)
  - print fix for libipt_icmp (#109546)


author: Thomas Woerner <twoerner@redhat.com> 1.2.11-3.1
changelog:
  - changed default behaviour for IPTABLES_STATUS_NUMERIC to "yes" (#129731)
  - modified config file to match this change and un-commented variables with
    default values


author: Thomas Woerner <twoerner@redhat.com> 1.3.0-2
changelog:
  - Remove unnecessary explicit kernel dep (#146142)
  - Fixed out of bounds accesses (#131848): Thanks to Steve Grubb
    for the patch
  - Adapted iptables-config to reference to modprobe.conf (#150143)
  - Remove misleading message (#140154): Thanks to Ulrich Drepper
    for the patch


author: Thomas Woerner <twoerner@redhat.com> 1.3.4-1
changelog:
  - new version 1.3.4
  - dropped free_opts patch (upstream fixed)
  - made libipq PIC (#158623)
  - additional configuration options for iptables startup script (#172929)
    Thanks to Jan Gruenwald for the patch
  - spec file cleanup (dropped linux_header define and usage)


author: Thomas Woerner <twoerner@redhat.com> 1.3.4-2
changelog:
  - fix for plugin problem: link with "gcc -shared" instead of "ld -shared" and 
    replace "_init" with "__attribute((constructor)) my_init"


author: Thomas Woerner <twoerner@redhat.com> 1.3.7-1
changelog:
  - new verison 1.3.7
  - iptc is not a public interface and therefore not installed anymore
  - dropped upstream secmark patch


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-2
changelog:
  - fixed initscript for LSB conformance (rhbz#246953, rhbz#242459)
  - provide iptc interface again, but unsupported (rhbz#216733)
  - compile all extension, which are supported by the kernel-headers package
  - review fixes (rhbz#225906)


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-3
changelog:
  - do not depend on local_fs in lsb header - this delayes start after network
  - fixed exit code for initscript usage


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-4
changelog:
  - fixed IPv6 reject type (rhbz#295181)
  - fixed init script: start, stop and status
  - support netfilter compiled into kernel in init script (rhbz#295611)
  - dropped inversion for limit modules from man pages (rhbz#220780)
  - fixed typo in ip6tables man page (rhbz#236185)


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-4.1
changelog:
  - do not start ip6tables if ipv6 is blacklisted (rhbz#236888)
  - use simpler fix for (rhbz#295611)
    Thanks to Linus Torvalds for the patch.


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-5
changelog:
  - fixed error code for stopping a already stopped firewall (rhbz#321751)
  - moved blacklist test into start


author: Thomas Woerner <twoerner@redhat.com> 1.3.8-6
changelog:
  - fixed leaked file descriptor before fork/exec (rhbz#312191)
  - blacklisting is not working, use "install X /bin/(true|false)" test instead
  - return private exit code 150 for disabled ipv6 support
  - use script name for output messages


author: Thomas Woerner <twoerner@redhat.com> 1.4.0-1
changelog:
  - new version 1.4.0
  - fixed condrestart (rhbz#428148)
  - report the module in rmmod_r if there is an error
  - use nf_ext_init instead of my_init for extension constructors


author: Thomas Woerner <twoerner@redhat.com> 1.4.0-3
changelog:
  - use the kernel headers from the build tree for iptables for now to be able to 
    compile this package, but this makes the package more kernel dependant
  - use s6_addr32 instead of in6_u.u6_addr32


author: Tom "spot" Callaway <tcallawa@redhat.com> 1.4.0-5
changelog:
  - use normal kernel headers, not linux/compiler.h
  - change BuildRequires: kernel-devel to kernel-headers
  - We need to do this to be able to build for both sparcv9 and sparc64 
    (there is no kernel-devel.sparcv9)


author: Thomas Woerner <twoerner@redhat.com> 1.4.1-1
changelog:
  - new version 1.4.1 with new build environment
  - additional ipv6 network mask patch from Jan Engelhardt
  - spec file cleanup
  - removed old patches


author: Thomas Woerner <twoerner@redhat.com> 1.4.2-1
changelog:
  - new version 1.4.2
  - removed TOS value mask patch (upstream)
  - more review fixes (rhbz#225906)
  - install all header files (rhbz#462207)
  - dropped nf_ext_init (rhbz#472548)


author: Thomas Woerner <twoerner@redhat.com> 1.4.2-3
changelog:
  - still more review fixes (rhbz#225906)
    - consistent macro usage
    - use sed instead of perl for rpath removal
    - use standard RPM CFLAGS, but also -fno-strict-aliasing (needed for libiptc*)


author: Thomas Woerner <twoerner@redhat.com> 1.4.3.1-1
changelog:
  - new version 1.4.3.1
    - libiptc is now shared
    - supports all new features of the 2.6.29 kernel
  - dropped typo_latter patch


author: Thomas Woerner <twoerner@redhat.com> 1.4.4-1
changelog:
  - new version 1.4.4 with support for all new features of 2.6.30
    - several man page fixes
    - iptables: replace open-coded sizeof by ARRAY_SIZE
    - libip6t_policy: remove redundant functions
    - policy: use direct xt_policy_info instead of ipt/ip6t
    - policy: merge ipv6 and ipv4 variant
    - extensions: add `cluster' match support
    - extensions: add const qualifiers in print/save functions
    - extensions: use NFPROTO_UNSPEC for .family field
    - extensions: remove redundant casts
    - iptables: close open file descriptors
    - fix segfault if incorrect protocol name is used
    - replace open-coded sizeof by ARRAY_SIZE
    - do not include v4-only modules in ip6tables manpage
    - use direct xt_policy_info instead of ipt/ip6t
    - xtables: fix segfault if incorrect protocol name is used
    - libxt_connlimit: initialize v6_mask
    - SNAT/DNAT: add support for persistent multi-range NAT mappings


author: Thomas Woerner <twoerner@redhat.com> 1.4.5-1
changelog:
  - new version 1.4.5 with support for all new features of 2.6.31
    - libxt_NFQUEUE: add new v1 version with queue-balance option
    - xt_conntrack: revision 2 for enlarged state_mask member
    - libxt_helper: fix invalid passed option to check_inverse
    - libiptc: split v4 and v6
    - extensions: collapse registration structures
    - iptables: allow for parse-less extensions
    - iptables: allow for help-less extensions
    - extensions: remove empty help and parse functions
    - xtables: add multi-registration functions
    - extensions: collapse data variables to use multi-reg calls
    - xtables: warn of missing version identifier in extensions
    - multi binary: allow subcommand via argv[1]
    - iptables: accept multiple IP address specifications for -s, -d
    - several build fixes
    - several man page fixes
  - fixed two leaked file descriptors on sockets (rhbz#521397)


author: Thomas Woerner <twoerner@redhat.com> 1.4.6-1
changelog:
  - new version 1.4.6 with support for all new features of 2.6.32
    - several man page fixes
    - Support for nommu arches
    - realm: remove static initializations
    - libiptc: remove unused functions
    - libiptc: avoid strict-aliasing warnings
    - iprange: do accept non-ranges for xt_iprange v1
    - iprange: warn on reverse range
    - iprange: roll address parsing into a loop
    - iprange: do accept non-ranges for xt_iprange v1 (log)
    - iprange: warn on reverse range (log)
    - libiptc: fix wrong maptype of base chain counters on restore
    - iptables: fix undersized deletion mask creation
    - style: reduce indent in xtables_check_inverse
    - libxtables: hand argv to xtables_check_inverse
    - iptables/extensions: make bundled options work again
    - CONNMARK: print mark rules with mask 0xffffffff as set instead of xset
    - iptables: take masks into consideration for replace command
    - doc: explain experienced --hitcount limit
    - doc: name resolution clarification
    - iptables: expose option to zero packet/byte counters for a specific rule
    - build: restore --disable-ipv6 functionality on system w/o v6 headers
    - MARK: print mark rules with mask 0xffffffff as --set-mark instead of --set-xmark
    - DNAT: fix incorrect check during parsing
    - extensions: add osf extension
    - conntrack: fix --expires parsing


author: Thomas Woerner <twoerner@redhat.com> 1.4.6-2
changelog:
  - moved libip*tc and libxtables libs to /lib[64], added symlinks for .so libs
    to /usr/lib[64] for compatibility (rhbz#558796)


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-1
changelog:
  - new version 1.4.7 with support for all new features of 2.6.33 (rhbz#570767)
    - libip4tc: Add static qualifier to dump_entry()
    - libipq: build as shared library
    - recent: reorder cases in code (cosmetic cleanup)
    - several man page and documentation fixes
    - policy: fix error message showing wrong option
    - includes: header updates
    - Lift restrictions on interface names
  - fixed license and moved iptables-xml into base package according to review


author: Thomas Woerner <twoerner@redhat.com> 1.4.7-2
changelog:
  - added default values for IPTABLES_STATUS_VERBOSE and
    IPTABLES_STATUS_LINENUMBERS in init script
  - added missing lsb keywords Required-Start and Required-Stop to init script


author: Thomas Woerner <twoerner@redhat.com> 1.4.8-1
changelog:
  - new version 1.4.8 all new features of 2.6.34 (rhbz#)
    - extensions: REDIRECT: fix --to-ports parser
    - iptables: add noreturn attribute to exit_tryhelp()
    - extensions: MASQUERADE: fix --to-ports parser
    - libxt_comment: avoid use of IPv4-specific examples
    - libxt_CT: add a manpage
    - iptables: correctly check for too-long chain/target/match names
    - doc: libxt_MARK: no longer restricted to mangle table
    - doc: remove claim that TCPMSS is limited to mangle
    - libxt_recent: add a missing space in output
    - doc: add manpage for libxt_osf
    - libxt_osf: import nfnl_osf program
    - extensions: add support for xt_TEE
    - CT: fix --ctevents parsing
    - extensions: add CT extension
    - libxt_CT: print conntrack zone in ->print/->save
    - xtables: fix compilation when debugging is enabled
    - libxt_conntrack: document --ctstate UNTRACKED
    - iprange: fix xt_iprange v0 parsing


author: Thomas Woerner <twoerner@redhat.com> 1.4.9-1
changelog:
  - new version 1.4.9 with all new features of 2.6.35
    - doc: xt_hashlimit: fix a typo
    - doc: xt_LED: nroff formatting requirements
    - doc: xt_string: correct copy-and-pasting in manpage
    - extensions: add the LED target
    - extensions: libxt_quota.c: Support option negation
    - extensions: libxt_rateest: fix bps options for iptables-save
    - extensions: libxt_rateest: fix typo in the man page
    - extensions: REDIRECT: add random help
    - includes: sync header files from Linux 2.6.35-rc1
    - libxt_conntrack: do print netmask
    - libxt_hashlimit: always print burst value
    - libxt_set: new revision added
    - utils: add missing include flags to Makefile
    - xtables: another try at chain name length checking
    - xtables: remove xtables_set_revision function
    - xt_quota: also document negation
    - xt_sctp: Trace DATA chunk that supports SACK-IMMEDIATELY extension
    - xt_sctp: support FORWARD_TSN chunk type


author: Thomas Woerner <twoerner@redhat.com> 1.4.10-1
changelog:
  - new version 1.4.10 with all new features of 2.6.36
    - all: consistent syntax use in struct option
    - build: fix static linking
    - doc: let man(1) autoalign the text in xt_cpu
    - doc: remove extra empty line from xt_cpu
    - doc: minimal spelling updates to xt_cpu
    - doc: consistent use of markup
    - extensions: libxt_quota: don't ignore the quota value on deletion
    - extensions: REDIRECT: add random help
    - extensions: add xt_cpu match
    - extensions: add idletimer xt target extension
    - extensions: libxt_IDLETIMER: use xtables_param_act when checking options
    - extensions: libxt_CHECKSUM extension
    - extensions: libipt_LOG/libip6t_LOG: support macdecode option
    - extensions: fix compilation of the new CHECKSUM target
    - extensions: libxt_ipvs: user-space lib for netfilter matcher xt_ipvs
    - iptables-xml: resolve compiler warnings
    - iptables: limit chain name length to be consistent with targets
    - libiptc: add Libs.private to pkgconfig files
    - libiptc: build with -Wl,--no-as-needed
    - xtables: remove unnecessary cast
  - dropped xt_CHECKSUM, added upstream


author: Thomas Woerner <twoerner@redhat.com> 1.4.11-1
changelog:
  - new version 1.4.11 with all new features of 2.6.37-39 (not usable)
    - lots of changes and bugfixes for base and extensions
    - complete changelog:
      http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.11.txt


author: Thomas Woerner <twoerner@redhat.com> 1.4.11.1-1.1
changelog:
  -  added temporary provides for libxtables.so.5 to be able to rebuild iproute,
     which is part of the standard build environment


author: Thomas Woerner <twoerner@redhat.com> 1.4.11.1-3
changelog:
  - added support for native systemd file (rhbz#694738)
    - new iptables.service file
    - additional requires
    - moved sysv init scripts to /usr/libexec
    - added new post, preun and postun scripts and triggers


author: Thomas Woerner <twoerner@redhat.com> 1.4.12-1
changelog:
  - new version 1.4.12 with support of all new features of kernel 3.0
    - build: attempt to fix building under Linux 2.4
    - build: bump soversion for recent data structure change
    - build: install modules in arch-dependent location
    - doc: fix group range in libxt_NFLOG's man
    - doc: fix version string in ip6tables.8
    - doc: include matches/targets in manpage again
    - doc: mention multiple verbosity flags
    - doc: the -m option cannot be inverted
    - extensions: support for per-extension instance global variable space
    - iptables-apply: select default rule file depending on call name
    - iptables: consolidate target/match init call
    - iptables: Coverity: DEADCODE
    - iptables: Coverity: NEGATIVE_RETURNS
    - iptables: Coverity: RESOURCE_LEAK
    - iptables: Coverity: REVERSE_INULL
    - iptables: Coverity: VARARGS
    - iptables: restore negation for -f
    - libip6t_HL: fix option names from ttl -> hl
    - libipt_LOG: fix ignoring all but last flags
    - libxtables: ignore whitespace in the multiaddress argument parser
    - libxtables: properly reject empty hostnames
    - libxtables: set clone's initial data to NULL
    - libxt_conntrack: move more data into the xt_option_entry
    - libxt_conntrack: restore network-byte order for v1,v2
    - libxt_hashlimit: use a more obvious expiry value by default
    - libxt_rateest: abolish global variables
    - libxt_RATEEST: abolish global variables
    - libxt_RATEEST: fix userspacesize field
    - libxt_RATEEST: use guided option parser
    - libxt_state: fix regression about inversion of main option
    - option: remove last traces of intrapositional negation
  - complete changelog:
    http://www.netfilter.org/projects/iptables/files/changes-iptables-1.4.12.txt


author: Thomas Woerner <twoerner@redhat.com> 1.4.12-1.1
changelog:
  - added temporary provides for libxtables.so.6 to be able to rebuild iproute,
    which is part of the standard build environment


author: Thomas Woerner <twoerner@redhat.com> 1.4.12.1-1
changelog:
  - new version 1.4.12.1 with new pkgconfig/libipq.pc
    - build: abort autogen on subcommand failure
    - build: strengthen check for overlong lladdr components
    - build: workaround broken linux-headers on RHEL-5
    - doc: clarify libxt_connlimit defaults
    - doc: fix typo in libxt_TRACE
    - extensions: use multi-target registration
    - libip6t_dst: restore setting IP6T_OPTS_LEN flag
    - libip6t_frag: restore inversion support
    - libip6t_hbh: restore setting IP6T_OPTS_LEN flag
    - libipq: add pkgconfig file
    - libipt_ttl: document that negation is available
    - libxt_conntrack: fix --ctproto 0 output
    - libxt_conntrack: remove one misleading comment
    - libxt_dccp: fix deprecated intrapositional ordering of !
    - libxt_dccp: fix random output of ! on --dccp-option
    - libxt_dccp: provide man pages options in short help too
    - libxt_dccp: restore missing XTOPT_INVERT tags for options
    - libxt_dccp: spell out option name on save
    - libxt_dscp: restore inversion support
    - libxt_hashlimit: default htable-expire must be in milliseconds
    - libxt_hashlimit: observe new default gc-expire time when saving
    - libxt_hashlimit: remove inversion from hashlimit rev 0
    - libxt_owner: restore inversion support
    - libxt_physdev: restore inversion support
    - libxt_policy: remove superfluous inversion
    - libxt_set: put differing variable names in directly
    - libxt_set: update man page about kernel support on the feature
    - libxt_string: define _GNU_SOURCE for strnlen
    - libxt_string: escape the escaping char too
    - libxt_string: fix space around arguments
    - libxt_string: replace hex codes by char equivalents
    - libxt_string: simplify hex output routine
    - libxt_tcp: always print the mask parts
    - libxt_TCPMSS: restore build with IPv6-less libcs
    - libxt_TOS: update linux kernel version list for backported fix
    - libxt_u32: fix missing allowance for inversion
    - src: remove unused IPTABLES_MULTI define
    - tests: add negation tests for libxt_statistic
    - xtoptions: flag use of XTOPT_POINTER without XTOPT_PUT
  - removed include/linux/types.h before build to be able to compile


author: Thomas Woerner <twoerner@redhat.com> 1.4.12.2-1
changelog:
  - new version 1.4.12.2 with new pkgconfig/libip4tc.pc and pkgconfig/libip6tc.pc
    - build: make check stage not fail when building statically
    - build: restore build order of modules
    - build: scan for unreferenced symbols
    - build: sort file list before build
    - doc: clarification on the meaning of -p 0
    - doc: document iptables-restore's -T option
    - doc: fix undesired newline in ip6tables-restore(8)
    - ip6tables-restore: implement missing -T option
    - iptables: move kernel version find routing into libxtables
    - libiptc: provide separate pkgconfig files
    - libipt_SAME: set PROTO_RANDOM on all ranges
    - libxtables: Fix file descriptor leak in xtables_lmap_init on error
    - libxt_connbytes: fix handling of --connbytes FROM
    - libxt_CONNSECMARK: fix spacing in output
    - libxt_conntrack: improve error message on parsing violation
    - libxt_NFQUEUE: fix --queue-bypass ipt-save output
    - libxt_RATEEST: link with -lm
    - libxt_statistic: link with -lm
    - Merge branch 'stable'
    - Merge branch 'stable' of git://dev.medozas.de/iptables
    - nfnl_osf: add missing libnfnetlink_CFLAGS to compile process
    - xtoptions: fill in fallback value for nvals
    - xtoptions: simplify xtables_parse_interface


author: Thomas Woerner <twoerner@redhat.com> 1.4.14-1
changelog:
  - new version 1.4.14
    - extensions: add IPv6 capable ECN match extension
    - extensions: add nfacct match
    - extensions: add rpfilter module
    - extensions: libxt_rateest: output all options in save hook
    - iptables: missing free() in function cache_add_entry()
    - iptables: missing free() in function delete_entry()
    - libiptc: fix retry path in TC_INIT
    - libiptc: Returns the position the entry was inserted
    - libipt_ULOG: fix --ulog-cprange
    - libxt_CT: add --timeout option
    - ip(6)tables-restore: make sure argv is NULL terminated
    - Revert "libiptc: Returns the position the entry was inserted"
    - src: mark newly opened fds as FD_CLOEXEC (close on exec)
    - tests: add rateest match rules
  - dropped patch5 (cloexec), merged upstream


author: Thomas Woerner <twoerner@redhat.com> 1.4.15-1
changelog:
  - new version 1.4.15
    - extensions: add HMARK target
    - iptables-restore: fix parameter parsing (shows up with gcc-4.7)
    - iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7)
    - libxtables: add xtables_ip[6]mask_to_cidr
    - libxt_devgroup: add man page snippet
    - libxt_hashlimit: add support for byte-based operation
    - libxt_recent: add --mask netmask
    - libxt_recent: remove unused variable
    - libxt_HMARK: correct a number of errors introduced by Pablo's rework
    - libxt_HMARK: fix ct case example
    - libxt_HMARK: fix output of iptables -L
    - Revert "iptables-restore: move code to add_param_to_argv, cleanup (fix gcc-4.7)"


author: Thomas Woerner <twoerner@redhat.com> 1.4.16.2-1
changelog:
  - new version 1.4.16.2
    - build: support for automake-1.12
    - build: separate AC variable replacements from xtables.h
    - build: have `make clean` remove dep files too
    - doc: grammatical updates to libxt_SET
    - doc: clean up interpunction in state list for xt_conntrack
    - doc: deduplicate extension descriptions into a new manpage
    - doc: trim "state" manpage and reference conntrack instead
    - doc: have NOTRACK manpage point to CT instead
    - doc: mention iptables-apply in the SEE ALSO sections
    - extensions: libxt_addrtype: fix type in help message
    - include: add missing linux/netfilter_ipv4/ip_queue.h
    - iptables: fix wrong error messages
    - iptables: support for match aliases
    - iptables: support for target aliases
    - iptables-restore: warn about -t in rule lines
    - ip[6]tables-restore: cleanup to reduce one level of indentation
    - libip6t_frag: match any frag id by default
    - libxtables: consolidate preference logic
    - libxt_devgroup: consolidate devgroup specification parsing
    - libxt_devgroup: guard against negative numbers
    - libxt_LED: guard against negative numbers
    - libxt_NOTRACK: replace as an alias to CT --notrack
    - libxt_state: replace as an alias to xt_conntrack
    - libxt_tcp: print space before, not after "flags:"
    - libxt_u32: do bounds checking for @'s operands
    - libxt_*limit: avoid division by zero
    - Merge branch 'master' of git://git.inai.de/iptables
    - Merge remote-tracking branch 'nf/stable'
    - New set match revision with --return-nomatch flag support
  - dropped fixrestore patch, upstream


author: Thomas Woerner <twoerner@redhat.com> 1.4.16.2-2
changelog:
  - new sub package services providing the systemd services (RHBZ#862922)
  - new sub package utils: provides nfnl_osf and the pf.os database
  - using %{_libexecdir}/iptables as script path for the original init scripts
  - added service iptables save funcitonality using the new way provided by 
    initscripts 9.37.1 (RHBZ#748134)
  - added virtual provide for libxtables.so.7


author: Thomas Woerner <twoerner@redhat.com> 1.4.16.2-4
changelog:
  - fixed missing services for update of pre F-18 installations (rhbz#867960)
    - provide and obsolete old main package in services sub package
    - provide and obsolete old ipv6 sub package (pre F-17) in services sub package


author: Ville Skyttä <ville.skytta@iki.fi> - 1.4.16.2-6
changelog:
  - Own unowned -services libexec dirs (#894464, Michael Scherer).
  - Fix -services unit file permissions (#732936, Michal Schmidt).


author: Thomas Woerner <twoerner@redhat.com> 1.4.18-1
changelog:
  - new version 1.4.18 
    - lots of documentation changes
    - Introduce match/target aliases
    - Add the "state" alias to the "conntrack" match
    - iptables: remove unused leftover definitions
    - libxtables: add xtables_rule_matches_free
    - libxtables: add xtables_print_num
    - extensions: libip6t_DNPT: fix wording in DNPT target
    - extension: libip6t_DNAT: allow port DNAT without address
    - extensions: libip6t_DNAT: set IPv6 DNAT --to-destination
    - extensions: S/DNPT: add missing save function
  - changes of 1.4.17:
    - libxt_time: add support to ignore day transition
    - Convert the NAT targets to use the kernel supplied nf_nat.h header
    - extensions: add IPv6 MASQUERADE extension
    - extensions: add IPv6 SNAT extension
    - extensions: add IPv6 DNAT target
    - extensions: add IPv6 REDIRECT extension
    - extensions: add IPv6 NETMAP extension
    - extensions: add NPT extension
    - extensions: libxt_statistic: Fix save output


author: Thomas Woerner <twoerner@redhat.com> 1.4.19.1-1
changelog:
  - new version 1.4.19.1
    - libxt_NFQUEUE: fix bypass option documentation
    - extensions: add connlabel match
    - extensions: add connlabel match
    - ip[6]tables: show --protocol instead of --proto in usage
    - libxt_recent: Fix missing space in manpage for --mask option
    - extensions: libxt_multiport: Update manpage to list valid protocols
    - utils: nfnl_osf: use the right nfnetlink lib
    - libip6t_NETMAP: Use xtables_ip6mask_to_cidr and get rid of libip6tc dependency
    - Revert "build: resolve link failure for ip6t_NETMAP"
    - libxt_osf: fix missing --ttl and --log in save output
    - libxt_osf: fix bad location for location in --genre
    - libip6t_SNPT: add manpage
    - libip6t_DNPT: add manpage
    - utils: updates .gitignore to include nfbpf_compile
    - extensions: libxt_bpf: clarify --bytecode argument
    - libxtables: fix parsing of dotted network mask format
    - build: bump version to 1.4.19
    - libxt_conntrack: fix state match alias state parsing
    - extensions: add libxt_bpf extension
    - utils: nfbpf_compile
    - doc: mention SNAT in INPUT chain since kernel 2.6.36
  - fixed changelog date weekdays where needed


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-1
changelog:
  - no connlabel.conf upstream anymore
  - new version 1.4.21
    - doc: clarify DEBUG usage macro
    - iptables: use autoconf to process .in man pages
    - extensions: libipt_ULOG: man page should mention NFLOG as replacement
    - extensions: libxt_connlabel: use libnetfilter_conntrack
    - Introduce a new revision for the set match with the counters support
    - libxt_CT: Add the "NOTRACK" alias
    - libip6t_mh: Correct command to list named mh types in manpage
    - extensions: libxt_DNAT, libxt_REDIRECT, libxt_NETMAP, libxt_SNAT, libxt_MASQUERADE, libxt_LOG: rename IPv4 manpage and tell about IPv6 support
    - extensions: libxt_LED: fix parsing of delay
    - ip{6}tables-restore: fix breakage due to new locking approach
    - libxt_recent: restore minimum value for --seconds
    - iptables-xml: fix parameter parsing (similar to 2165f38)
    - extensions: add copyright statements
    - xtables: improve get_modprobe handling
    - ip[6]tables: Add locking to prevent concurrent instances
    - iptables: Fix connlabel.conf install location
    - ip6tables: don't print out /128
    - libip6t_LOG: target output is different to libipt_LOG
    - build: additional include path required after UAPI changes
    - iptables: iptables-xml: Fix various parsing bugs
    - libxt_recent: restore reap functionality to recent module
    - build: fail in configure on missing dependency with --enable-bpf-compiler
    - extensions: libxt_NFQUEUE: add --queue-cpu-fanout parameter
    - extensions: libxt_set, libxt_SET: check the set family too
    - ip6tables: Use consistent exit code for EAGAIN
    - iptables: libxt_hashlimit.man: correct address
    - iptables: libxt_conntrack.man extraneous commas
    - iptables: libip(6)t_REJECT.man default icmp types
    - iptables: iptables-xm1.1 correct man section
    - iptables: libxt_recent.{c,man} dead URL
    - iptables: libxt_string.man add examples
    - extensions: libxt_LOG: use generic syslog reference in manpage
    - iptables: extensions/GNUMakefile.in use CPPFLAGS
    - iptables: correctly reference generated file
    - ip[6]tables: fix incorrect alignment in commands_v_options
    - build: add software version to manpage first line at configure stage
    - extensions: libxt_cluster: add note on arptables-jf
    - utils: nfsynproxy: fix error while compiling the BPF filter
    - extensions: add SYNPROXY extension
    - utils: add nfsynproxy tool
    - iptables: state match incompatibilty across versions
    - libxtables: xtables_ipmask_to_numeric incorrect with non-CIDR masks
    - iptables: improve chain name validation
    - iptables: spurious error in load_extension
    - xtables: trivial spelling fix


author: Thomas Woerner <twoerner@redhat.com> 1.4.21-2
changelog:
  - fixed system hang at shutdown if root device is network based (RHBZ#1007934)
    Thanks to Rodrigo A B Freire for the patch


author: Jiri Popelka <jpopelka@redhat.com> - 1.4.21-3
changelog:
  - no need to support the pre-systemd things
  - use systemd macros (#850166)
  - remove scriptlets for migrating to a systemd unit from a SysV initscripts
  - ./configure -> %configure
  - spec clean up
  - fix self-obsoletion


author: Jiri Popelka <jpopelka@redhat.com> - 1.4.21-8
changelog:
  - add missing reload and panic actions
  - BuildRequires: pkgconfig(x) instead of x-devel
  - no need to specify file mode bits twice (in %install and %files)


author: Thomas Woerner <twoerner@redhat.com> - 1.6.0-1
changelog:
  - New upstream version 1.6.0 with nft-compat support and lots of fixes (RHBZ#1292990)
    Upstream changelog:
    http://netfilter.org/projects/iptables/files/changes-iptables-1.6.0.txt
  - New libs sub package containing libxtables and unstable libip*tc libraries (RHBZ#1323161)
  - Using scripts form RHEL-7 (RHBZ#1240366)
  - New compat sub package for nftables compatibility
  - Install iptables-apply (RHBZ#912047)
  - Fixed module uninstall (RHBZ#1324101)
  - Incorporated changes by Petr Pisar
  - Enabled bpf compiler (RHBZ#1170227) Thanks to Yanko Kaneti for the patch


author: Petr Šabata <contyk@redhat.com> - 1.6.0-4
changelog:
  - Disabling parallel build to avoid build issues with xtables
  - See http://patchwork.alpinelinux.org/patch/1787/ for reference
  - This should be fixed in 1.6.1; parallel build can be restored after the
    update


author: Thomas Woerner <twoerner@redhat.com> - 1.6.1-1
changelog:
  - New upstream version 1.6.1 with enhanced translation to nft support and
    several fixes (RHBZ#1417323)
    http://netfilter.org/projects/iptables/files/changes-iptables-1.6.1.txt
  - Enable parallel build again


author: Michael Cronenworth <mike@cchtml.com> - 1.6.2-1
changelog:
  - New upstream version 1.6.2
    http://www.netfilter.org/projects/iptables/files/changes-iptables-1.6.2.txt


author: Phil Sutter <psutter@redhat.com> - 1.6.2-2
changelog:
  - Kill module unloading support
  - Support /etc/sysctl.d
  - Don't restart services after package update
  - Add support for --wait options to restore commands


author: Phil Sutter - 1.8.0-4
changelog:
  - xtables: Fix for segfault in iptables-nft
  - ebtables: Fix entries count in chain listing
  - Use %autosetup macro in %prep


author: Phil Sutter - 1.8.0-5
changelog:
  - xtables: Use meta l4proto for -p match
  - ebtables: Fix for listing of non-existent chains
  - xtables: Fix for no output in iptables-nft -S


author: Phil Sutter - 1.8.0-8
changelog:
  - Fix issues identified by covscan
  - xtables-restore: Fix flushing referenced custom chains
  - xtables: Accept --wait in iptables-nft-restore


author: Phil Sutter - 1.8.0-9
changelog:
  - Add further fixes for issues identified by covscan
  - Fix for bogus "is incompatible" warnings
  - Fix layout in License tag
  - Replace "Fedora" with "RHEL" in description
  - Make devel sub-package depend on libs sub-package


author: Phil Sutter - 1.8.2-2
changelog:
  - Point out that nftables-variants are installed in package description
  - Fix for deleting arptables rules by referencing them


author: Phil Sutter - 1.8.2-4
changelog:
  - Fix iptables init script for nftables-backend
  - Drop references to unsupported broute table from ebtables man page
  - xtables: Don't use native nftables comments


author: Phil Sutter - 1.8.2-6
changelog:
  - Improve performance with large rulesets
  - Fix for changes in arptables output
  - Fix for inserting rules at wrong position
  - Fix segfault when comparing rules with standard target
  - Fix ebtables output for negated values
  - Document missing arptables FORWARD chain


author: Phil Sutter <psutter@redhat.com> - 1.8.2-10
changelog:
  - arptables-nft: fix decoding of hlen on bigendian platforms
  - xtables-save: Fix table not found error message
  - xtables: Catch errors when zeroing rule rounters
  - extensions: TRACE: Point at xtables-monitor in documentation
  - extensions: libipt_realm: Document allowed realm values


author: Phil Sutter <psutter@redhat.com> - 1.8.2-12
changelog:
  - Add iptables-test.py testsuite to sources
  - extensions: libip6t_mh: fix bogus translation error
  - extensions: AUDIT: Document ineffective --type option
  - xtables-restore: Fix program names in help texts
  - xtables-save: Point at existing man page in help text
  - utils: Add a manpage for nfbpf_compile
  - Mark man pages in base package as documentation files


author: Phil Sutter <psutter@redhat.com> - 1.8.2-14
changelog:
  - arptables: Print space before comma and counters
  - extensions: Fix ipvs vproto parsing
  - extensions: Fix ipvs vproto option printing
  - extensions: Add testcase for libxt_ipvs


author: Phil Sutter <psutter@redhat.com> - 1.8.4-3
changelog:
  - Reduce globbing in library file names to expose future SONAME changes
  - Add bootstrapping for libip*tc SONAME bump


author: Phil Sutter <psutter@redhat.com> - 1.8.4-8
changelog:
  - xtables-translate: Fix for iface++
  - tests: shell: Fix skip checks with --host mode
  - xtables-restore: fix for --noflush and empty lines


author: Phil Sutter <psutter@redhat.com> - 1.8.4-11
changelog:
  - Complete ebtables-nft among match support
  - Replace RHEL-only xtables-monitor fix with upstream solution
  - xtables: Align effect of -4/-6 options with legacy
  - xtables: Drop -4 and -6 support from xtables-{save,restore}
  - Review systemd unit files


author: Phil Sutter <psutter@redhat.com> - 1.8.4-16
changelog:
  - tests/shell: Add test for bitwise avoidance fixes
  - ebtables: Optimize masked MAC address matches
  - nft: Optimize class-based IP prefix matches
  - nft: Fix for broken address mask match detection
  - nft: cache: Make nft_rebuild_cache() respect fake cache
  - tests: shell: Improve concurrent noflush restore test a bit
  - nft: Fix for concurrent noflush restore calls
  - nft: Fix error reporting for refreshed transactions
  - nft: Make batch_add_chain() return the added batch object


author: Phil Sutter <psutter@redhat.com> - 1.8.4-17
changelog:
  - extensions: dccp: Fix for DCCP type 'INVALID'
  - tests: shell: Merge and extend return codes test
  - nft: Fix command name in ip6tables error message
  - extensions: libxt_CT: add translation for NOTRACK
  - extensions: libipt_icmp: Fix translation of type 'any'
  - tests/shell: Test for fixed extension registration
  - libxtables: Register multiple extensions in ascending order
  - libxtables: Simplify pending extension registration
  - libxtables: Make sure extensions register in revision order


author: Phil Sutter <psutter@redhat.com> - 1.8.4-18
changelog:
  - xtables-translate: Fix translation of odd netmasks
  - nft: Fix bitwise expression avoidance detection
  - xtables-monitor: 'LL=0x304' is not very convenient, print LOOPBACK instead.
  - xtables-monitor: print packet first
  - xtables-monitor: fix packet family protocol
  - xtables-monitor: fix rule printing
  - xtables-monitor: Fix ip6tables rule printing


author: Phil Sutter <psutter@redhat.com> - 1.8.4-20
changelog:
  - extensions: SECMARK: Use a better context in test case
  - extensions: sctp: Translate --chunk-types option
  - extensions: sctp: Fix nftables translation
  - extensions: SECMARK: Implement revision 1
  - nft: cache: Retry if kernel returns EINTR


author: Phil Sutter <psutter@redhat.com> - 1.8.4-21
changelog:
  - extensions: hashlimit: Fix tests with HZ=100
  - ebtables: Dump atomic waste
  - doc: ebtables-nft.8: Adjust for missing atomic-options


author: Phil Sutter <psutter@redhat.com> - 1.8.4-23
changelog:
  - libxtables: Fix unsupported extension warning corner case
  - tests: shell: Check overhead in iptables-save and -restore
  - nft: Fix EPERM handling for extensions without rev 0
  - Improve error messages for unsupported extensions
  - xshared: Fix response to unprivileged users
  - libxtables: Register only the highest revision extension
  - Use proto_to_name() from xshared in more places
  - libxtables: Boost rule target checks by announcing chain names
  - libxtables: Implement notargets hash table
  - nft: Reject standard targets as chain names when restoring
  - xshared: Merge and share parse_chain()
  - xshared: Prefer xtables_chain_protos lookup over getprotoent
  - nft: Speed up immediate parsing
  - nft: Simplify immediate parsing


author: Phil Sutter <psutter@redhat.com> - 1.8.5-1
changelog:
  - Rebase to version 1.8.5 plus upstream-indicated fixes
  - Fix for duplicate files in RPM due to imprecise globbing
  - Drop bootstrap code again


author: Phil Sutter <psutter@redhat.com> - 1.8.5-11
changelog:
  - iptables-restore: Drop dead code
  - iptables-apply: Eliminate shellcheck warnings
  - ebtables: Exit gracefully on invalid table names


author: Phil Cameron <pcameron@redhat.com> - 1.1.4-16
changelog:
  - Moved upstream from https://fedorahosted.org/iptraf-ng/ to 
    https://github.com/iptraf-ng/iptraf-ng/ with release v1.1.4
    Fixes error in patch Patch03 - this fixes 1283773


author: Thomas Woerner <twoerner@redhat.com> 2.2.6-1
changelog:
  - New upstream version 2.2.6
    - Located at github
    - Fixes (RHBZ#1294913 and RHBZ#1375395)
  - Additional upstream patch (no_debug) to drop some debugging remains
  - Additional proposed patch to fix segmentation fault with -1 -C (RHBZ#599181)


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 20180629-11.0.1
changelog:
  - Fix gcc10 -fno-common compile issue for compatible with gcc10 build
  - Fix ping: process interrupts in ping*_receive_error_msg (forrest_ly)


author: Kairui Song <kasong@redhat.com> 2:1.4.0-3
changelog:
  - Update document and remove dead options to fix manpage scan warning (bz1612706)
  - Fix gating test error (bz1680619)


author: Chris Leech - 6.2.0.878-5.gitd791ce0
changelog:
  - 1849931, 1869438 go back to MD5 CHAP only by default
    new CHAP modes can cause issue with some targets,
    so SHA1/SHA256/SHA3-256 modes must be configured to enable now


author: Hans de Goede <hdegoede@redhat.com> - 6.2.0.872-11
changelog:
  - Fix iscsid autostarting when upgrading from an older version
    (add iscsid.startup key to iscsid.conf on upgrade)
  - Fix printing of [ OK ] when successfully stopping iscsid
  - systemd related fixes:
   - Add Should-Start/Stop tgtd to iscsi init script to fix (re)boot from
     hanging when using locally hosted targets
   - %ghost /var/lock/iscsi and contents (#656605)


author: Hans de Goede <hdegoede@redhat.com> - 6.2.0.872-12
changelog:
  - Change iscsi init scripts to check for networking being actually up, rather
    then for NetworkManager being started (#692230)


author: Mike Christie <mchristi@redhat.com> 6.2.0.872.18
changelog:
  - 789683 Fix boot slow down when the iscsi service is started
    (regression added in 6.2.0.872.16 when the nm wait was added).


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-1
changelog:
  - rebase to new upstream code
  - systemd conversion
  - 565245 Fix multilib issues caused by timestamp in doxygen footers


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-4
changelog:
  - build with libkmod support, instead of calling out to modprobe
  - enable socket activation by default


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-7
changelog:
  - Use the systemd tmpfiles service to recreate lockfiles in /var/lock
  - 955167 build as a position independent executable
  - 894576 fix order of setuid/setgid and drop additional groups


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-10
changelog:
  - sync with upstream git, minor context fixes after rebase of out-of-tree patches
  - iscsiuio is merged upstream, remove old source archive and patches
  - spec cleanups to fix rpmlint issues


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-11
changelog:
  - iscsi boot related fixes
    make sure iscsid gets started if there are any boot sessions running
    add reload target to fix double session problem when restarting from NM
    don't rely on session list passed from initrd, never got fully implemented
    remove patches related to running iscsid from initrd, possible to revisit later


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-16
changelog:
  - fix iscsiuio socket activation
  - have systemd start socket units on iscsiadm use, if not already listening


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-17
changelog:
  - fix regression in glob use, inappropriate error code escape
  - clean up dead node links from discovery when reusing tpgt


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-21
changelog:
  - boot session handling improvements
  - split out iscsiuio into a seperate sub-package
  - sync with new upstream additions
  - revert change to return code when calling login_portal for sessions
    that already exist, as it impacts users scripting around iscsiadm


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-24.gitc9d830b
changelog:
  - sync with upstream v2.0.873-84-gc9d830b
  - ignore iscsiadm return in iscsi.service
  - make sure systemd order against remote mounts is correct
  - add discovery as a valid mode in iscsiadm.8
  - make sure to pass --with-security=no to isns configure


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-25.gitc9d830b
changelog:
  - split out session logout on shutdown to a separate service
  - 985321 roll up libiscsi patches, update python bindings to support python3
  - scriptlets were never split out properly for the iscsiuio subpackage
  - fix regression in network interface binding
  - created iscsi-shutdown.service to ensure that session cleanup happens
  - Add --with-slp=no
  - segfault from unexpected netlink event during discovery
  - inhibit strict aliasing optimizations in iscsiuio, rpmdiff error


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-26.git6aa2c9b
changelog:
  - rebase to upstream snapshot
  - add patch to improve GIL lock performance in libiscsi
  - Split Python 2 and Python 3 bindings out into subpackages


author: Chris Leech <cleech@redhat.com> - 6.2.0.873-28.git6aa2c9b
changelog:
  - fixed broken multiple trigger scripts, removed old pre-systemd migration triggers
  - added libiscsi session API patch (bz #1262279)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 6.2.0.874-7.git86e8892
changelog:
  - Python 2 binary package renamed to python2-iscsi-initiator-utils
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Chris Leech <cleech@redhat.com> - 6.2.0.876-1.git4ef9261
changelog:
  - pull in post 2.0.876 tagged fixes from upstream git
  - minimal packaging of libopeniscsiusr (internal use only, no dev package yet)


author: Chris Leech <cleech@redhat.com> - 6.2.0.876-5.gitf3c8e90
changelog:
  - iscsiuio: add mutex to protect netlink buffer for pass-through xmit
  - iscsid: get gateway information from sysfs when recovering sessions
  - enabled MaxOustandingR2T negotiation during login


author: Chris Leech <cleech@redhat.com> - 6.2.0.878-0.gitd791ce0
changelog:
  - 1761940 iSCSI CHAP authentication not function with FIPS enabled
  - Service file improvements forward ported from RHEL 7.8
  - various static analysis fixes from upstream


author: Chris Leech <cleech@redhat.com> - 0.94-1
changelog:
  - new upstream location, update to 0.94
  - new devel package, upstream open-iscsi is dropping it's internal copy


author: Jarod Wilson <jarod@redhat.com> - 20220713-109.gitdfa29317
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Include even newer qed firmware update (rhbz 2040269)


author: Jarod Wilson <jarod@redhat.com> - 20220726-110.git150864a4
changelog:
  - Omit unused password-protected vxge firmware files from package (rhbz 2108051)
  - Pick up latest AMD GPU firmwares


author: Lucas Zampieri <lzampier@redhat.com> - 20221102-111.git8bb75626
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - amdgpu firmware update to fix certain "multiple monitor scenarios" (rhbz 2130707)


author: Lucas Zampieri <lzampier@redhat.com> - 20230111-112.gita1ad1d5b
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Navi33 dGPU firmware (rhbz 2047480)
  - Navi31 dGPU firmware (rhbz 2047483)


author: Lucas Zampieri <lzampier@redhat.com> - 20230217-113.git83f1d778
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012)


author: Patrick Talbert <ptalbert@redhat.com> - 20230404-114.git2e92a49f
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Intel QAT Update - firmware for QAT (rhbz 2030316)


author: Ben Skeggs <bskeggs@redhat.com> 20090106-2
changelog:
  - Add firmware needed for nouveau to operate correctly (this is Fedora
    only - do not upstream yet - we just moved it here from Fedora kernel)


author: Josh Boyer <jwboyer@redhat.com> 20120510-0.3.git375e954
changelog:
  - Fix location of BuildRequires so git is inclued in the buildroot
  - Create iwlXXXX-firmware subpackages (rhbz 828050)


author: Josh Boyer <jwboyer@redhat.com>
changelog:
  - Consolidate rt61pci-firmware and rt73usb-firmware packages (rhbz 864959)
  - Consolidate netxen-firmware and ql2[123]xx-firmware packages (rhbz 864959)


author: Kyle McMartin <kyle@redhat.com> - 20130418-0.2.gitb584174
changelog:
  - UsrMove: move firmware to /usr/lib/firmware
  - Remove duplicate /usr/lib/firmware/updates entry (already in linux-firmware.dirs)
  - Simplify sed by using '!' instead of '/' as regexp delimiter
  - Fix date error (commited on Mon Feb 04, so change that entry)


author: Kyle McMartin <kyle@redhat.com> - 20130418-25.gitb584174
changelog:
  - Use a common version number for both the iwl*-firmware packages and
    linux-firmware itself.
  - Don't reference old kernel-firmware package in %description


author: Josh Boyer <jwboyer@redhat.com> - 20130724-28.git31f6b30
changelog:
  - Temporarily remove AMD microcode (rhbz 988263)
  - Remove Creative CA0132 HD-audio files as they're in alsa-firmware


author: Josh Boyer <jwboyer@fedoraproject.org> - 20140131-35.gitd7f8a7c8
changelog:
  - Update to new snapshot
  - Updates for Intel 3160/7260, radeon HAWAII GPUs, and some rtlwifi chips
  - Fixes bugs 815579 1046935


author: Josh Boyer <jwboyer@fedoraproject.org> - 20140605-38.gita4f3bc03
changelog:
  - Updates for Intel 3160/7260/7265 firmware (1087717)
  - Add firmware for rtl8723be (rhbz 1091753)
  - Updates for radeon CIK, SI/CI, and Mullins/Beema GPUs (rhbz 1094153)
  - Various other firmware updates


author: Josh Boyer <jwboyer@fedoraproject.org>
changelog:
  - Update to latest upstream git snapshot for new radeon firmware (rhbz 1130738)
  - Fix versioning after mass rebuild and for iwl5000-firmware (rhbz 1130979)


author: Josh Boyer <jwboyer@fedoraproject.org> 20150521-52.git3161bfa4
changelog:
  - Update to latest upstream git snapshot
  - Updated iwlwifi 316x/726x firmware
  - Add cx18-firmware Obsoletes from David Ward (rhbz 1222164)


author: Josh Boyer <jwboyer@fedoraproject.org> 20150715-54.git69640304
changelog:
  - Update to latest upstream git snapshot
  - New iwlwifi firmware for 726x/316x/8000 devices
  - New firmware for i915 skylake and radeon devices
  - Various other updates


author: Josh Boyer <jwboyer@fedoraproject.org> 20151130-59.gita109a8ff
changelog:
  - Update to latest upstream snapshot
  - Includes -16 ucode for iwlwifi, skylake dmc and audio updates, brcm updates
    bnx2x, and others


author: Josh Boyer <jwboyer@fedoraproject.org> 20160316-62.gitdeb1d836
changelog:
  - Update to latest upstream snapshot
  - New firmware for iwlwifi 3168, 7265D, 8000C, and 8265 devices


author: Josh Boyer <jwboyer@fedoraproject.org> 20160609-66.gita4bbc811
changelog:
  - Update to the latest upstream snapshot
  - Intel bluetooth, radeon smc, Intel braswell/broxton audio, cxgb4 updates


author: Josh Boyer <jwboyer@fedoraproject.org> 20160816-67.git7c3dfc0b
changelog:
  - Update to the latest upstream snapshot (rhbz 1367203)
  - Intel audio, rockchip, amdgpu, iwlwifi, nvidia pascal updates


author: Josh Boyer <jwboyer@fedoraproject.org> - 20170313-72.git695f2d6d
changelog:
  - Update to the latest upstream snapshot
  - New nvidia, AMD, and i915 GPU firmware
  - Updated iwlwifi and intel bluetooth firmware


author: Josh Boyer <jwboyer@fedoraproject.org> - 20170419-73.gitb1413458
changelog:
  - Update to the latest upstream snapshot
  - New nvidia, netronome, and marvell firmware
  - Updated intel audio firmware


author: Josh Boyer <jwboyer@fedoraproject.org> - 20170828-76.gitb78acc9
changelog:
  - Update to latest upstream snapshot
  - ath10k, iwlwifi, kabylake, liquidio, amdgpu, and cavium crypot updates


author: Peter Robinson <pbrobinson@fedoraproject.org> 20171009-78.gitbf04291
changelog:
  - Updated cxgb4, QCom gpu, Intel OPA IB, amdgpu, rtlwifi
  - Ship the license in %license for all sub packages
  - Modernise spec


author: Peter Robinson <pbrobinson@fedoraproject.org> 20171123-79.git90436ce
changelog:
  - Updated Intel GPU, amdgpu, iwlwifi, mvebu wifi, liquidio, QCom a530 & Venus, mlxsw, qed
  - Add iwlwifi 9000 series


author: Josh Boyer <jwboyer@fedoraproject.org> 20171126-80.git17e62881
changelog:
  - Updated bcm 4339 4354 4356 4358 firmware, new bcm 43430
  - Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417


author: Josh Boyer <jwboyer@fedoraproject.org> 20171215-81.git2451bb22
changelog:
  - Updated skl DMC, cnl audio, netronome SmartNIC, amdgpu vega10 and raven,
    intel bluetooth, brcm CYW4373, and liquidio vswitch firmwares


author: Herton R. Krzesinski <herton@redhat.com> - 20180524-84.git2a9b2cf5
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update Intel Omni-Path Architecture (OPA) Firmware (rhbz 1483737)
  - Drop separate microcode_amd_fam17h.bin, same file is now included in linux-firmware
    upstream


author: Herton R. Krzesinski <herton@redhat.com> - 20180524-85.git2a9b2cf5
changelog:
  - Add Obsoletes for conflicting ivtv-firmware versions (rhbz 1589055)
  - Add Obsoletes for iwl7265-firmware which is shipped with RHEL 7 (rhbz 1589056)


author: Herton R. Krzesinski <herton@redhat.com> - 20180706-86.gitd1147327
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - qed: Add firmware 8.37.2.0 (rhbz 1584853)


author: Herton R. Krzesinski <herton@redhat.com> - 20180717-87.git8d69bab7
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - cxgb4: update firmware to revision 1.20.8.0 (rhbz 1503622)


author: Herton R. Krzesinski <herton@redhat.com> - 20181011-88.gitc6b6265d
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Include latest firmware for Nvidia Graphics (rhbz 1504667)


author: Herton R. Krzesinski <herton@redhat.com> - 20181015-89.gitc6b6265d
changelog:
  - Remove liquidio/lio_23xx_vsw.bin from linux-firmware until GPL violation is
    fully resolved (rhbz 1637694)


author: Herton R. Krzesinski <herton@redhat.com> - 20181109-90.git1baa3486
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Include BPF version of Netronome firmware (rhbz 1637558)


author: Herton R. Krzesinski <herton@redhat.com> - 20190516-94.git711d3297
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update iwlwifi firmware to support the Cyclone Peak Dual Band 2x2 802.11ax (rhbz 1622442)
  - Pull new version of Netronome firmware (rhbz 1663989)
  - Update firmware for Chelsio T4/T5/T6 adapters (rhbz 1664678)
  - Update Netronome firmware that include bug fixes (rhbz 1673890)
  - Include firmware support for Intel Bluetooth 22261 (rhbz 1678095)


author: Bruno Meneguele <bmeneg@redhat.com> - 20191202-95.gite8a0f4c9
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update qed zipped/unzipped firmware to latest upstream (rhbz 1720394)
  - Update bnx2x firmware to latest upstream (rhbz 1720395)
  - AX200(Cyclone Peak 2 or CcP2) Bluetooth support (rhbz 1722693)
  - Firmware for Chelsio T4/T5/T6 adapters (rhbz 1725821)
  - Include to support Intel AX201 Harrison Peak(CNVi) on CML-U (rhbz 1725873)
  - Icelake Bluetooth firmware update (AX201, Harrison Peak, or HrP2) (rhbz 1726182)
  - DDP Package to support Columbiaville NIC (rhbz 1726454)
  - Add iwlwifi-cc-a0-48.ucode to linux-firmware (rhbz 1753962)
  - Change install section to use usptream installation process


author: Frantisek Hrbata <fhrbata@redhat.com> - 20200512-98.gitb2cad6a2
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update qed zipped/unzipped firmware to latest upstream (rhbz 1791030)
  - Update bnx2x firmware to latest upstream (rhbz 1791031)
  - Firmware - nvidia: add TU102/TU104/TU106 / TU116/117 signed firmware (rhbz 1801025)
  - Update latest Signed FW for AMD NAVI 10 Graphic (rhbz 1809846)


author: Jan Stancek <jstancek@redhat.com> - 20201022-100.gitdae4b4cd
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - ice: Pull Comms Market Segment Package (rhbz 1861491)
  - ice: Update to the Default OS DDP Package for ice driver (rhbz 1879278)


author: Jan Stancek <jstancek@redhat.com> - 20201118-101.git7455a360
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Include to support Intel AX210 Typhoon Peak - Bluetooth firmware support (rhbz 1897069)
  - Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless - firmware support (rhbz 1725913)


author: Bruno Meneguele <bmeneg@redhat.com> - 20210702-103.gitd79c2677
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Include support for the Qualcomm AX500-DBS (QCA6390) 802.11ax Wireless (rhbz 1725913)
  - Firmware for Chelsio T4/T5/T6 adapters (rhbz 1961398)
  - Incorrect NVIDIA GPU firmware used for TU102 and TU104 GPUs (rhbz 1965312)
  - Package the new iwl7260 ucode files and also the new binary format PNVM


author: Bruno Meneguele <bmeneg@redhat.com> - 20211007-104.git7a300505
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Certain amdgpu firmware files cause random hangs with AMD Picasso/Raven Ridge APUs (rhbz 2000879)
  - Support Intel CNVi AX211 Garfield Peak2 on ADL - Bluetooth (rhbz 1923179)
  - Support Intel CNVi AX211 Garfield Peak2 on ADL - WIFI (rhbz 1923175)


author: Bruno Meneguele <bmeneg@redhat.com> - 20211119-105.gitf5d51956
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update to latest AMD GPU firmware (rhbz 1986660)


author: Augusto Caringi <acaringi@redhat.com> - 20220209-106.git6342082c
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Include AMD GPU firmware fix (rhbz 2031172)
  - Support QCA WCN6856 v2.1 Module: Bluetooth firmware (rhbz 2007904)


author: Jarod Wilson <jarod@redhat.com> - 20220517-107.git251d2900
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Include latest qed firmware update (rhbz 2040269)
  - Include latest bnx2x firmware update (rhbz 2040273)
  - Include latest ice firmware update (rhbz 2059384, rhbz 2081543)
  - Include latest Qualcomm firmware update (rhbz 2062871)


author: Denys Vlasenko <dvlasenk@redhat.com> - 20230515-115.gitd1962891
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - [RHEL8] Add latest NVIDIA signed firmware for Turing GPUs and later
  Resolves: rhbz#2183606


author: Denys Vlasenko <dvlasenk@redhat.com> - 20230711-116.gitd3f66064
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - AMD GPU firmware update: fix PSR-SU issues with kernel 6.2 or later
  Resolves: rhbz#2218670


author: Denys Vlasenko <dvlasenk@redhat.com> - 20230808-117.git0ab353f8
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Navi32 dGPU firmware
  - Update to fix multi monitor behind TBT3 dock & random flickers
  - AMD Zen2 firmware update for cross-process information leak
  Resolves: rhbz#2047482, rhbz#2227846, rhbz#2227153


author: Denys Vlasenko <dvlasenk@redhat.com> - 20230824-118.git0e048b06
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - AMD Zen3 and Zen4 firmware update for return address predictor velunerability
  Resolves: rhbz#2230415


author: Denys Vlasenko <dvlasenk@redhat.com> - 20231121-119.git9552083a
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Update AMD cpu microcode
  - hw: intel: Fix protection mechanism failure for some Intel(R) PROSet/Wireless WiFi
  Resolves: RHEL-16721, RHEL-14260


author: Denys Vlasenko <dvlasenk@redhat.com> - 20231121-120.git9552083a
changelog:
  - Work around absense of rdfind during build
  - Add file directives for new iwlwifi files
  Resolves: RHEL-16721, RHEL-14260


author: Denys Vlasenko <dvlasenk@redhat.com> - 20240111-121.gitb3132c18
changelog:
  - Pass --ignore-duplicates to copy-firmware.sh
  - AMD Zen3 and Zen4: fix for INVD instruction causing loss of SEV-ES guest machine memory integrity
  Resolves: RHEL-13982


author: Denys Vlasenko <dvlasenk@redhat.com> - 20240610-122.git90df68d2
changelog:
  - [Intel 8.10 FEAT] [SPR][EMR] QAT firmware update available (RHEL-15607)
  - CVE-2023-31346 AMD SEV: Reserved fields in guest message responses may not be zero initialized [rhel-8.10.0] (RHEL-35596)
  - amd-ucode early loading broken [rhel-8] (RHEL-16799)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - linux-firmware: Add firmware for Lenovo Thinkbooks
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SDMA 6.0.2 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update raven2 firmware
  - amdgpu: update raven firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update SDMA 6.0.1 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update SMU 13.0.6 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update aldebaran firmware
  - amdgpu: add support for PSP 14.0.1
  - amdgpu: add support for VPE 6.1.1
  - amdgpu: add support for VCN 4.0.6
  - amdgpu: add support for SDMA 6.1.1
  - amdgpu: add support for GC 11.5.1
  - amdgpu: Add support for DCN 3.5.1
  - cnm: update chips&media wave521c firmware.
  - linux-firmware: Add ordinary firmware for RTL8821AU device
  - amdgpu: add new ISP 4.1.1 firmware
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: Amphion: Update vpu firmware
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - i915: Add BMG DMC v2.06
  - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306
  - linux-firmware: Update firmware tuning for HP Consumer Laptop
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B
  - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops
  - linux-firmware: Add firmware and tuning for Lenovo Y770S
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops
  - i915: Update Xe2LPD DMC to v2.20
  - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41
  - linux-firmware: Add firmware for Lenovo Thinkbook 13X
  - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop
  - amdgpu: add DMCUB 3.5 firmware
  - amdgpu: add VPE 6.1.0 firmware
  - amdgpu: add VCN 4.0.5 firmware
  - amdgpu: add UMSCH 4.0.0 firmware
  - amdgpu: add SDMA 6.1.0 firmware
  - amdgpu: add PSP 14.0.0  firmware
  - amdgpu: add GC 11.5.0 firmware
  - amdgpu: update license date
  - Montage: update firmware for Mont-TSSE
  - linux-firmware: Add tuning parameter configs for CS35L41 Firmware
  - linux-firmware: Fix firmware names for Laptop SSID 104316a3
  - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for MT7922 WiFi device
  - iwlwifi: add gl FW for core87-44 release
  - iwlwifi: add ty/So/Ma firmwares for core87-44 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release
  - nvidia: Update Tegra210 XUSB firmware to v50.29
  - amdgpu: update beige goby firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update renoir firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update sdma 6.0.1 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update raven2 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update smu 13.0.7 firmware
  - amdgpu: update sdma 6.0.2 firmware
  - amdgpu: update ipsp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update raven firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update smu 13.0.10 firmware
  - amdgpu: update sdma 6.0.3 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update vcn 3.1.2 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update gc 10.3.6 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update vcn 4.0.3 firmware
  - amdgpu: update smu 13.0.6 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update sdma 6.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update  firmware
  - amdgpu: update aldebaran firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update gc 10.3.7 firmware
  - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9
  - Merge https://github.com/pkshih/linux-firmware into rtw
  - ath10k: WCN3990: hw1.0: add qcm2290 firmware API file
  - ath10k: WCN3990: hw1.0: move firmware back from qcom/ location
  - i915: Add DG2 HuC 7.10.15
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - mekdiatek: Update mt8186 SOF firmware to v2.0.1
  - rtw89: 8852c: update fw to v0.27.56.14
  - rtw89: 8922a: add firmware v0.35.18.0
  - rtw88: Add RTL8703B firmware v11.0.0
  - linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops
  - Montage: update firmware for Mont-TSSE
  - WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B
  - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX200
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
  - Intel Bluetooth: Update firmware file for Intel Bluetooth 9560
  - Intel Bluetooth: Update firmware file for Intel Bluetooth 9260
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8
  - imx: sdma: update firmware to v3.6/v4.6
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - iwlwifi: update 9000-family firmwares to core85-89
  - rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops
  - amdgpu: Update VCN firmware binaries
  - Intel IPU2: Add firmware files
  - brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet
  - i915: Add Xe2LPD DMC v2.18
  - i915: Update MTL DMC v2.21
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  - linux-firmware: add firmware for MT7996
  - xe: First GuC release for LNL and Xe
  - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL
  - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7)
  - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet
  - ice: update ice DDP package to 1.3.36.0
  - Intel IPU3 ImgU: Move firmware file under intel/ipu
  - Intel IPU6: Move firmware binaries under ipu/
  - check_whence: Add a check for duplicate link entries
  - WHENCE: Clean up section separators
  - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models
  - panthor: Add initial firmware for Gen10 Arm Mali GPUs
  - amdgpu: DMCUB Updates for DCN321: 7.0.38.0
  - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0
  - qcom: update venus firmware file for v5.4
  - Montage: add firmware for Mont-TSSE
  - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32
  - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware
  - linux-firmware: Fix filenames for some CS35L41 firmwares for HP
  - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2
  - rtl_nic: add firmware for RTL8126A
  - linux-firmware: intel: Add IPU6 firmware binaries
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37
  - qcom: Add Audio firmware for SM8550 HDK
  - Merge tag 'amd-2024-01-30.2' into mlimonci/amd-2024-01-30.2
  - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs"
  - amdgpu: update SMU 13.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: Add Audio firmware for SM8650 MTP
  - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops
  - Intel Bluetooth: Make spacing consistent with rest of WHENCE
  - amdgpu: update raven2 firmware
  - amdgpu: update raven firmware
  - amdgpu: update SDMA 5.2.7 firmware
  - amdgpu: update PSP 13.0.8 firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update SDMA 5.2.6 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: add GC 11.0.1 rlc_1 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SMU 13.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update picasso firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update navi14 firmware
  - amdgpu: add VCN 4.0.3 firmware
  - amdgpu: add SDMA 4.4.2 firmware
  - amdgpu: add SMU 13.0.6 firmware
  - amdgpu: add PSP 13.0.6 firmware
  - amdgpu: Add GC 9.4.3 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SMU 13.0.7 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - linux-firmware: Update AMD cpu microcode
  - RTL8192E: Remove old realtek WiFi firmware
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211
  - amdgpu: DMCUB updates for DCN314
  - qcom: Update the firmware for Adreno a630 family of GPUs
  - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops
  - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops
  - linux-firmware: update firmware for qat_4xxx devices
  Resolves: RHEL-35596, RHEL-16799, RHEL-15607


author: Denys Vlasenko <dvlasenk@redhat.com> - 20240715-123.git4c8fb21e
changelog:
  - [Intel 8.10 FEAT] [SRF] QAT_402XX firmware update (RHEL-47353)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - qcom: move signed x1e80100 signed firmware to the SoC subdir
  - qcom: add video firmware file for vpu-3.0
  - amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics
  - qcom: add gpu firmwares for x1e80100 chipset
  - linux-firmware: add firmware for qat_402xx devices
  - amdgpu: update raven firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update PSP 13.0.8 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update SDMA 6.0.1 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update VPE 6.1.1 firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update SDMA 6.1.1 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update SDMA 6.1.0 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SMU 13.0.7 firmware
  - amdgpu: update SDMA 6.0.2 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update raven2 firmware
  - amdgpu: update aldebaran firmware
  - linux-firmware: Update AMD cpu microcode
  - intel: avs: Add topology file for I2S Analog Devices 4567
  - intel: avs: Add topology file for I2S Nuvoton 8825
  - intel: avs: Add topology file for I2S Maxim 98927
  - intel: avs: Add topology file for I2S Maxim 98373
  - intel: avs: Add topology file for I2S Maxim 98357a
  - intel: avs: Add topology file for I2S Dialog 7219
  - intel: avs: Add topology file for I2S Realtek 5663
  - intel: avs: Add topology file for I2S Realtek 5640
  - intel: avs: Add topology file for I2S Realtek 5514
  - intel: avs: Add topology file for I2S Realtek 298
  - intel: avs: Add topology file for I2S Realtek 286
  - intel: avs: Add topology file for I2S Realtek 274
  - intel: avs: Add topology file for Digital Microphone Array
  - intel: avs: Add topology file for HDMI codecs
  - intel: avs: Add topology file for HDAudio codecs
  - Add a copy of Apache-2.0
  - intel: avs: Update AudioDSP base firmware for APL-based platforms
  - linux-firmware: Add ISH firmware file for Intel Lunar Lake platform
  - amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics
  - cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41
  - amdgpu: Update ISP FW for isp v4.1.1
  - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0
  - qcom: Add AIC100 firmware files
  - amlogic: Update bluetooth firmware binary
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core
  - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB
  - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB
  - amdgpu: update DMCUB to v0.0.222.0 for DCN314
  - iwlwifi: add ty/So/Ma firmwares for core88-87 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release
  - linux-firmware: add new cc33xx firmware for cc33xx chips
  - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop
  - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops
  - Merge https://github.com/zijun-hu/qca_btfw into qca
  Resolves: RHEL-47353


author: Denys Vlasenko <dvlasenk@redhat.com> - 20240827-124.git3cff7109
changelog:
  - AMD SEV: IOMMU improperly handles certain special address leading to a loss of guest integrity (RHEL-54256)
  - AMD SEV: Incomplete system memory cleanup in SEV firmware corrupt guest private memory (RHEL-54237)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - amdgpu: DMCUB updates forvarious AMDGPU ASICs
  - rtw89: 8922a: add fw format-1 v0.35.41.0
  - linux-firmware: update firmware for MT7925 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7925)
  - rtl_bt: Add firmware and config files for RTL8922A
  - rtl_bt: Add firmware file for the the RTL8723CS Bluetooth part
  - rtl_bt: de-dupe identical config.bin files
  - rename rtl8723bs_config-OBDA8723.bin -> rtl_bt/rtl8723bs_config.bin
  - linux-firmware: Update AMD SEV firmware
  - linux-firmware: update firmware for MT7996
  - Revert "i915: Update MTL DMC v2.22"
  - Merge tag 'amd-2024-08-12' of https://gitlab.freedesktop.org/drm/firmware into amd-2024-08-12
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.41
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: QCA2066 hw2.1: add to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.3
  - ath11k: QCA2066 hw2.1: add board-2.bin
  - ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01291-QCAHKSWPL_SILICONZ-1
  - qcom: vpu: add video firmware for sa8775p
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: update path for video firmware for vpu-1/2/3.0
  - Merge https://github.com/zijun-hu/qca_btfw into qca_btfw
  - Merge tag 'rtw-fw-2024-08-08' of https://github.com/pkshih/linux-firmware into rtw89
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00642
  - rtw89: 8852c: add fw format-1 v0.27.97.0
  - rtw89: 8852bt: add firmware 0.29.91.0
  - amdgpu: Update ISP FW for isp v4.1.1
  - Merge tag 'intel-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into intel-20240805
  - Merge https://github.com/zijun-hu/qca_btfw into list-20240802
  - mediatek: Update mt8195 SOF firmware
  - Merge tag 'amd-2024-08-02' of https://gitlab.freedesktop.org/drm/firmware into amd-20240802
  - amdgpu: DMCUB updates for DCN314
  - xe: First GuC release v70.29.2 for BMG
  - xe: Add GuC v70.29.2 for LNL
  - i915: Add GuC v70.29.2 for ADL-P, DG1, DG2, MTL, and TGL
  - i915: Update MTL DMC v2.22
  - i915: update MTL GSC to v102.0.10.1878
  - xe: Add BMG HuC 8.2.10
  - xe: Add GSC 104.0.0.1161 for LNL
  - xe: Add LNL HuC 9.4.13
  - i915: update DG2 HuC to v7.10.16
  - amdgpu: Update ISP FW for isp v4.1.1
  - amdgpu: Update ISP FW for isp v4.1.1
  - amdgpu: add new ISP 4.1.1 firmware
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00641
  - amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351
  - Merge tag 'iwlwifi-fw-2024-07-25' of ssh://gitolite.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlfifi-fw-2024-07
  - Revert "iwlwifi: update ty/So/Ma firmwares for core89-58 release"
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - iwlwifi: add gl FW for core89-58 release
  - iwlwifi: update ty/So/Ma firmwares for core89-58 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release
  - mediatek: Update mt8195 SOF firmware and sof-tplg
  - ASoC: tas2781: fix the license issue for tas781 firmware
  - rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008
  - .gitignore: Ignore intermediate files
  - i915: Update Xe2LPD DMC to v2.21
  Resolves: RHEL-54256, RHEL-54237


author: Denys Vlasenko <dvlasenk@redhat.com> - 20241014-125.git06bad2f1
changelog:
  - Update linux-firmware to latest upstream (RHEL-62359)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - mtk_wed: add firmware for mt7988 Wireless Ethernet Dispatcher
  - ath12k: WCN7850 hw2.0: update board-2.bin
  - ath12k: QCN9274 hw2.0: add to WLAN.WBE.1.3.1-00162-QCAHKSWPL_SILICONZ-1
  - ath12k: QCN9274 hw2.0: add board-2.bin
  - copy-firmware.sh: rename variables in symlink hanlding
  - copy-firmware.sh: remove no longer reachable test -L
  - copy-firmware.sh: remove no longer reachable test -f
  - copy-firmware.sh: call ./check_whence.py before parsing the file
  - copy-firmware.sh: warn if the destination folder is not empty
  - copy-firmware.sh: add err() helper
  - copy-firmware.sh: fix indentation
  - copy-firmware.sh: reset and consistently handle destdir
  - Revert "copy-firmware: Support additional compressor options"
  - copy-firmware.sh: flesh out and fix dedup-firmware.sh
  - Style update yaml files
  - editorconfig: add initial config file
  - check_whence.py: annotate replacement strings as raw
  - check_whence.py: LC_ALL=C sort -u the filelist
  - check_whence.py: ban link-to-a-link
  - check_whence.py: use consistent naming
  - Add a link from TAS2XXX1EB3.bin -> ti/tas2781/TAS2XXX1EB30.bin
  - tas2781: Upload dsp firmware for ASUS laptop 1EB30 & 1EB31
  - rtlwifi: Add firmware v39.0 for RTL8192DU
  - Revert "ath12k: WCN7850 hw2.0: update board-2.bin"
  - amdgpu: DMCUB DCN35 update
  - brcm: Add BCM4354 NVRAM for Jetson TX1
  - brcm: Link FriendlyElec NanoPi M4 to AP6356S nvram
  - linux-firmware: add firmware for MediaTek Bluetooth chip (MT7920)
  - linux-firmware: add firmware for MT7920
  - amdgpu: update raven firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update PSP 13.0.8 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update PSP 14.0.4 firmware
  - amdgpu: update GC 11.5.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update VCN 4.0.6 firmware
  - amdgpu: update PSP 14.0.1 firmware
  - amdgpu: update GC 11.5.1 firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update SMU 13.0.6 firmware
  - amdgpu: update SDMA 4.4.2 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - qcom: update gpu firmwares for qcm6490 chipset
  - mt76: mt7996: add firmware files for mt7992 chipset
  - mt76: mt7996: add firmware files for mt7996 chipset variants
  - Merge tag 'rtw-fw-2024-09-13' of https://github.com/pkshih/linux-firmware into 8922a
  - qcom: add gpu firmwares for sa8775p chipset
  - amdgpu: update DMCUB to v0.0.233.0 DCN351
  - rtw89: 8922a: add fw format-2 v0.35.42.1
  - copy-firmware: Handle links to uncompressed files
  - WHENCE: Fix battmgr.jsn entry type
  - amdgpu: Add VPE 6.1.3 microcode
  - amdgpu: add SDMA 6.1.2 microcode
  - amdgpu: Add support for PSP 14.0.4
  - amdgpu: add GC 11.5.2 microcode
  - qcom: qcm6490: add ADSP and CDSP firmware
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - rtl_bt: Update RTL8852B BT USB FW to 0x0447_9301
  - realtek: rt1320: Add patch firmware of MCU
  - i915: Update MTL DMC v2.23
  - cirrus: cs35l56: Add firmware for Cirrus CS35L54 for some HP laptops
  - amdgpu: Revert sienna cichlid dmcub firmware update
  - Merge tag 'iwlwifi-fw-2024-09-03' of http://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/linux-firmware into iwlwifi-20240903
  - iwlwifi: add Bz FW for core89-58 release
  - rtl_nic: add firmware rtl8126a-3
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - amdgpu: update DMCUB to v0.0.232.0 for DCN314 and DCN351
  - qcom: vpu: restore compatibility with kernels before 6.6
  Resolves: RHEL-62359


author: Denys Vlasenko <dvlasenk@redhat.com> - 20241119-126.git79b5dac1
changelog:
  - Update linux-firmware to latest upstream (RHEL-68279)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - iwlwifi: add Bz-gf FW for core91-69 release
  - Merge https://github.com/zijun-hu/qca_btfw into qca
  - qcom: venus-5.4: add venus firmware file for qcs615
  - qcom: update venus firmware file for SC7280
  - QCA: Add 22 bluetooth firmware nvm files for QCA2066
  - mediatek MT7922: update bluetooth firmware to 20241106163512
  - mediatek MT7921: update bluetooth firmware to 20241106151414
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  - qcom: Add QDU100 firmware image files.
  - qcom: Update aic100 firmware files
  - dedup-firmware.sh: fix infinite loop for --verbose
  - rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x04D7_63F7
  - cnm: update chips&media wave521c firmware.
  - mediatek MT7920: update bluetooth firmware to 20241104091246
  - linux-firmware: update firmware for MT7920 WiFi device
  - copy-firmware.sh: Run check_whence.py only if in a git repo
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
  - amdgpu: update DMCUB to v9.0.10.0 for DCN351
  - rtw89: 8852a: update fw to v0.13.36.2
  - rtw88: Add firmware v52.14.0 for RTL8812AU
  - i915: Update Xe2LPD DMC to v2.23
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7925)
  - linux-firmware: update firmware for MT7925 WiFi device
  - WHENCE: Add sof-tolg for mt8195
  - linux-firmware: Update firmware file for Intel BlazarI core
  - qcom: Add link for QCS6490 GPU firmware
  - qcom: update gpu firmwares for qcs615 chipset
  - cirrus: cs35l56: Update firmware for Cirrus Amps for some HP laptops
  - ath11k: move WCN6750 firmware to the device-specific subdir
  - xe: Update LNL GSC to v104.0.0.1263
  - i915: Update MTL/ARL GSC to v102.1.15.1926
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - mediatek: Add sof-tolg for mt8195
  - i915: Add Xe3LPD DMC
  - cnm: update chips&media wave521c firmware.
  - linux-firmware: Add firmware for Cirrus CS35L41
  - linux-firmware: Update firmware file for Intel BlazarU core
  - Makefile: error out of 'install' if COPYOPTS is set
  - check_whence.py: skip some validation if git ls-files fails
  - qcom: Add Audio firmware for X1E80100 CRD/QCPs
  - amdgpu: DMCUB updates forvarious AMDGPU ASICs
  - brcm: replace NVRAM for Jetson TX1
  - rtlwifi: Update firmware for RTL8192FU to v7.3
  - make: separate installation and de-duplication targets
  - check_whence.py: check the permissions
  - Remove execute bit from firmware files
  - configure: remove unused file
  - rtl_nic: add firmware rtl8125d-1
  - iwlwifi: add gl/Bz FW for core91-69 release
  - iwlwifi: update ty/So/Ma firmwares for core91-69 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core91-69 release
  - Merge https://github.com/zijun-hu/qca_btfw into wcn785x
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for a Lenovo Laptop
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for some ASUS laptops
  - cirrus: cs35l56: Add firmware for Cirrus Amps for some HP laptops
  - linux-firmware: update firmware for en8811h 2.5G ethernet phy
  Resolves: RHEL-68279


author: Denys Vlasenko <dvlasenk@redhat.com> - 20250108-127.gitc0f414a6
changelog:
  - Update linux-firmware to latest upstream (RHEL-73145)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - Fix has_gnu_parallel function
  - rtl_bt: Add separate config for RLT8723CS Bluetooth part
  - amdgpu: revert VCN 3.1.2 firmware
  - amdgpu: revert yellow carp VCN firmware
  - amdgpu: revert sienna cichlid VCN firmware
  - amdgpu: revert navy flounder VCN firmware
  - amdgpu: revert dimgrey cavefish VCN firmware
  - WHENCE: Link the Raspberry Pi CM5 and 500 to the 4B
  - copy-firmware.sh: Fix typo in error message.
  - Add support to install files/symlinks in parallel.
  - Makefile: Remove obsolete/broken reference.
  - check_whence.py: Use a more portable shebang.
  - rtl_bt: Update RTL8852B BT USB FW to 0x04BE_1F5E
  - cnm: update chips&media wave521c firmware.
  - WHENCE: Add "Info:" tag to text that's clearly not part of the license
  - rtl_nic: add firmware rtl8125bp-2
  - qcom: venus-5.4: update firmware binary for sc7180 and qcs615
  - cirrus: cs35l56: Correct filenames of SSID 17aa3832
  - cirrus: cs35l56: Add and update firmware for various Cirrus CS35L54 and CS35L56 laptops
  - cirrus: cs35l56: Correct SSID order for 103c8d01 103c8d08 10431f43
  - rtl_nic: add firmware rtl8125d-2
  - Merge https://github.com/zijun-hu/qca_btfw into qca-bt
  - linux-firmware: Update firmware file for Intel BlazarU core
  - amdgpu: update dmcub 0.0.246.0 firmware
  - Add top level license file.
  - amdgpu: update raven firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: update psp 13.0.14 firmware
  - amdgpu: update vcn 3.1.2 firmware
  - amdgpu: update vpe 6.1.3 firmware
  - amdgpu: update psp 14.0.4 firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vcn 4.0.6 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update psp 14.0.0 firmware
  - amdgpu: add vcn 5.0.0 firmware
  - amdgpu: add smu 14.0.3 firmware
  - amdgpu: add sdma 7.0.1 firmware
  - amdgpu: add psp 14.0.3 firmware
  - amdgpu: add gc 12.0.1 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update renoir firmware
  - amdgpu: add smu 14.0.2 firmware
  - amdgpu: add sdma 7.0.0 firmware
  - amdgpu: add psp 14.0.2 firmware
  - amdgpu: add gc 12.0.0 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - upstream amdnpu firmware
  - QCA: Add Bluetooth nvm files for WCN785x
  - i915: Update Xe2LPD DMC to v2.24
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
  - iwlwifi: add Bz-gf FW for core89-91 release
  - QCA: Update Bluetooth WCN785x firmware to 2.0.0-00515-2
  - amdgpu: update smu 13.0.10 firmware
  - amdgpu: update sdma 6.0.3 firmware
  - amdgpu: update psp 13.0.10 firmware
  - amdgpu: update gc 11.0.3 firmware
  - amdgpu: add smu 13.0.14 firmware
  - amdgpu: add sdma 4.4.5 firmware
  - amdgpu: add psp 13.0.14 firmware
  - amdgpu: add gc 9.4.4 firmware
  - amdgpu: update vcn 3.1.2 firmware
  - amdgpu: update psp 13.0.5 firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update psp 14.0.4 firmware
  - amdgpu: update gc 11.5.2 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update vcn 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update psp 13.0.0 firmware
  - amdgpu: update gc 11.0.0 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update psp 13.0.11 firmware
  - amdgpu: update gc 11.0.4 firmware
  - amdgpu: update vcn 4.0.2 firmware
  - amdgpu: update psp 13.0.4 firmware
  - amdgpu: update gc 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update vpe 6.1.1 firmware
  - amdgpu: update vcn 4.0.6 firmware
  - amdgpu: update psp 14.0.1 firmware
  - amdgpu: update gc 11.5.1 firmware
  - amdgpu: update vcn 4.0.5 firmware
  - amdgpu: update psp 14.0.0 firmware
  - amdgpu: update gc 11.5.0 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update sdma 4.4.2 firmware
  - amdgpu: update psp 13.0.6 firmware
  - amdgpu: update gc 9.4.3 firmware
  - amdgpu: update vcn 4.0.4 firmware
  - amdgpu: update psp 13.0.7 firmware
  - amdgpu: update gc 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - ice: update ice DDP wireless_edge package to 1.3.20.0
  - ice: update ice DDP comms package to 1.3.52.0
  - ice: update ice DDP package to ice-1.3.41.0
  - amdgpu: update DMCUB to v9.0.10.0 for DCN314
  - amdgpu: update DMCUB to v9.0.10.0 for DCN351
  - linux-firmware: Update AMD cpu microcode
  - xe: Update GUC to v70.36.0 for BMG, LNL
  - i915: Update GUC to v70.36.0 for ADL-P, DG1, DG2, MTL, TGL
  Resolves: RHEL-73145


author: Xin Long <lxin@redhat.com> - 2.11-3
changelog:
  - Deal with warnings under gcc 8
  - Call va_end after va_copy in json_vsprintf
  - Fix bogus date in jansson.spec


author: Anna Khaitovich <akhaitov@redhat.com> - 0.13.1-0.3
changelog:
  - Don't package empty /usr/share/doc/json-c
  - Resolves: rhbz#1741076
  - Do not use --enable-rdrand
  - Resolves: rhbz#1806532


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-1.el8]
changelog:
  - [scsi] scsi: lpfc: update driver version to 12.0.0.6 (Dick Kennedy) [1613913]
  - [scsi] scsi: lpfc: Remove lpfc_enable_pbde as module parameter (Dick Kennedy) [1613913]
  - [scsi] scsi: lpfc: Correct LCB ACCept payload (Dick Kennedy) [1613913]
  - [scsi] scsi: lpfc: Limit tracking of tgt queue depth in fast path (Dick Kennedy) [1613913]
  - [scsi] scsi: lpfc: Fix driver crash when re-registering NVME rports (Dick Kennedy) [1613913]
  - [scsi] scsi: lpfc: Fix list corruption on the completion queue (Dick Kennedy) [1613913]
  - [scsi] scsi: lpfc: Fix sysfs Speed value on CNA ports (Dick Kennedy) [1613913]
  - [scsi] scsi: lpfc: Fix ELS abort on SLI-3 adapters (Dick Kennedy) [1613913]
  - [scsi] scsi: lpfc: remove null check on nvmebuf (Dick Kennedy) [1613913]
  - [arm64] arm64: fix ACPI dependencies (Bhupesh Sharma) [1556832]
  - [arm64] arm64: acpi: fix alignment fault in accessing ACPI (Bhupesh Sharma) [1556832]
  - [firmware] efi/arm: map UEFI memory map even w/o runtime services enabled (Bhupesh Sharma) [1556832]
  - [firmware] efi/arm: preserve early mapping of UEFI memory map longer for BGRT (Bhupesh Sharma) [1556832]
  - [acpi] drivers: acpi: add dependency of EFI for arm64 (Bhupesh Sharma) [1556832]
  - [arm64] arm64: export memblock_reserve()d regions via /proc/iomem (Bhupesh Sharma) [1556832]
  - [arm64] arm64: kconfig: Ensure spinlock fastpaths are inlined if !PREEMPT (Waiman Long) [1607924]
  - [arm64] arm64: locking: Replace ticket lock implementation with qspinlock (Waiman Long) [1607924]
  - [arm64] arm64: barrier: Implement smp_cond_load_relaxed (Waiman Long) [1607924]
  - [scsi] scsi: lpfc: Revise copyright for new company language (Dick Kennedy) [1600946]
  - [scsi] scsi: lpfc: update driver version to 12.0.0.5 (Dick Kennedy) [1600946]
  - [scsi] scsi: lpfc: devloss timeout race condition caused null pointer reference (Dick Kennedy) [1600946]
  - [scsi] scsi: lpfc: Fix NVME Target crash in defer rcv logic (Dick Kennedy) [1600946]
  - [scsi] scsi: lpfc: Support duration field in Link Cable Beacon V1 command (Dick Kennedy) [1600946]
  - [scsi] scsi: lpfc: Make PBDE optimizations configurable (Dick Kennedy) [1600946]
  - [scsi] scsi: lpfc: Fix abort error path for NVMET (Dick Kennedy) [1600946]
  - [scsi] scsi: lpfc: Fix panic if driver unloaded when port is offline (Dick Kennedy) [1600946]
  - [scsi] scsi: lpfc: Fix driver not setting dpp bits correctly in doorbell word (Dick Kennedy) [1600946]
  - [scsi] scsi: lpfc: Add Buffer overflow check, when nvme_info larger than PAGE_SIZE (Dick Kennedy) [1600946]
  - [scsi] scsi: lpfc: use monotonic timestamps for statistics (Dick Kennedy) [1600946]
  - [x86] mark intel knights landing and knights mill unsupported (David Arcari) [1610493]
  - [netdrv] igb: Remove superfluous reset to PHY and page 0 selection (Corinna Vinschen) [1612824]
  - [tools] selftests/powerpc: Fix ptrace-pkey for default execute permission change (Steve Best) [1498799]
  - [tools] selftests/powerpc: Fix core-pkey for default execute permission change (Steve Best) [1498799]
  - [powerpc] powerpc/pkeys: make protection key 0 less special (Steve Best) [1498799]
  - [powerpc] powerpc/pkeys: Preallocate execute-only key (Steve Best) [1498799]
  - [powerpc] powerpc/pkeys: Fix calculation of total pkeys (Steve Best) [1498799]
  - [powerpc] powerpc/pkeys: Save the pkey registers before fork (Steve Best) [1498799]
  - [powerpc] powerpc/pkeys: key allocation/deallocation must not change pkey registers (Steve Best) [1498799]
  - [powerpc] powerpc/pkeys: Deny read/write/execute by default (Steve Best) [1498799]
  - [powerpc] powerpc/pkeys: Give all threads control of their key permissions (Steve Best) [1498799]
  - [s390] KVM: s390: Add huge page enablement control (David Hildenbrand) [1508102]
  - [s390] s390/mm: Add huge page gmap linking support (David Hildenbrand) [1508102]
  - [s390] s390/mm: hugetlb pages within a gmap can not be freed (David Hildenbrand) [1508102]
  - [s390] KVM: s390: Beautify skey enable check (David Hildenbrand) [1508102]
  - [s390] KVM: s390: Add skey emulation fault handling (David Hildenbrand) [1508102]
  - [s390] s390/mm: Add huge pmd storage key handling (David Hildenbrand) [1508102]
  - [s390] s390/mm: Clear skeys for newly mapped huge guest pmds (David Hildenbrand) [1508102]
  - [s390] s390/mm: Clear huge page storage keys on enable_skey (David Hildenbrand) [1508102]
  - [s390] s390/mm: Add huge page dirty sync support (David Hildenbrand) [1508102]
  - [s390] s390/mm: Add gmap pmd invalidation and clearing (David Hildenbrand) [1508102]
  - [s390] s390/mm: Add gmap pmd notification bit setting (David Hildenbrand) [1508102]
  - [s390] s390/mm: Add gmap pmd linking (David Hildenbrand) [1508102]
  - [s390] s390/mm: Abstract gmap notify bit setting (David Hildenbrand) [1508102]
  - [s390] s390/mm: Make gmap_protect_range more modular (David Hildenbrand) [1508102]
  - [s390] KVM: s390: Replace clear_user with kvm_clear_guest (David Hildenbrand) [1508102]
  - [hwmon] hwmon: (ibmpowernv) Add attributes to enable/disable sensor groups (Steve Best) [1524684]
  - [powerpc] powerpc/powernv: Add support to enable sensor groups (Steve Best) [1524684]
  - [net] net/smc: improve delete link processing (Hendrik Brueckner) [1548452]
  - [net] net/smc: provide fallback reason code (Hendrik Brueckner) [1548452]
  - [net] net/smc: use correct vlan gid of RoCE device (Hendrik Brueckner) [1548452]
  - [net] net/smc: fewer parameters for smc_llc_send_confirm_link() (Hendrik Brueckner) [1548452]
  - [net] net/smc: remove local variable page in smc_rx_splice() (Hendrik Brueckner) [1548452]
  - [net] net/smc: use DECLARE_BITMAP for rtokens_used_mask (Hendrik Brueckner) [1548452]
  - [net] net/smc: add function to get link group from link (Hendrik Brueckner) [1548452]
  - [net] net/smc: eliminate cursor read and write calls (Hendrik Brueckner) [1548452]
  - [net] net/smc: provide smc mode in smc_diag.c (Hendrik Brueckner) [1548452]
  - [s390] s390/ism: add device driver for internal shared memory (Hendrik Brueckner) [1548452]
  - [net] net/smc: add SMC-D diag support (Hendrik Brueckner) [1548452]
  - [net] net/smc: add SMC-D support in af_smc (Hendrik Brueckner) [1548452]
  - [net] net/smc: add SMC-D support in data transfer (Hendrik Brueckner) [1548452]
  - [net] net/smc: add SMC-D support in CLC messages (Hendrik Brueckner) [1548452]
  - [net] net/smc: add pnetid support for SMC-D and ISM (Hendrik Brueckner) [1548452]
  - [net] net/smc: add base infrastructure for SMC-D and ISM (Hendrik Brueckner) [1548452]
  - [net] net/smc: add pnetid support (Hendrik Brueckner) [1548452]
  - [net] net/smc: determine port attributes independent from pnet table (Hendrik Brueckner) [1548452]
  - [x86] mark whiskey-lake processor supported (David Arcari) [1609604]
  - [s390] KVM: s390: add etoken support for guests (Thomas Huth) [1612110]
  - [char] ipmi: do not configure ipmi for HPE m400 (Tony Camuso) [1583537]
  - [scsi] scsi: ipr: Format HCAM overlay ID 0x41 (Steve Best) [1498222]
  - [x86] x86/stacktrace: Enable HAVE_RELIABLE_STACKTRACE for the ORC unwinder (Joe Lawrence) [1587952]
  - [x86] x86/unwind/orc: Detect the end of the stack (Joe Lawrence) [1587952]
  - [x86] x86/stacktrace: Do not fail for ORC with regs on stack (Joe Lawrence) [1587952]
  - [x86] x86/stacktrace: Clarify the reliable success paths (Joe Lawrence) [1587952]
  - [x86] x86/stacktrace: Remove STACKTRACE_DUMP_ONCE (Joe Lawrence) [1587952]
  - [x86] x86/stacktrace: Do not unwind after user regs (Joe Lawrence) [1587952]
  - [infiniband] IB/rxe: Mark Soft-RoCE Transport driver as tech-preview (Don Dutile) [1605216]
  - [scsi] scsi: smartpqi: bump driver version to 1.1.4-130 (Don Brace) [1503736]
  - [scsi] scsi: smartpqi: fix critical ARM issue reading PQI index registers (Don Brace) [1503736]
  - [scsi] scsi: smartpqi: add inspur advantech ids (Don Brace) [1503736]
  - [scsi] scsi: smartpqi: improve error checking for sync requests (Don Brace) [1503736]
  - [scsi] scsi: smartpqi: improve handling for sync requests (Don Brace) [1503736]
  - [netdrv] ice: mark driver as tech-preview (Jonathan Toppins) [1495347]
  - [init] init/Kconfig: remove EXPERT from CHECKPOINT_RESTORE (Adrian Reber) [1568995 1557617 1525389]
  - [scsi] be2iscsi: remove BE3 family support (Maurizio Lombardi) [1598366]
  - [x86] update rh_check_supported processor list (David Arcari) [1595918]
  - [kernel] kABI: Add generic kABI macros to use for kABI workarounds (Myron Stowe) [1546831]
  - [pci] add pci_hw_vendor_status() (Maurizio Lombardi) [1590829]
  - [ata] ahci: thunderx2: Fix for errata that affects stop engine (Robert Richter) [1563590]
  - [pci] Vulcan: AHCI PCI bar fix for Broadcom Vulcan early silicon (Robert Richter) [1563590]
  - [kernel] bpf: set default values for bpf_jit_harden and bpf_jit_kallsyms (Eugene Syromiatnikov) [1569061]
  - [kernel] bpf: Add tech preview taint for syscall (Eugene Syromiatnikov) [1559877]
  - [kernel] bpf: set unprivileged_bpf_disabled to 1 by default, add a boot parameter (Eugene Syromiatnikov) [1561171]
  - [kernel] add Red Hat-specific taint flags (Eugene Syromiatnikov) [1559877]
  - [tools] perf tests: Add Python 3 support to attr.py ("Herton R. Krzesinski") [1561505]
  - [tools] perf scripts python: Add Python 3 support to stat-cpi.py ("Herton R. Krzesinski") [1561505]
  - [kernel] kdump: fix a grammar issue in a kernel message (Dave Young) [1507353]
  - [scripts] tags.sh: Ignore redhat/rpm (Prarit Bhargava) [1582586]
  - [kernel] put RHEL info into generated headers (Prarit Bhargava) [1544999]
  - [kernel] kdump: add support for crashkernel=auto (Dave Young) [1507353]
  - [kernel] kdump: round up the total memory size to 128M for crashkernel reservation (Dave Young) [1507353]
  - [arm64] acpi: prefer booting with ACPI over DTS (Mark Salter) [1576869]
  - [acpi] aarch64: acpi scan: Fix regression related to X-Gene UARTs (Mark Salter) [1519554]
  - [acpi] ACPI / irq: Workaround firmware issue on X-Gene based m400 (Mark Salter) [1519554]
  - [x86] add rh_check_supported (David Arcari) [1565717]
  - [scsi] qla2xxx: Remove PCI IDs of deprecated adapter (Himanshu Madhani) [1572233]
  - [scsi] be2iscsi: remove unsupported device IDs (Chris Leech) [1574502]
  - [scsi] Removing Obsolete hba pci-ids from rhel8 (Dick Kennedy) [1572321]
  - [scsi] hpsa: modify hpsa driver version (Joseph Szczypek) [1471185]
  - [scsi] hpsa: remove old cciss-based smartarray pci ids (Joseph Szczypek) [1471185]
  - [kernel] rh_taint: add support for marking driver as unsupported (Jonathan Toppins) [1565704]
  - [kernel] rh_taint: add support (David Arcari) [1565704]
  - [scsi] qla4xxx: Remove deprecated PCI IDs from RHEL 8 (Chad Dupuis) [1518874]
  - [scsi] aacraid: Remove depreciated device and vendor PCI id's (Raghava Aditya Renukunta) [1495307]
  - [scsi] megaraid_sas: remove deprecated pci-ids (Tomas Henzl) [1509329]
  - [scsi] mpt*: remove certain deprecated pci-ids (Tomas Henzl) [1511953]
  - [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1544999]
  - [acpi] ACPI: APEI: arm64: Ignore broken HPE moonshot APEI support (Al Stone) [1518076]
  - [rpmspec] compute content hash for kernel-headers (Rafael Aquini) [1613003]
  - [rpmspec] compress modules on all architectures ("Herton R. Krzesinski") [1614556]
  - [rpmspec] add gcov rpm packaging support (Jan Stancek) [1601733]
  - [rpmspec] don't ship spdxcheck.py (Jakub Racek)
  - [rpmspec] clean stray bpf files (Jakub Racek) [1593309]
  - [rpmspec] Copy symvers.gz to /lib/modules (Eugene Syromiatnikov) [1609695]
  - [rpmspec] Add kabi-dup related code into specfile (Petr Oros) [1585672]
  - [rpmspec] kernel spec: Add and enable kabi check (Petr Oros) [1585672]
  - [rpmspec] Enable warning checks for configs in rpm build (Prarit Bhargava) [1589858]
  - [rpmspec] remove workaround for rst2man-3 from python3-docutils ("Herton R. Krzesinski") [1602148]
  - [rpmspec] fix dist tag used for hardlink in kernel-devel post ("Herton R. Krzesinski") [1596397]
  - [scripts] get_maintainer.pl: Add optional .get_maintainer.MAINTAINERS override (Prarit Bhargava) [1595727]
  - [rpmspec] drop kernel package dependency on python2 ("Herton R. Krzesinski") [1561505]
  - [kernel] Makefile: Move RHEL definitions down (Jakub Racek) [1576568]
  - [rpmspec] eBPF: Add bpftool package to spec file (Jerome Marchand) [1559607]
  - [rpmspec] fix conflicts with COPYING file while installing newer 4.17 kernel ("Herton R. Krzesinski") [1579563]
  - [rpmspec] do not build kernel meta-package on noarch ("Herton R. Krzesinski") [1579512]
  - [rpmspec] kernel spec: remove copy of arch/x86/purgatory/sha256.* ("Herton R. Krzesinski")
  - [rpmspec] spec: Add new arch/powerpc/kernel/module.lds file to kernel-devel rpm (Steve Best) [1572553]
  - [rpmspec] kernel spec: fix recent build errors from brp-mangle-shebangs ("Herton R. Krzesinski") [1575966]
  - [rpmspec] Add i386 to ExclusiveArch to fix noarch package build ("Herton R. Krzesinski") [1575152]
  - [rpmspec] Build kernel-abi-whitelists package (Petr Oros) [1571189]
  - [rpmspec] kernel spec: build bzImage for s390 (Hendrik Brueckner) [1570041]
  - [rpmspec] kernel spec: arm64: package module.lds in kernel-devel (Mark Salter) [1569014]
  - [rpmspec] Re-enable debuginfo packages and fix build with current dist tag ("Herton R. Krzesinski") [1568901]
  - [rpmspec] kernel spec: build kernel-debug on all architectures ("Herton R. Krzesinski") [1567367]
  - [rpmspec] don't build kernel meta-package if we are only building kernel headers ("Herton R. Krzesinski")
  - [rpmspec] remove use_vdso macro ("Herton R. Krzesinski")
  - [rpmspec] build perf and tools man pages instead of relying on a separate tarball ("Herton R. Krzesinski")
  - [rpmspec] disable debug build if arch is in nobuildarches list ("Herton R. Krzesinski")
  - [rpmspec] remove fedora changelog from spec file ("Herton R. Krzesinski")
  - [rpmspec] only support ppc64le builds ("Herton R. Krzesinski")
  - [rpmspec] remove x86 32-bit package support ("Herton R. Krzesinski")
  - [rpmspec] remove arm 32-bit package support ("Herton R. Krzesinski")
  - [rpmspec] remove configuration generation support from kernel spec file ("Herton R. Krzesinski")
  - [rpmspec] remove broken out patches from kernel spec file ("Herton R. Krzesinski")
  - [rpmspec] import kernel spec from rhel8 bootstrap dist-git ("Herton R. Krzesinski")


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-2.el8]
changelog:
  - [net] tcp: Add tcp_clamp_rto_to_user_timeout() helper to improve accuracy (Michael Cambria) [1605024]
  - [net] tcp: Add tcp_retransmit_stamp() helper routine (Michael Cambria) [1605024]
  - [net] tcp: convert icsk_user_timeout from jiffies to msecs (Michael Cambria) [1605024]
  - [kernel] Revert sched/fair: Consider SD_NUMA when selecting the most idle group to schedule on (Lauro Ramos Venancio) [1585746]
  - [kernel] redhat: makefile: adjust KBUILD_CFLAGS to reflect kernel.spec for powerpc builds (Gustavo Duarte) [1582568]
  - [rpmspec] redhat: spec: build ppc64le kernel with -O3 (Gustavo Duarte) [1582568]
  - [scsi] scsi: csiostor: update csio_get_flash_params() (Arjun Vynipadath) [1503574]
  - [scsi] csiostor: Add a soft dep on cxgb4 driver (Arjun Vynipadath) [1503574]
  - [firmware] dell_rbu: make firmware payload memory uncachable (Charles Rose) [1584401]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-3.el8]
changelog:
  - [net] tls: mark as Tech Preview (Sabrina Dubroca) [1570255]
  - [pci] PCI/VPD: Check for VPD access completion before checking for timeout (Myron Stowe) [1618820]
  - [rpmspec] redhat: remove bootwrapper subpackage (Gustavo Duarte) [1578399]
  - [virt] kvm: x86: Set highest physical address bits in non-present/reserved SPTEs (Paolo Bonzini) [1614808]
  - [virt] KVM/x86: Use CC_SET()/CC_OUT in arch/x86/kvm/vmx.c (Paolo Bonzini) [1614808]
  - [virt] KVM: X86: Implement PV IPIs in linux guest (Paolo Bonzini) [1614808]
  - [virt] KVM: X86: Add kvm hypervisor init time platform setup callback (Paolo Bonzini) [1614808]
  - [virt] KVM: X86: Implement "send IPI" hypercall (Paolo Bonzini) [1614808]
  - [virt] KVM/x86: Move X86_CR4_OSXSAVE check into kvm_valid_sregs() (Paolo Bonzini) [1614808]
  - [virt] KVM: x86: Skip pae_root shadow allocation if tdp enabled (Paolo Bonzini) [1614808]
  - [virt] KVM/MMU: Combine flushing remote tlb in mmu_set_spte() (Paolo Bonzini) [1614808]
  - [virt] KVM: vmx: skip VMWRITE of HOST_(FS, GS)_BASE when possible (Paolo Bonzini) [1614808]
  - [virt] KVM: vmx: skip VMWRITE of HOST_(FS, GS)_SEL when possible (Paolo Bonzini) [1614808]
  - [virt] KVM: vmx: always initialize HOST_(FS, GS)_BASE to zero during setup (Paolo Bonzini) [1614808]
  - [virt] KVM: vmx: move struct host_state usage to struct loaded_vmcs (Paolo Bonzini) [1614808]
  - [virt] KVM: vmx: compute need to reload FS/GS/LDT on demand (Paolo Bonzini) [1614808]
  - [virt] KVM: nVMX: remove a misleading comment regarding vmcs02 fields (Paolo Bonzini) [1614808]
  - [virt] KVM: vmx: rename __vmx_load_host_state() and vmx_save_host_state() (Paolo Bonzini) [1614808]
  - [virt] KVM: vmx: add dedicated utility to access guest's kernel_gs_base (Paolo Bonzini) [1614808]
  - [virt] KVM: vmx: track host_state.loaded using a loaded_vmcs pointer (Paolo Bonzini) [1614808]
  - [virt] KVM: vmx: refactor segmentation code in vmx_save_host_state() (Paolo Bonzini) [1614808]
  - [virt] kvm: nVMX: Fix fault priority for VMX operations (Paolo Bonzini) [1614808]
  - [virt] kvm: nVMX: Fix fault vector for VMX operation at CPL > 0 (Paolo Bonzini) [1614808]
  - [virt] KVM: try __get_user_pages_fast even if not in atomic context (Paolo Bonzini) [1614808]
  - [virt] KVM: vmx: Add tlb_remote_flush callback support (Paolo Bonzini) [1614808]
  - [virt] KVM: x86: Add tlb remote flush callback in kvm_x86_ops (Paolo Bonzini) [1614808]
  - [virt] X86/Hyper-V: Add hyperv_nested_flush_guest_mapping ftrace support (Paolo Bonzini) [1614808]
  - [virt] X86/Hyper-V: Add flush HvFlushGuestPhysicalAddressSpace hypercall support (Paolo Bonzini) [1614808]
  - [virt] x86/kvm: Don't use pvqspinlock code if only 1 vCPU (Paolo Bonzini) [1614808]
  - [virt] KVM/MMU: Simplify __kvm_sync_page() function (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Remove CR3_PCID_INVD flag (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Add multi-entry LRU cache for previous CR3s (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Flush only affected TLB entries in kvm_mmu_invlpg* (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Skip shadow page resync on CR3 switch when indicated by guest (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Support selectively freeing either current or previous MMU root (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Add a root_hpa parameter to kvm_mmu->invlpg() (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Skip TLB flush on fast CR3 switch when indicated by guest (Paolo Bonzini) [1614808]
  - [virt] kvm: vmx: Support INVPCID in shadow paging mode (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Propagate guest PCIDs to host PCIDs (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Add ability to skip TLB flush when switching CR3 (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Use fast CR3 switch for nested VMX (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Support resetting the MMU context without resetting roots (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Add support for fast CR3 switch across different MMU modes (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Introduce KVM_REQ_LOAD_CR3 (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Introduce kvm_mmu_calc_root_page_role() (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Add fast CR3 switch code path (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Avoid taking MMU lock in kvm_mmu_sync_roots if no sync is needed (Paolo Bonzini) [1614808]
  - [virt] kvm: x86: Make sync_page() flush remote TLBs once only (Paolo Bonzini) [1614808]
  - [virt] KVM: MMU: drop vcpu param in gpte_access (Paolo Bonzini) [1614808]
  - [virt] KVM: nVMX: Separate logic allocating shadow vmcs to a function (Paolo Bonzini) [1614808]
  - [virt] KVM: VMX: Mark vmcs header as shadow in case alloc_vmcs_cpu() allocate shadow vmcs (Paolo Bonzini) [1614808]
  - [virt] KVM: nVMX: Expose VMCS shadowing to L1 guest (Paolo Bonzini) [1614808]
  - [virt] KVM: nVMX: Do not forward VMREAD/VMWRITE VMExits to L1 if required so by vmcs12 vmread/vmwrite bitmaps (Paolo Bonzini) [1614808]
  - [virt] KVM: nVMX: vmread/vmwrite: Use shadow vmcs12 if running L2 (Paolo Bonzini) [1614808]
  - [virt] KVM: selftests: add tests for shadow VMCS save/restore (Paolo Bonzini) [1614808]
  - [virt] KVM: nVMX: include shadow vmcs12 in nested state (Paolo Bonzini) [1614808]
  - [virt] KVM: nVMX: Cache shadow vmcs12 on VMEntry and flush to memory on VMExit (Paolo Bonzini) [1614808]
  - [virt] KVM: nVMX: Verify VMCS shadowing VMCS link pointer (Paolo Bonzini) [1614808]
  - [virt] KVM: nVMX: Verify VMCS shadowing controls (Paolo Bonzini) [1614808]
  - [virt] KVM: nVMX: Introduce nested_cpu_has_shadow_vmcs() (Paolo Bonzini) [1614808]
  - [virt] KVM: nVMX: Fail VMLAUNCH and VMRESUME on shadow VMCS (Paolo Bonzini) [1614808]
  - [virt] KVM: nVMX: Allow VMPTRLD for shadow VMCS if vCPU supports VMCS shadowing (Paolo Bonzini) [1614808]
  - [virt] KVM: VMX: Change vmcs12(read, write)_any() to receive vmcs12 as parameter (Paolo Bonzini) [1614808]
  - [virt] KVM: VMX: Create struct for VMCS header (Paolo Bonzini) [1614808]
  - [virt] kvm: selftests: add test for nested state save/restore (Paolo Bonzini) [1614808]
  - [virt] kvm: nVMX: Introduce KVM_CAP_NESTED_STATE (Paolo Bonzini) [1614808]
  - [virt] KVM: x86: do not load vmcs12 pages while still in SMM (Paolo Bonzini) [1614808]
  - [virt] kvm: selftests: add basic test for state save and restore (Paolo Bonzini) [1614808]
  - [virt] kvm: selftests: ensure vcpu file is released (Paolo Bonzini) [1614808]
  - [virt] kvm: selftests: actually use all of lib/vmx.c (Paolo Bonzini) [1614808]
  - [virt] kvm: selftests: create a GDT and TSS (Paolo Bonzini) [1614808]
  - [virt] KVM: x86: ensure all MSRs can always be KVM_GET/SET_MSR'd (Paolo Bonzini) [1614808]
  - [virt] KVM: vmx: remove save/restore of host BNDCGFS MSR (Paolo Bonzini) [1614808]
  - [virt] KVM: Switch 'requests' to be 64-bit (explicitly) (Paolo Bonzini) [1614808]
  - [virt] kvm: selftests: add cr4_cpuid_sync_test (Paolo Bonzini) [1614808]
  - [virt] KVM: PPC: Book3S HV: Read kvm->arch.emul_smt_mode under kvm->lock (Paolo Bonzini) [1614808]
  - [virt] KVM: PPC: Book3S HV: Allow creating max number of VCPUs on POWER9 (Paolo Bonzini) [1614808]
  - [virt] KVM: PPC: Book3S HV: Pack VCORE IDs to access full VCPU ID space (Paolo Bonzini) [1614808]
  - [virt] KVM: PPC: Book3S HV: Fix constant size warning (Paolo Bonzini) [1614808]
  - [virt] KVM: PPC: Book3S HV: Add of_node_put() in success path (Paolo Bonzini) [1614808]
  - [virt] KVM: PPC: Book3S: Fix matching of hardware and emulated TCE tables (Paolo Bonzini) [1614808]
  - [virt] KVM: PPC: Remove mmio_vsx_tx_sx_enabled in KVM MMIO emulation (Paolo Bonzini) [1614808]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-4.el8]
changelog:
  - [net] xdp: exclude XDP from kABI guarantee (Jiri Benc) [1568551]
  - [kernel] rh_kabi: introduce RH_KABI_EXCLUDE (Jiri Benc) [1568551]
  - [powerpc] powerpc/powernv/pci: Work around races in PCI bridge enabling (Steve Best) [1620035]
  - [block] blk-wbt: fix IO hang in wbt_wait() (Ming Lei) [1614198]
  - [block] blkcg: Make blkg_root_lookup() work for queues in bypass mode (Ming Lei) [1614198]
  - [block] null_blk: add lock drop/acquire annotation (Ming Lei) [1614198]
  - [block] Blk-throttle: reduce tail io latency when iops limit is (Ming Lei) [1614198]
  - [block] block: paride: pd: mark expected switch fall-throughs (Ming Lei) [1614198]
  - [block] block: Ensure that a request queue is dissociated from the (Ming Lei) [1614198]
  - [block] block: Introduce blk_exit_queue() (Ming Lei) [1614198]
  - [block] blkcg: Introduce blkg_root_lookup() (Ming Lei) [1614198]
  - [block] block: Remove two superfluous #include directives (Ming Lei) [1614198]
  - [block] blk-mq: count the hctx as active before allocating tag (Ming Lei) [1614198]
  - [block] block: bvec_nr_vecs() returns value for wrong slab (Ming Lei) [1614198]
  - [block] drivers/block/drbd: remove the null check for (Ming Lei) [1614198]
  - [block] drivers/block/aoe/aoedev: NULL check is not needed for (Ming Lei) [1614198]
  - [block] drivers/block/mtip32xx: remove the null check for (Ming Lei) [1614198]
  - [block] cfq: Suppress compiler warnings about comparisons (Ming Lei) [1614198]
  - [block] cfq: Annotate fall-through in a switch statement (Ming Lei) [1614198]
  - [block] blk-wbt: Avoid lock contention and thundering herd issue in (Ming Lei) [1590363]
  - [block] target/loop: depend on SCSI (Ming Lei) [1614198]
  - [block] xen-blkfront: use true and false for boolean values (Ming Lei) [1614198]
  - [block] lightnvm: remove minor version check for 2.0 (Ming Lei) [1614198]
  - [block] scsi: Check sense buffer size at build time (Ming Lei) [1614198]
  - [block] libata-scsi: Move sense buffers onto stack (Ming Lei) [1614198]
  - [block] cdrom: Use struct scsi_sense_hdr internally (Ming Lei) [1614198]
  - [block] ide-cd: Remove redundant sense buffer (Ming Lei) [1614198]
  - [block] block: Switch struct packet_command to use struct (Ming Lei) [1614198]
  - [block] target: don't depend on SCSI (Ming Lei) [1614198]
  - [block] scsi: build scsi_common.o for all scsi passthrough request (Ming Lei) [1614198]
  - [block] scsi: cxlflash: Drop unused sense buffers (Ming Lei) [1614198]
  - [block] ide-cd: Drop unused sense buffers (Ming Lei) [1614198]
  - [block] blk-mq: fix updating tags depth (Ming Lei) [1611900]
  - [block] block: really disable runtime-pm for blk-mq (Ming Lei) [1611902]
  - [block] aoe: mark expected switch fall-through (Ming Lei) [1614198]
  - [block] block: make iolatency avg_lat exponentially decay (Ming Lei) [1614198]
  - [block] blk-cgroup: clear the throttle queue on fork (Ming Lei) [1614198]
  - [block] blk-cgroup: hold the queue ref during throttling (Ming Lei) [1614198]
  - [block] blk-iolatency: fix blkg leak in timer_fn (Ming Lei) [1614198]
  - [block] block/bsg-lib: use PTR_ERR_OR_ZERO to simplify the flow path (Ming Lei) [1614198]
  - [block] t10-pi: provide empty t10_pi_complete() for (Ming Lei) [1614198]
  - [block] block: blk_init_allocated_queue() set q->fq as NULL in the (Ming Lei) [1614198]
  - [block] nvme: use blk API to remap ref tags for IOs with metadata (Ming Lei) [1614198]
  - [block] block: move dif_prepare/dif_complete functions to block layer (Ming Lei) [1614198]
  - [block] block: move ref_tag calculation func to the block layer (Ming Lei) [1614198]
  - [block] block: don't account for split bio's size in cgroup stats (Ming Lei) [1614198]
  - [block] pktcdvd: Fix possible Spectre-v1 for pkt_devs (Ming Lei) [1614198]
  - [block] partitions/aix: append null character to print data from disk (Ming Lei) [1614198]
  - [block] partitions/aix: fix usage of uninitialized lv_info and lvname (Ming Lei) [1614198]
  - [block] readahead: stricter check for bdi io_pages (Ming Lei) [1614198]
  - [block] scsi: virtio_scsi: fix pi_bytes(out, in) on 4 KiB block size (Ming Lei) [1614198]
  - [block] block: move bio_integrity_(intervals, bytes) into blkdev.h (Ming Lei) [1614198]
  - [block] xen/blkfront: remove unused macros (Ming Lei) [1614198]
  - [block] block: allow max_discard_segments to be stacked (Ming Lei) [1614198]
  - [block] block: unexport bio_clone_bioset (Ming Lei) [1614198]
  - [block] md: remove a bogus comment (Ming Lei) [1614198]
  - [block] block: remove bio_clone_kmalloc (Ming Lei) [1614198]
  - [block] exofs: use bio_clone_fast in _write_mirror (Ming Lei) [1614198]
  - [block] bcache: don't clone bio in bch_data_verify (Ming Lei) [1614198]
  - [block] block: bio_set_pages_dirty can't see NULL bv_page in a valid (Ming Lei) [1614198]
  - [block] block: simplify bio_check_pages_dirty (Ming Lei) [1614198]
  - [block] block: Rename the null_blk_mod kernel module back into (Ming Lei) [1614198]
  - [block] blk-mq: fail the request in case issue failure (Ming Lei) [1614305]
  - [block] blk-rq-qos: make depth comparisons unsigned (Ming Lei) [1614198]
  - [block] blkcg: Track DISCARD statistics and output them in cgroup (Ming Lei) [1614198]
  - [block] block: Track DISCARD statistics and output them in stat and (Ming Lei) [1614198]
  - [block] block: Add and use op_stat_group() for indexing disk_stat (Ming Lei) [1614198]
  - [block] block: Define and use STAT_READ and STAT_WRITE (Ming Lei) [1614198]
  - [block] block: Add part_stat_read_accum to read across field entries (Ming Lei) [1614198]
  - [block] block: make bdev_ops->rw_page() take a REQ_OP instead of bool (Ming Lei) [1614198]
  - [block] pktcdvd: remove assignment in if condition (Ming Lei) [1614198]
  - [block] blk-mq: issue directly if hw queue isn't busy in case of (Ming Lei) [1614305]
  - [block] blk-iolatency: truncate our current time (Ming Lei) [1614198]
  - [block] blk-iolatency: don't change the latency window (Ming Lei) [1614198]
  - [block] block: remove blkdev_entry_to_request() macro (Ming Lei) [1614198]
  - [block] block: skd: Use pad printk format for dma_addr_t values (Ming Lei) [1614198]
  - [block] bsg: remove read/write support (Ming Lei) [1614198]
  - [block] blk-iolatency: fix max_depth comparisons (Ming Lei) [1614198]
  - [block] block: iolatency: avoid 64-bit division (Ming Lei) [1614198]
  - [block] block/DAC960.c: fix defined but not used build warnings (Ming Lei) [1614198]
  - [block] null_blk: add zone support (Ming Lei) [1614198]
  - [block] null_blk: move shared definitions to header file (Ming Lei) [1614198]
  - [block] block: Add default switch case to blk_pm_allow_request() to (Ming Lei) [1614198]
  - [block] block: fix infinite loop if the device loses discard (Ming Lei) [1614198]
  - [block] block, mm: remove unnecessary __GFP_HIGH flag (Ming Lei) [1614198]
  - [block] null_blk: remove NULLB_DEV_FL_CONFIGURED on turning off nullb (Ming Lei) [1614198]
  - [block] mm: skip readahead if the cgroup is congested (Ming Lei) [1614198]
  - [block] Documentation: add a doc for blk-iolatency (Ming Lei) [1614198]
  - [block] block: introduce blk-iolatency io controller (Ming Lei) [1614198]
  - [block] rq-qos: introduce dio_bio callback (Ming Lei) [1614198]
  - [block] block: remove external dependency on wbt_flags (Ming Lei) [1614198]
  - [block] blk-rq-qos: refactor out common elements of blk-wbt (Ming Lei) [1614198]
  - [block] blk-stat: export helpers for modifying blk_rq_stat (Ming Lei) [1614198]
  - [block] memcontrol: schedule throttling if we are congested (Ming Lei) [1614198]
  - [block] blkcg: add generic throttling mechanism (Ming Lei) [1614198]
  - [block] swap, blkcg: issue swap io with the appropriate context (Ming Lei) [1614198]
  - [block] blk: introduce REQ_SWAP (Ming Lei) [1614198]
  - [block] blk-cgroup: allow controllers to output their own stats (Ming Lei) [1614198]
  - [block] block: introduce bio_issue_as_root_blkg (Ming Lei) [1614198]
  - [block] block: add bi_blkg to the bio for cgroups (Ming Lei) [1614198]
  - [block] blk-mq: dequeue request one by one from sw queue if hctx is (Ming Lei) [1614305]
  - [block] block/loop: mark expected switch fall-through (Ming Lei) [1614198]
  - [block] drbd: mark expected switch fall-throughs (Ming Lei) [1614198]
  - [block] blk-mq: only attempt to merge bio if there is rq in sw queue (Ming Lei) [1614305]
  - [block] blk-mq: use list_splice_tail_init() to insert requests (Ming Lei) [1614305]
  - [block] blk-mq: fix typo in a function comment (Ming Lei) [1614198]
  - [block] blk-mq: code clean-up by adding an API to clear set->mq_map (Ming Lei) [1614198]
  - [block] paride: remove redundant variable n (Ming Lei) [1614198]
  - [block] partitions/ldm: remove redundant pointer dgrp (Ming Lei) [1614198]
  - [block] loop: remove redundant pointer inode (Ming Lei) [1614198]
  - [block] block/floppy: remove redundant variable dflags (Ming Lei) [1614198]
  - [block] Block: blk-throttle: set low_valid immediately once one (Ming Lei) [1614198]
  - [block] Blktrace: bail out early if block debugfs is not configured (Ming Lei) [1614198]
  - [block] block: Document how blk_update_request() handles (Ming Lei) [1614198]
  - [block] drbd: Do not redefine __must_hold() (Ming Lei) [1614198]
  - [block] blk-mq: avoid to synchronize rcu inside blk_cleanup_queue() (Ming Lei) [1597067]
  - [block] blk-mq: remove synchronize_rcu() from (Ming Lei) [1597067]
  - [block] blk-mq: introduce new lock for protecting hctx->dispatch_wait (Ming Lei) [1597067]
  - [block] blk-mq: don't pass **hctx to blk_mq_mark_tag_wait() (Ming Lei) [1597067]
  - [block] blk-mq: cleanup blk_mq_get_driver_tag() (Ming Lei) [1597067]
  - [block] block, bfq: give a better name to bfq_bfqq_may_idle (Ming Lei) [1614198]
  - [block] block, bfq: fix service being wrongly set to zero in case of (Ming Lei) [1614198]
  - [block] block, bfq: do not expire a queue that will deserve dispatch (Ming Lei) [1614198]
  - [block] block, bfq: add/remove entity weights correctly (Ming Lei) [1614198]
  - [block] block: Make struct request_queue smaller for (Ming Lei) [1614198]
  - [block] block: Inline blk_queue_nr_zones() (Ming Lei) [1614198]
  - [block] block: Remove bdev_nr_zones() (Ming Lei) [1614198]
  - [block] include/uapi/linux/blkzoned.h: Remove a superfluous __packed (Ming Lei) [1614198]
  - [block] block: Remove a superfluous cast from blkdev_report_zones() (Ming Lei) [1614198]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-5.el8]
changelog:
  - [net] erspan: set erspan_ver to 1 by default when adding an erspan dev (Xin Long) [1619118]
  - [hv] x86/hyper-v: Fix wrong merge conflict resolution (Vitaly Kuznetsov) [1597652]
  - [hv] x86/hyper-v: Check for VP_INVAL in hyperv_flush_tlb_others() (Vitaly Kuznetsov) [1597652]
  - [hv] x86/hyper-v: Check cpumask_to_vpset() return value in hyperv_flush_tlb_others_ex() (Vitaly Kuznetsov) [1597652]
  - [hv] x86/hyper-v: Trace PV IPI send (Vitaly Kuznetsov) [1597652]
  - [hv] x86/hyper-v: Use cheaper HVCALL_SEND_IPI hypercall when possible (Vitaly Kuznetsov) [1597652]
  - [hv] x86/hyper-v: Use 'fast' hypercall for HVCALL_SEND_IPI (Vitaly Kuznetsov) [1597652]
  - [hv] x86/hyper-v: Implement hv_do_fast_hypercall16 (Vitaly Kuznetsov) [1597652]
  - [hv] x86/hyper-v: Use cheaper HVCALL_FLUSH_VIRTUAL_ADDRESS_(LIST, SPACE) hypercalls when possible (Vitaly Kuznetsov) [1597652]
  - [netdrv] xen-netfront: fix queue name setting (Vitaly Kuznetsov) [1576160]
  - [scsi] lfpc: add Lancer FCoE to the removed devices (Tomas Henzl) [1602033]
  - [scsi] megaraid_sas: add removed id table (Tomas Henzl) [1602033]
  - [scsi] aacraid: add removed id table (Tomas Henzl) [1602033]
  - [scsi] qla4xxx: add removed id table (Tomas Henzl) [1602033]
  - [scsi] lpfc: add removed id table (Tomas Henzl) [1602033]
  - [scsi] qla2xxx: add removed id table (Tomas Henzl) [1602033]
  - [scsi] mpt3sas: add removed id table (Tomas Henzl) [1602033]
  - [scsi] be2iscsi: add removed id table (Tomas Henzl) [1602033]
  - [scsi] rh_taint, pci : add information about removed hardware (Tomas Henzl) [1602033]
  - [kernel] kernel: add SUPPORT_REMOVED kernel taint (Tomas Henzl) [1602033]
  - [net] sunrpc: Change rpc_print_iostats to rpc_clnt_show_stats and handle rpc_clnt clones (Dave Wysochanski) [1610373]
  - [net] sunrpc: Add _add_rpc_iostats() to add rpc_iostats metrics (Dave Wysochanski) [1610373]
  - [net] sunrpc: add _print_rpc_iostats() to output metrics for one RPC op (Dave Wysochanski) [1610373]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-6.el8]
changelog:
  - [lib] vsprintf: Add command line option debug_boot_weak_hash (Prarit Bhargava) [1625687]
  - [netdrv] i40e: Fix for Tx timeouts when interface is brought up if DCB is enabled (Stefan Assmann) [1616147]
  - [misc] ocxl: Fix page fault handler in case of fault on dying process (Steve Best) [1624644]
  - [edac] EDAC, sb_edac: Add support for systems with segmented PCI buses (Aristeu Rozanski) [1621849]
  - [netdrv] xen-netfront: fix warn message as irq device name has '/' (Vitaly Kuznetsov) [1576160]
  - [arm64] arm64, kaslr: export offset in VMCOREINFO ELF notes (Bhupesh Sharma) [1624246]
  - [rpmspec] redhat: Move gfs2 and dlm out of kernel-modules-extra (Andrew Price) [1623511]
  - [powerpc] powerpc/topology: Get topology for shared processors at boot (Steve Best) [1620039]
  - [fs] gfs2: Don't set GFS2_RDF_UPTODATE when the lvb is updated (Robert S Peterson) [1622057]
  - [fs] gfs2: improve debug information when lvb mismatches are found (Robert S Peterson) [1622057]
  - [fs] gfs2: cleanup: call gfs2_rgrp_ondisk2lvb from gfs2_rgrp_out (Robert S Peterson) [1622057]
  - [x86] Fix x86 32-bit invalid cpu boot failure message (Prarit Bhargava) [1571456]
  - [net] net/ipv6: init ip6 anycast rt->dst.input as ip6_input (Hangbin Liu) [1615671]
  - [pci] PCI/AER: Don't clear AER bits if error handling is Firmware-First (Myron Stowe) [1621933]
  - [pci] PCI/AER: Remove duplicate PCI_EXP_AER_FLAGS definition (Myron Stowe) [1621933]
  - [pci] PCI/portdrv: Remove pcie_portdrv_err_handler.slot_reset (Myron Stowe) [1621933]
  - [pci] PCI/AER: Clear device status bits during ERR_COR handling (Myron Stowe) [1621933]
  - [pci] PCI/AER: Clear device status bits during ERR_FATAL and ERR_NONFATAL (Myron Stowe) [1621933]
  - [pci] PCI/AER: Remove ERR_FATAL code from ERR_NONFATAL path (Myron Stowe) [1621933]
  - [pci] PCI/AER: Factor out ERR_NONFATAL status bit clearing (Myron Stowe) [1621933]
  - [pci] PCI/AER: Clear only ERR_NONFATAL bits during non-fatal recovery (Myron Stowe) [1621933]
  - [pci] PCI/AER: Clear only ERR_FATAL status bits during fatal recovery (Myron Stowe) [1621933]
  - [pci] PCI/AER: Honor "pcie_ports=native" even if HEST sets FIRMWARE_FIRST (Myron Stowe) [1621933]
  - [pci] PCI/AER: Add sysfs attributes for rootport cumulative stats (Myron Stowe) [1621933]
  - [pci] PCI/AER: Add sysfs attributes to provide AER stats and breakdown (Myron Stowe) [1621933]
  - [pci] PCI/AER: Define aer_stats structure for AER capable devices (Myron Stowe) [1621933]
  - [pci] PCI/AER: Move internal declarations to drivers/pci/pci.h (Myron Stowe) [1621933]
  - [pci] PCI/AER: Adopt lspci names for AER error decoding (Myron Stowe) [1621933]
  - [pci] PCI/AER: Expose internal API for obtaining AER information (Myron Stowe) [1621933]
  - [kernel] rcu: Make expedited GPs handle CPU 0 being offline (Gustavo Duarte) [1610262]
  - [rpmspec] Generate BootLoaderSpec config fragments ("Herton R. Krzesinski") [1619766]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-7.el8]
changelog:
  - [netdrv] hv_netvsc: Fix a deadlock by getting rtnl lock earlier in netvsc_probe() (Vitaly Kuznetsov) [1625609]
  - [netdrv] hv_netvsc: ignore devices that are not PCI (Vitaly Kuznetsov) [1625609]
  - [netdrv] hv/netvsc: Fix NULL dereference at single queue mode fallback (Vitaly Kuznetsov) [1625609]
  - [netdrv] hv_netvsc: Add per-cpu ethtool stats for netvsc (Vitaly Kuznetsov) [1625609]
  - [pci] PCI: shpchp: Separate existence of SHPC and permission to use it (Steve Best) [1622953]
  - [powerpc] KVM: PPC: Book3S HV: Don't truncate HPTE index in xlate function (David Gibson) [1625513]
  - [kernel] rh_kabi: Add macros to size and extend structs (Prarit Bhargava) [1564570]
  - [pci] PCI: Remove unnecessary include of <linux/pci-aspm.h> (Myron Stowe) [1622672]
  - [wireless] iwlwifi: Remove unnecessary include of <linux/pci-aspm.h> (Myron Stowe) [1622672]
  - [wireless] ath9k: Remove unnecessary include of <linux/pci-aspm.h> (Myron Stowe) [1622672]
  - [netdrv] igb: Remove unnecessary include of <linux/pci-aspm.h> (Myron Stowe) [1622672]
  - [pci] PCI/ASPM: Convert to use sysfs_match_string() helper (Myron Stowe) [1622672]
  - [virt] KVM: s390: Properly lock mm context allow_gmap_hpage_1m setting (Thomas Huth) [1623513]
  - [virt] KVM: s390: vsie: copy wrapping keys to right place (Thomas Huth) [1623513]
  - [virt] KVM: s390: Fix pfmf and conditional skey emulation (Thomas Huth) [1623513]
  - [virt] KVM: s390: Fix storage attributes migration with memory slots (Thomas Huth) [1623513]
  - [virt] KVM: s390: a utility function for migration (Thomas Huth) [1623513]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-8.el8]
changelog:
  - [documentation] scsi: documentation: add scsi_mod.use_blk_mq to scsi-parameters (Ewan Milne) [1600014]
  - [scsi] scsi: core: Update SCSI_MQ_DEFAULT help text to match default (Ewan Milne) [1600014]
  - [scsi] scsi: core: switch to scsi-mq by default (Ewan Milne) [1600014]
  - [pci] PCI: Match Root Port's MPS to endpoint's MPSS as necessary (Myron Stowe) [1502324]
  - [pci] PCI: Skip MPS logic for Virtual Functions (VFs) (Myron Stowe) [1502324]
  - [pci] PCI: Check for PCIe Link downtraining (Myron Stowe) [1502324]
  - [pci] PCI: Workaround IDT switch ACS Source Validation erratum (Myron Stowe) [1502324]
  - [of] OF: Don't set default coherent DMA mask (Mark Salter) [1581822]
  - [acpi] ACPI/IORT: Don't set default coherent DMA mask (Mark Salter) [1581822]
  - [iommu] iommu/dma: Respect bus DMA limit for IOVAs (Mark Salter) [1581822]
  - [of] of/device: Set bus DMA mask as appropriate (Mark Salter) [1581822]
  - [acpi] ACPI/IORT: Set bus DMA mask as appropriate (Mark Salter) [1581822]
  - [kernel] dma-mapping: Generalise dma_32bit_limit flag (Mark Salter) [1581822]
  - [acpi] ACPI/IORT: Support address size limit for root complexes (Mark Salter) [1581822]
  - [of] of/platform: Initialise default DMA masks (Mark Salter) [1581822]
  - [net] Bluetooth: hidp: buffer overflow in hidp_process_report (Gopal Tiwari) [1623073] {CVE-2018-9363}
  - [irqchip] irqchip/gic-v3-its: Reduce minimum LPI allocation to 1 for PCI devices (Mark Salter) [1550500]
  - [irqchip] irqchip/gic-v3-its: Honor hypervisor enforced LPI range (Mark Salter) [1550500]
  - [irqchip] irqchip/gic-v3: Expose GICD_TYPER in the rdist structure (Mark Salter) [1550500]
  - [irqchip] irqchip/gic-v3-its: Drop chunk allocation compatibility (Mark Salter) [1550500]
  - [irqchip] irqchip/gic-v3-its: Move minimum LPI requirements to individual busses (Mark Salter) [1550500]
  - [irqchip] irqchip/gic-v3-its: Use full range of LPIs (Mark Salter) [1550500]
  - [irqchip] irqchip/gic-v3-its: Refactor LPI allocator (Mark Salter) [1550500]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-9.el8]
changelog:
  - [pci] PCI/DPC: Remove indirection waiting for inactive link (Myron Stowe) [1485556]
  - [pci] PCI/DPC: Use threaded IRQ for bottom half handling (Myron Stowe) [1485556]
  - [pci] PCI/DPC: Print AER status in DPC event handling (Myron Stowe) [1485556]
  - [pci] PCI/DPC: Remove rp_pio_status from dpc struct (Myron Stowe) [1485556]
  - [pci] PCI/DPC: Defer event handling to work queue (Myron Stowe) [1485556]
  - [pci] PCI/DPC: Leave interrupts enabled while handling event (Myron Stowe) [1485556]
  - [net] net/mlx5e: Offload TC matching on tos/ttl for ip tunnels (Erez Alfasi) [1615121]
  - [net] net/mlx5e: Support setup of tos and ttl for tunnel key TC action offload (Erez Alfasi) [1615121]
  - [net] net/mlx5e: Use ttl from route lookup on tc encap offload only if needed (Erez Alfasi) [1615121]
  - [net] net/sched: cls_flower: Support matching on ip tos and ttl for tunnels (Erez Alfasi) [1615121]
  - [net] flow_dissector: Dissect tos and ttl from the tunnel info (Erez Alfasi) [1615121]
  - [net] net/sched: tunnel_key: Allow to set tos and ttl for tc based ip tunnels (Erez Alfasi) [1615121]
  - [net] net/sched: act_tunnel_key: disambiguate metadata dst error cases (Erez Alfasi) [1615121]
  - [net] net/sched: add tunnel option support to act_tunnel_key (Erez Alfasi) [1615121]
  - [iommu] iommu/amd: Add support for IOMMU XT mode (Suravee Suthikulpanit) [1504485]
  - [iommu] iommu/amd: Add support for higher 64-bit IOMMU Control Register (Suravee Suthikulpanit) [1504485]
  - [x86] x86: irq_remapping: Move irq remapping mode enum (Suravee Suthikulpanit) [1504485]
  - [firmware] dcdbas: Add support for WSMT ACPI table (Charles Rose) [1502286]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-10.el8]
changelog:
  - [scsi] scsi: lpfc: Correct MDS diag and nvmet configuration (Dick Kennedy) [1628323]
  - [iommu] iommu/arm-smmu: workaround DMA mode issues (Mark Salter) [1624077]
  - [x86] x86/microcode: Allow late microcode loading with SMT disabled (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] tools headers: Synchronise x86 cpufeatures.h for L1TF additions (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/mm/kmmio: Make the tracer robust against L1TF (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/mm/pat: Make set_memory_np() L1TF safe (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/speculation/l1tf: Make pmd/pud_mknotpresent() invert (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/speculation/l1tf: Invert all not present mappings (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] cpu/hotplug: Fix SMT supported evaluation (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] KVM: VMX: Tell the nested hypervisor to skip L1D flush on vmentry (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/speculation: Use ARCH_CAPABILITIES to skip L1D flush on vmentry (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/speculation: Simplify sysfs report of VMX L1TF vulnerability (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] Documentation/l1tf: Remove Yonah processors from not vulnerable list (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/KVM/VMX: Don't set l1tf_flush_l1d from vmx_handle_external_intr() (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/irq: Let interrupt handlers set kvm_cpu_l1tf_flush_l1d (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86: Don't include linux/irq.h from asm/hardirq.h (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/KVM/VMX: Introduce per-host-cpu analogue of l1tf_flush_l1d (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/irq: Demote irq_cpustat_t::__softirq_pending to u16 (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/KVM/VMX: Move the l1tf_flush_l1d test to vmx_l1d_flush() (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/KVM/VMX: Replace 'vmx_l1d_flush_always' with 'vmx_l1d_flush_cond' (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/KVM/VMX: Don't set l1tf_flush_l1d to true from vmx_l1d_flush() (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] cpu/hotplug: detect SMT disabled by BIOS (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] Documentation/l1tf: Fix typos (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/KVM/VMX: Initialize the vmx_l1d_flush_pages' content (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/speculation/l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] Documentation: Add section about CPU vulnerabilities (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/bugs, kvm: Introduce boot-time control of L1TF mitigations (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] cpu/hotplug: Set CPU_SMT_NOT_SUPPORTED early (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] cpu/hotplug: Expose SMT control init function (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/kvm: Allow runtime control of L1D flush (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/kvm: Serialize L1D flush parameter setter (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/kvm: Add static key for flush always (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/kvm: Move l1tf setup function (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/l1tf: Handle EPT disabled state proper (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/kvm: Drop L1TF MSR list approach (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/litf: Introduce vmx status variable (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] cpu/hotplug: Online siblings when SMT control is turned on (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/KVM/VMX: Use MSR save list for IA32_FLUSH_CMD if required (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/KVM/VMX: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/KVM/VMX: Separate the VMX AUTOLOAD guest/host number accounting (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/KVM/VMX: Add find_msr() helper function (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/KVM/VMX: Split the VMX MSR LOAD structures to have an host/guest numbers (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/KVM/VMX: Add L1D flush logic (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/KVM/VMX: Add L1D MSR based flush (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/KVM/VMX: Add L1D flush algorithm (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/KVM/VMX: Add module argument for L1TF mitigation (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/KVM: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] cpu/hotplug: Boot HT siblings at least once (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] Revert "x86/apic: Ignore secondary threads if nosmt=force" (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/speculation/l1tf: Fix up pte->pfn conversion for PAE (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/speculation/l1tf: Protect PAE swap entries against L1TF (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/cpufeatures: Add detection of L1D cache flush support (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/speculation/l1tf: Extend 64bit swap file size limit (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/apic: Ignore secondary threads if nosmt=force (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/cpu/AMD: Evaluate smp_num_siblings early (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/cpu/intel: Evaluate smp_num_siblings early (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/cpu/topology: Provide detect_extended_topology_early() (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/cpu/common: Provide detect_ht_early() (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/cpu/AMD: Remove the pointless detect_ht() call (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/cpu: Remove the pointless CPU printout (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] cpu/hotplug: Provide knobs to control SMT (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] cpu/hotplug: Split do_cpu_down() (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] cpu/hotplug: Make bringup/teardown of smp threads symmetric (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/topology: Provide topology_smt_supported() (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/smp: Provide topology_is_primary_thread() (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] sched/smt: Update sched_smt_present at runtime (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/bugs: Move the l1tf function and define pr_fmt properly (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/speculation/l1tf: Limit swap file size to MAX_PA/2 (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/speculation/l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/speculation/l1tf: Add sysfs reporting for l1tf (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/speculation/l1tf: Make sure the first page is always reserved (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/speculation/l1tf: Protect PROT_NONE PTEs against speculation (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/speculation/l1tf: Protect swap entries against L1TF (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/speculation/l1tf: Change order of offset/type in swap entry (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}
  - [x86] x86/speculation/l1tf: Increase 32bit PAE __PHYSICAL_PAGE_SHIFT (Waiman Long) [1616046] {CVE-2018-3620 CVE-2018-3646}


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-11.el8]
changelog:
  - [net] udp6: add missing checks on edumux packet processing (Paolo Abeni) [1625954]
  - [net] udp4: fix IP_CMSG_CHECKSUM for connected sockets (Paolo Abeni) [1625954]
  - [s390] s390/pci: fix out of bounds access during irq setup (Hendrik Brueckner) [1627462]
  - [nvdimm] libnvdimm: fix ars_status output length calculation (Jeff Moyer) [1616307]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-12.el8]
changelog:
  - [i2c] i2c: i801: fix DNV's SMBCTRL register offset (David Arcari) [1628861]
  - [fs] ceph: avoid a use-after-free in ceph_destroy_options() (Ilya Dryomov) [1629884]
  - [fs] ceph: fix incorrect use of strncpy (Ilya Dryomov) [1629884]
  - [block] rbd: support cloning across namespaces (Ilya Dryomov) [1629884]
  - [block] rbd: factor out get_parent_info() (Ilya Dryomov) [1629884]
  - [block] rbd: support for images within namespaces (Ilya Dryomov) [1629884]
  - [block] rbd: pass rbd_spec into parse_rbd_opts_token() (Ilya Dryomov) [1629884]
  - [net] libceph: weaken sizeof check in ceph_x_verify_authorizer_reply() (Ilya Dryomov) [1629884]
  - [net] libceph: check authorizer reply/challenge length before reading (Ilya Dryomov) [1629884]
  - [net] libceph: implement CEPHX_V2 calculation mode (Ilya Dryomov) [1629884]
  - [net] libceph: add authorizer challenge (Ilya Dryomov) [1629884]
  - [net] libceph: factor out encrypt_authorizer() (Ilya Dryomov) [1629884]
  - [net] libceph: factor out __ceph_x_decrypt() (Ilya Dryomov) [1629884]
  - [net] libceph: factor out __prepare_write_connect() (Ilya Dryomov) [1629884]
  - [net] libceph: store ceph_auth_handshake pointer in ceph_connection (Ilya Dryomov) [1629884]
  - [pci] PCI: pciehp: Deduplicate presence check on probe & resume (Myron Stowe) [1583983]
  - [pci] PCI: pciehp: Avoid implicit fallthroughs in switch statements (Myron Stowe) [1583983]
  - [pci] PCI: Whitelist Thunderbolt ports for runtime D3 (Myron Stowe) [1583983]
  - [pci] PCI: Whitelist native hotplug ports for runtime D3 (Myron Stowe) [1583983]
  - [pci] PCI: sysfs: Resume to D0 on function reset (Myron Stowe) [1583983]
  - [pci] PCI: pciehp: Resume parent to D0 on config space access (Myron Stowe) [1583983]
  - [pci] PCI: pciehp: Resume to D0 on enable/disable (Myron Stowe) [1583983]
  - [pci] PCI: pciehp: Support interrupts sent from D3hot (Myron Stowe) [1583983]
  - [pci] PCI: pciehp: Obey compulsory command delay after resume (Myron Stowe) [1583983]
  - [pci] PCI: pciehp: Clear spurious events earlier on resume (Myron Stowe) [1583983]
  - [pci] PCI: portdrv: Deduplicate PM callback iterator (Myron Stowe) [1583983]
  - [pci] PCI: pciehp: Avoid slot access during reset (Myron Stowe) [1583983]
  - [pci] PCI: pciehp: Always enable occupied slot on probe (Myron Stowe) [1583983]
  - [pci] PCI: pciehp: Become resilient to missed events (Myron Stowe) [1583983]
  - [pci] PCI: pciehp: Tolerate initially unstable link (Myron Stowe) [1583983]
  - [pci] PCI: pciehp: Declare pciehp_enable/disable_slot() static (Myron Stowe) [1583983]
  - [pci] PCI: pciehp: Drop enable/disable lock (Myron Stowe) [1583983]
  - [pci] PCI: pciehp: Enable/disable exclusively from IRQ thread (Myron Stowe) [1583983]
  - [pci] PCI: pciehp: Track enable/disable status (Myron Stowe) [1583983]
  - [pci] PCI: pciehp: Publish to user space last on probe (Myron Stowe) [1583983]
  - [pci] PCI: hotplug: Demidlayer registration with the core (Myron Stowe) [1583983]
  - [pci] PCI: pciehp: Drop slot workqueue (Myron Stowe) [1583983]
  - [pci] PCI: pciehp: Handle events synchronously (Myron Stowe) [1583983]
  - [pci] PCI: pciehp: Stop blinking on slot enable failure (Myron Stowe) [1583983]
  - [pci] PCI: pciehp: Convert to threaded polling (Myron Stowe) [1583983]
  - [pci] PCI: pciehp: Convert to threaded IRQ (Myron Stowe) [1583983]
  - [pci] PCI: pciehp: Document struct slot and struct controller (Myron Stowe) [1583983]
  - [pci] PCI: pciehp: Declare pciehp_unconfigure_device() void (Myron Stowe) [1583983]
  - [pci] PCI: pciehp: Drop unnecessary NULL pointer check (Myron Stowe) [1583983]
  - [pci] PCI: pciehp: Fix unprotected list iteration in IRQ handler (Myron Stowe) [1583983]
  - [pci] PCI: pciehp: Fix use-after-free on unplug (Myron Stowe) [1583983]
  - [pci] PCI: hotplug: Don't leak pci_slot on registration failure (Myron Stowe) [1583983]
  - [pci] PCI: hotplug: Delete skeleton driver (Myron Stowe) [1583983]
  - [netdrv] be2net: Use Kconfig flag to support for enabling/disabling adapters (Petr Oros) [1611768]
  - [acpi] ACPICA: Reference Counts: increase max to 0x4000 for large servers (Frank Ramsay) [1618760]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-13.el8]
changelog:
  - [mailbox] mailbox: PCC: handle parse error (David Arcari) [1630382]
  - [hv] vmbus: don't return values for uninitalized channels (Vitaly Kuznetsov) [1617954]
  - [mm] kernel/memremap, kasan: make ZONE_DEVICE with work with KASAN (Bill O'Donnell) [1629578]
  - [mm] mm: fix BUG_ON() in vmf_insert_pfn_pud() from VM_MIXEDMAP removal (Jeff Moyer) [1622171]
  - [mm] dax: remove VM_MIXEDMAP for fsdax and device dax (Jeff Moyer) [1622171]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-14.el8]
changelog:
  - [mm] mm: get rid of vmacache_flush_all() entirely (Waiman Long) [1631297] {CVE-2018-17182}
  - [mm] mm, vmacache: hash addresses based on pmd (Waiman Long) [1631297] {CVE-2018-17182}
  - [mm] mm: Allocate the mm_cpumask (mm->cpu_bitmap) dynamically based on nr_cpu_ids (Waiman Long) [1631297] {CVE-2018-17182}
  - [infiniband] IB/hfi1: Invalid NUMA node information can cause a divide by zero (Alex Estrin) [1622222]
  - [nvdimm] libnvdimm: Export max available extent (Jeff Moyer) [1627874]
  - [nvdimm] libnvdimm: Use max contiguous area for namespace size (Jeff Moyer) [1627874]
  - [netdrv] ice: Fix and update driver version string (Jonathan Toppins) [1611786]
  - [netdrv] ice: Introduce SERVICE_DIS flag and service routine functions (Jonathan Toppins) [1611786]
  - [netdrv] ice: Enable VSI Rx/Tx pruning only when VLAN 0 is active (Jonathan Toppins) [1611786]
  - [netdrv] ice: Enable firmware logging during device initialization (Jonathan Toppins) [1611786]
  - [netdrv] ice: Implement ice_bridge_getlink and ice_bridge_setlink (Jonathan Toppins) [1611786]
  - [netdrv] ice: Add support for Tx hang, Tx timeout and malicious driver detection (Jonathan Toppins) [1611786]
  - [netdrv] ice: Clean up register file (Jonathan Toppins) [1611786]
  - [netdrv] ice: Implement handlers for ethtool PHY/link operations (Jonathan Toppins) [1611786]
  - [netdrv] ice: Refactor VSI allocation, deletion and rebuild flow (Jonathan Toppins) [1611786]
  - [netdrv] ice: Refactor switch rule management structures and functions (Jonathan Toppins) [1611786]
  - [netdrv] ice: Code optimization for ice_fill_sw_rule() (Jonathan Toppins) [1611786]
  - [netdrv] ice: Prevent control queue operations during reset (Jonathan Toppins) [1611786]
  - [netdrv] ice: Update request resource command to latest specification (Jonathan Toppins) [1611786]
  - [netdrv] ice: Updates to Tx scheduler code (Jonathan Toppins) [1611786]
  - [netdrv] ice: Rework flex descriptor programming (Jonathan Toppins) [1611786]
  - [netdrv] net/mlx5: Fix SQ offset in QPs with small RQ (Alaa Hleihel) [1623367]
  - [x86] x86/spec_ctrl: Make IBRS code work with SSBD mitigation (Waiman Long) [1565180]
  - [x86] x86/spec_ctrl: Auto-enable IBRS on Skylake (Waiman Long) [1565180]
  - [x86] x86/spec_ctrl: Extend spectre_v2 boot option to support IBRS (Waiman Long) [1565180]
  - [x86] x86/spec_ctrl: Boot time IBRS initialization (Waiman Long) [1565180]
  - [x86] x86/spec_ctrl: Add IBRS code to the 64-bit assembly entry code (Waiman Long) [1565180]
  - [x86] x86/cpufeatures: Increase NCAPINTS for future extension (Waiman Long) [1565180]
  - [netdrv] ice: Trivial formatting fixes (Jonathan Toppins) [1611783]
  - [netdrv] ice: Change struct members from bool to u8 (Jonathan Toppins) [1611783]
  - [netdrv] ice: Fix potential return of uninitialized value (Jonathan Toppins) [1611783]
  - [netdrv] ice: Fix a few null pointer dereference issues (Jonathan Toppins) [1611783]
  - [netdrv] ice: Update to interrupts enabled in OICR (Jonathan Toppins) [1611783]
  - [netdrv] ice: Set VLAN flags correctly (Jonathan Toppins) [1611783]
  - [netdrv] ice: Use order_base_2 to calculate higher power of 2 (Jonathan Toppins) [1611783]
  - [netdrv] ice: Fix bugs in control queue processing (Jonathan Toppins) [1611783]
  - [netdrv] ice: Clean control queues only when they are initialized (Jonathan Toppins) [1611783]
  - [netdrv] ice: Report stats for allocated queues via ethtool stats (Jonathan Toppins) [1611783]
  - [netdrv] ice: Cleanup magic number (Jonathan Toppins) [1611783]
  - [netdrv] ice: Remove unnecessary node owner check (Jonathan Toppins) [1611783]
  - [netdrv] ice: Fix multiple static analyser warnings (Jonathan Toppins) [1611783]
  - [virt] KVM: VMX: fixes for vmentry_l1d_flush module parameter (Waiman Long) [1616248] {CVE-2018-15572}
  - [virt] KVM: x86: SVM: Call x86_spec_ctrl_set_guest/host() with interrupts disabled (Waiman Long) [1616248] {CVE-2018-15572}
  - [virt] x86/kvm/vmx: Fix coding style in vmx_setup_l1d_flush() (Waiman Long) [1616248] {CVE-2018-15572}
  - [x86] x86/speculation: Support Enhanced IBRS on future CPUs (Waiman Long) [1614144]
  - [x86] x86/speculation: Protect against userspace-userspace spectreRSB (Waiman Long) [1616248] {CVE-2018-15572}
  - [x86] x86/speculation: Remove SPECTRE_V2_IBRS in enum spectre_v2_mitigation (Waiman Long) [1616248] {CVE-2018-15572}
  - [cpufreq] cpufreq: Fix a circular lock dependency problem (Waiman Long) [1599154]
  - [kernel] cpu/hotplug: Add a cpus_read_trylock() function (Waiman Long) [1599154]
  - [virt] xen/spinlock: Don't use pvqspinlock if only 1 vCPU (Waiman Long) [1618486]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-15.el8]
changelog:
  - [kernel] locking/rwsem: Make owner store task pointer of last owning reader (Waiman Long) [1631842]
  - [kernel] locking/rwsem: Exit read lock slowpath if queue empty & no writer (Waiman Long) [1631842]
  - [x86] x86/microcode: Update the new microcode revision unconditionally (Prarit Bhargava) [1630931]
  - [x86] x86/microcode: Make sure boot_cpu_data.microcode is up-to-date (Prarit Bhargava) [1630931]
  - [arm64] arm64: tlb: Provide forward declaration of tlb_flush() before including tlb.h (Waiman Long) [1630521]
  - [x86] x86/mm: Only use tlb_remove_table() for paravirt (Waiman Long) [1630521]
  - [mm] mm: mmu_notifier fix for tlb_end_vma (Waiman Long) [1630521]
  - [mm] mm/tlb, x86/mm: Support invalidating TLB caches for RCU_TABLE_FREE (Waiman Long) [1630521]
  - [mm] mm/tlb: Remove tlb_remove_table() non-concurrent condition (Waiman Long) [1630521]
  - [mm] mm: move tlb_table_flush to tlb_flush_mmu_free (Waiman Long) [1630521]
  - [kernel] clocksource: Revert Remove kthread (Waiman Long) [1628402]
  - [cpuidle] cpuidle: menu: Retain tick when shallow state is selected (Waiman Long) [1628402]
  - [cpufreq] cpufreq: governor: Avoid accessing invalid governor_data (Waiman Long) [1628402]
  - [cpuidle] cpuidle: menu: Handle stopped tick more aggressively (Waiman Long) [1628402]
  - [kernel] sched: idle: Avoid retaining the tick when it has been stopped (Waiman Long) [1628402]
  - [net] netfilter: xt_hashlimit: do not crash when reading proc file (Florian Westphal) [1630131]
  - [x86] x86/boot/KASLR: Skip specified number of 1GB huge pages when doing physical randomization (KASLR) (Baoquan He) [1564824]
  - [x86] x86/boot/KASLR: Add two new functions for 1GB huge pages handling (Baoquan He) [1564824]
  - [mfd] mfd: intel-lpss: Add Ice Lake PCI IDs (Gopal Tiwari) [1483477]
  - [mmc] mmc: sdhci-pci: Add support for Intel ICP (Gopal Tiwari) [1483496]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-16.el8]
changelog:
  - [powerpc] KVM: PPC: Book3S HV: Don't use compound_order to determine host mapping size (David Gibson) [1625860]
  - [virt] arm64: KVM: Remove pgd_lock (Wei Huang) [1627474]
  - [virt] KVM: Remove obsolete kvm_unmap_hva notifier backend (Wei Huang) [1627474]
  - [virt] arm64: KVM: Only force FPEXC32_EL2.EN if trapping FPSIMD (Wei Huang) [1627474]
  - [virt] KVM: arm/arm64: Clean dcache to PoC when changing PTE due to CoW (Wei Huang) [1627474]
  - [virt] KVM: arm/arm64: Skip updating PTE entry if no change (Wei Huang) [1627474]
  - [virt] KVM: arm/arm64: Skip updating PMD entry if no change (Wei Huang) [1627474]
  - [virt] KVM: arm/arm64: vgic: Move DEBUG_SPINLOCK_BUG_ON to vgic.h (Wei Huang) [1627474]
  - [virt] KVM: arm/arm64: vgic: Do not use spin_lock_irqsave/restore with irq disabled (Wei Huang) [1627474]
  - [virt] KVM: arm: vgic-v3: Add support for ICC_SGI0R and ICC_ASGI1R accesses (Wei Huang) [1627474]
  - [virt] KVM: arm64: vgic-v3: Add support for ICC_SGI0R_EL1 and ICC_ASGI1R_EL1 accesses (Wei Huang) [1627474]
  - [virt] KVM: arm/arm64: vgic-v3: Add core support for Group0 SGIs (Wei Huang) [1627474]
  - [virt] KVM: arm64: Remove non-existent AArch32 ICC_SGI1R encoding (Wei Huang) [1627474]
  - [virt] KVM: arm/arm64: Fix lost IRQs from emulated physcial timer when blocked (Wei Huang) [1627474]
  - [virt] KVM: arm/arm64: Fix potential loss of ptimer interrupts (Wei Huang) [1627474]
  - [virt] KVM: arm/arm64: vgic: Fix possible spectre-v1 write in vgic_mmio_write_apr() (Wei Huang) [1627474]
  - [virt] KVM: arm/arm64: vgic: Update documentation of the GIC devices wrt IIDR (Wei Huang) [1627474]
  - [virt] KVM: arm/arm64: vgic: Let userspace opt-in to writable v2 IGROUPR (Wei Huang) [1627474]
  - [virt] KVM: arm/arm64: vgic: Allow configuration of interrupt groups (Wei Huang) [1627474]
  - [virt] KVM: arm/arm64: vgic: Return error on incompatible uaccess GICD_IIDR writes (Wei Huang) [1627474]
  - [virt] KVM: arm/arm64: vgic: Permit uaccess writes to return errors (Wei Huang) [1627474]
  - [virt] KVM: arm/arm64: vgic: Signal IRQs using their configured group (Wei Huang) [1627474]
  - [virt] KVM: arm/arm64: vgic: Add group field to struct irq (Wei Huang) [1627474]
  - [virt] KVM: arm/arm64: vgic: GICv2 IGROUPR should read as zero (Wei Huang) [1627474]
  - [virt] KVM: arm/arm64: vgic: Keep track of implementation revision (Wei Huang) [1627474]
  - [virt] KVM: arm/arm64: vgic: Define GICD_IIDR fields for GICv2 and GIv3 (Wei Huang) [1627474]
  - [virt] arm64: KVM: Cleanup tpidr_el2 init on non-VHE (Wei Huang) [1627474]
  - [virt] KVM: arm/arm64: vgic-debug: Show LPI status (Wei Huang) [1627474]
  - [virt] KVM: arm64: vgic-its: Remove VLA usage (Wei Huang) [1627474]
  - [virt] KVM: arm/arm64: Fix vgic init race (Wei Huang) [1627474]
  - [virt] KVM: arm/arm64: Enable adaptative WFE trapping (Wei Huang) [1627474]
  - [virt] KVM: arm/arm64: Remove unnecessary CMOs when creating HYP page tables (Wei Huang) [1627474]
  - [virt] KVM: arm/arm64: Stop using the kernel's (pmd, pud, pgd)_populate helpers (Wei Huang) [1627474]
  - [virt] KVM: arm/arm64: Consolidate page-table accessors (Wei Huang) [1627474]
  - [virt] arm64: KVM: Avoid marking pages as XN in Stage-2 if CTR_EL0.DIC is set (Wei Huang) [1627474]
  - [tools] radix tree test suite: Enable ubsan (Waiman Long) [1630244]
  - [tools] radix tree test suite: Fix compilation (Waiman Long) [1630244]
  - [block] blk-wbt: don't maintain inflight counts if disabled (Ming Lei) [1622790]
  - [block] blk-wbt: fix has-sleeper queueing check (Ming Lei) [1622790]
  - [block] blk-wbt: use wq_has_sleeper() for wq active check (Ming Lei) [1622790]
  - [block] blk-wbt: move disable check into get_limit() (Ming Lei) [1622790]
  - [block] block/DAC960.c: make some arrays static const, shrinks object (Ming Lei) [1622790]
  - [block] blk-mq: sync the update nr_hw_queues with (Ming Lei) [1617959]
  - [block] blk-mq: init hctx sched after update ctx and hctx mapping (Ming Lei) [1617959]
  - [block] block: remove duplicate initialization (Ming Lei) [1622790]
  - [block] tracing/blktrace: Fix to allow setting same value (Ming Lei) [1622790]
  - [block] pktcdvd: fix setting of 'ret' error return for a few cases (Ming Lei) [1622790]
  - [block] block: change return type to bool (Ming Lei) [1622790]
  - [block] block, bfq: return nbytes and not zero from struct cftype (Ming Lei) [1622790]
  - [block] block, bfq: improve code of bfq_bfqq_charge_time (Ming Lei) [1622790]
  - [block] block, bfq: reduce write overcharge (Ming Lei) [1622790]
  - [block] block, bfq: always update the budget of an entity when needed (Ming Lei) [1622790]
  - [block] block, bfq: readd missing reset of parent-entity service (Ming Lei) [1622790]
  - [block] block: don't warn for flush on read-only device (Ming Lei) [1622809]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-17.el8]
changelog:
  - [s390] s390/crypto: Fix return code checking in cbc_paes_crypt() (Philipp Rudo) [1633266]
  - [drm] amd/display/dc/basics/logger.c: fix build error with CONFIG_FORTIFY_SOURCE=y ("Herton R. Krzesinski") [1548068]
  - [acpi] ACPICA: AML Parser: skip opcodes that open a scope upon parse failure (Jeremy Linton) [1609885]
  - [acpi] ACPICA: ACPICA: add status check for acpi_hw_read before assigning return value (Jeremy Linton) [1609885]
  - [acpi] ACPICA: AML Parser: ignore all exceptions resulting from incorrect AML during table load (Jeremy Linton) [1609885]
  - [rpmspec] spec: Add missing BuildRequires for bpftool (Jiri Olsa) [1632756]
  - [powerpc] KVM: PPC: Avoid marking DMA-mapped pages dirty in real mode (David Gibson) [1628412]
  - [powerpc] powerpc/powernv/ioda: Allocate indirect TCE levels on demand (David Gibson) [1628412]
  - [powerpc] powerpc/powernv: Rework TCE level allocation (David Gibson) [1628412]
  - [powerpc] powerpc/powernv: Add indirect levels to it_userspace (David Gibson) [1628412]
  - [powerpc] KVM: PPC: Make iommu_table::it_userspace big endian (David Gibson) [1628412]
  - [powerpc] powerpc/powernv: Move TCE manupulation code to its own file (David Gibson) [1628412]
  - [net] net_sched: fix NULL pointer dereference when delete tcindex filter (Andrea Claudi) [1627648]
  - [net] net_sched: Fix missing res info when create new tc_index filter (Andrea Claudi) [1627648]
  - [samples] samples/bpf: xdpsock: order memory on AArch64 (Jesper Brouer) [1615959]
  - [samples] samples/bpf: xdp_redirect_cpu load balance like Suricata (Jesper Brouer) [1615959]
  - [samples] samples/bpf: add Paul Hsieh's (LGPL 2.1) hash function SuperFastHash (Jesper Brouer) [1615959]
  - [samples] samples/bpf: xdp_redirect_cpu handle parsing of double VLAN tagged packets (Jesper Brouer) [1615959]
  - [samples] samples/bpf: all XDP samples should unload xdp/bpf prog on SIGTERM (Jesper Brouer) [1615959]
  - [samples] samples/bpf: xdp_rxq_info action XDP_TX must adjust MAC-addrs (Jesper Brouer) [1615959]
  - [samples] samples/bpf: extend xdp_rxq_info to read packet payload (Jesper Brouer) [1615959]
  - [powerpc] KVM: PPC: Book3S HV: Use correct pagesize in kvm_unmap_radix() (David Gibson) [1625498]
  - [net] igmp: fix incorrect unsolicit report count after link down and up (Hangbin Liu) [1625538]
  - [net] igmp: fix incorrect unsolicit report count when join group (Hangbin Liu) [1625538]
  - [netdrv] cxgb4: update 1.20.8.0 as the latest firmware supported (Arjun Vynipadath) [1622555]
  - [virt] svm: nested virt support off by default (Bandan Das) [1571993]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-18.el8]
changelog:
  - [scsi] scsi: ipr: System hung while dlpar adding primary ipr adapter back (Steve Best) [1633217]
  - [target] scsi: iscsi: target: Don't use stack buffer for scatterlist (Maurizio Lombardi) [1631342]
  - [rpmspec] Forward port weak-modules support from RHEL 7 to RHEL 8 ("Herton R. Krzesinski") [1596884]
  - [fs] xfs: Close race between direct IO and xfs_break_layouts() (Eric Sandeen) [1622191]
  - [fs] xfs: remove unused iolock arg from xfs_break_dax_layouts (Eric Sandeen) [1622191]
  - [fs] ext4: Close race between direct IO and ext4_break_layouts() (Eric Sandeen) [1616303]
  - [fs] ext4: handle layout changes to pinned DAX mappings (Eric Sandeen) [1614154]
  - [fs] dax: dax_layout_busy_page() warn on !exceptional (Eric Sandeen) [1614154]
  - [fs] dax: mark tech preview (Eric Sandeen) [1627455]
  - [mm] usercopy: Allow boot cmdline disabling of hardening (Christoph von Recklinghausen) [1589928]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-19.el8]
changelog:
  - [s390] s390: detect etoken facility (Thomas Huth) [1634069]
  - [s390] s390/lib: use expoline for all bcr instructions (Thomas Huth) [1634069]
  - [documentation] vm.txt: Adding 'nr_hugepages_mempolicy' parameter description (Prashant Dhamdhere) [1626547]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-20.el8]
changelog:
  - [netdrv] ibmvnic: Include missing return code checks in reset function (Steve Best) [1633553]
  - [netdrv] ibmvnic: Update firmware error reporting with cause string (Steve Best) [1633553]
  - [netdrv] ibmvnic: Remove code to request error information (Steve Best) [1633553]
  - [s390] s390/qeth: remove duplicated carrier state tracking (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: clean up drop conditions for received cmds (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: re-indent qeth_check_ipa_data() (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: consume local address events (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: remove various redundant code (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: remove CARD_FROM_CDEV helper (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: pass card pointer in iob callback (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: re-use qeth_notify_skbs() (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: remove additional skb refcount (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: replace open-coded skb_queue_walk() (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: on gdev release, reset drvdata (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: fix discipline unload after setup error (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: use DEFINE_MUTEX for qeth_mod_mutex (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: convert layer attribute to enum (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: reduce 0-initializing when building IPA cmds (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: fine-tune spinlocks (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: fix typo in return value (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: invoke softirqs after napi_schedule() (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: uninstall IRQ handler on device removal (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: remove qeth_hdr_chk_and_bounce() (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: speed up TSO transmission (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: prepare for copy-free TSO transmission (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: check size of required HW header cache object (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: fix up protocol headers early (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: limit csum offload erratum to L3 devices (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: remove qeth_get_elements_no() (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: remove unused L3 xmit code (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: run non-offload L3 traffic over common xmit path (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: move L2 xmit code to core module (Hendrik Brueckner) [1633841]
  - [s390] s390/qdio: reset old sbal_state flags (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: don't dump past end of unknown HW header (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: use vzalloc for QUERY OAT buffer (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: switch on SG by default for IQD devices (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: indicate error when netdev allocation fails (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: use true and false for boolean values (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: don't restrict qeth_card to DMA memory (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: clean up card initialization (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: do basic setup for data channel (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: use qeth_setup_ccw() to set up all CCWs (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: reduce hard-coded access to ccw channels (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: extract helper for MPC protocol type (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: speed up L2 IQD xmit (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: add support for constrained HW headers (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: merge linearize-check into HW header construction (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: add statistics for consumed buffer elements (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: use core MTU range checking (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: simplify max MTU handling (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: don't cache HW port number (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: allocate netdevice early (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: remove redundant netif_carrier_ok() checks (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: reset layer2 attribute on layer switch (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: fix race in used-buffer accounting (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: speed-up IPv4 OSA xmit (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: speed-up L3 IQD xmit (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: add a L3 xmit wrapper (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: increase GSO max size for eligible L3 devices (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: clean up exported symbols (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: consolidate ccwgroup driver definition (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: clean up Output Queue selection (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: fine-tune RX modesetting (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: remove unused buffer->aob pointer (Hendrik Brueckner) [1633841]
  - [s390] s390/qeth: various buffer management cleanups (Hendrik Brueckner) [1633841]
  - [powerpc] powerpc: Avoid code patching freed init sections (Steve Best) [1633545]
  - [powerpc] powerpc/tm: Fix userspace r13 corruption (Steve Best) [1633543]
  - [powerpc] powerpc/tm: Avoid possible userspace r1 corruption on reclaim (Steve Best) [1633543]
  - [drm] drm/i915/cfl: Add a new CFL PCI ID (Rob Clark) [1626883]
  - [drm] drm/i915/aml: Introducing Amber Lake platform (Rob Clark) [1626883]
  - [drm] drm/i915/whl: Introducing Whiskey Lake platform (Rob Clark) [1626883]
  - [char] ipmi: Move BT capabilities detection to the detect call (Frank Ramsay) [1618774]
  - [char] ipmi: Rework SMI registration failure (Frank Ramsay) [1618774]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-21.el8]
changelog:
  - [s390] s390/sclp: Allow to request adapter reset (Philipp Rudo) [1635273]
  - [char] ipmi: Fix NULL pointer dereference in ssif_probe (Tony Camuso) [1635366]
  - [char] ipmi: Fix I2C client removal in the SSIF driver (Tony Camuso) [1635366]
  - [char] ipmi: kcs_bmc: don't change device name (Tony Camuso) [1635366]
  - [kernel] timers: Clear timer_base::must_forward_clk with timer_base::lock held (Waiman Long) [1632820]
  - [pci] switchtec: Fix Spectre v1 vulnerability (Waiman Long) [1632820]
  - [kernel] cpu/hotplug: Prevent state corruption on error rollback (Waiman Long) [1632820]
  - [kernel] cpu/hotplug: Adjust misplaced smb() in cpuhp_thread_fun() (Waiman Long) [1632820]
  - [base] memory_hotplug: fix kernel_panic on offline page processing (Waiman Long) [1632820]
  - [mm] mm/hugetlb: filter out hugetlb pages if HUGEPAGE migration is not supported (Waiman Long) [1632820]
  - [lib] debugobjects: Make stack check warning more informative (Waiman Long) [1632820]
  - [fs] fs/dcache.c: fix kmemcheck splat at take_dentry_name_snapshot() (Waiman Long) [1632820]
  - [x86] x86/process: Don't mix user/kernel regs in 64bit __show_regs() (Waiman Long) [1632820]
  - [x86] x86/dumpstack: Don't dump kernel memory based on usermode RIP (Waiman Long) [1632820]
  - [x86] x86: Avoid pr_cont() in show_opcodes() (Waiman Long) [1632820]
  - [x86] x86/entry/64: Wipe KASAN stack shadow before rewind_stack_do_exit() (Waiman Long) [1632820]
  - [x86] x86/speculation/l1tf: Increase l1tf memory limit for Nehalem+ (Waiman Long) [1632820]
  - [x86] x86/spectre: Add missing family 6 check to microcode check (Waiman Long) [1632820]
  - [x86] x86/nmi: Fix NMI uaccess race against CR3 switching (Waiman Long) [1632820]
  - [x86] x86/vdso: Fix lsl operand order (Waiman Long) [1632820]
  - [x86] x86/vdso: Fix vDSO build if a retpoline is emitted (Waiman Long) [1632820]
  - [x86] x86/speculation/l1tf: Suggest what to do on systems with too much RAM (Waiman Long) [1632820]
  - [x86] x86/speculation/l1tf: Fix off-by-one error when warning that system has too much RAM (Waiman Long) [1632820]
  - [x86] x86/speculation/l1tf: Fix overflow in l1tf_pfn_limit() on 32bit (Waiman Long) [1632820]
  - [x86] x86/speculation/l1tf: Exempt zeroed PTEs from inversion (Waiman Long) [1632820]
  - [x86] x86/mm/pti: Clear Global bit more aggressively (Waiman Long) [1632820]
  - [x86] x86/paravirt: Fix spectre-v2 mitigations for paravirt guests (Waiman Long) [1632820]
  - [target] scsi: target: iscsi: Use bin2hex instead of a re-implementation (Maurizio Lombardi) [1632184] {CVE-2018-14633}
  - [target] scsi: target: iscsi: Use hex2bin instead of a re-implementation (Maurizio Lombardi) [1632184] {CVE-2018-14633}


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-22.el8]
changelog:
  - [powerpc] powerpc/pkeys: Fix reading of ibm, processor-storage-keys property (Steve Best) [1633551]
  - [powerpc] powerpc/pseries: Remove unneeded uses of dlpar work queue (Steve Best) [1633544]
  - [powerpc] powerpc/pseries: Remove prrn_work workqueue (Steve Best) [1633544]
  - [pci] ACPI / hotplug / PCI: Don't scan for non-hotplug bridges if slot is not bridge (Myron Stowe) [1634816]
  - [pci] PCI: Fix enabling of PASID on RC integrated endpoints (Myron Stowe) [1634816]
  - [pci] IB/hfi1,PCI: Allow bus reset while probing (Myron Stowe) [1634816]
  - [pci] PCI: Fix faulty logic in pci_reset_bus() (Myron Stowe) [1634816]
  - [pci] PCI: pciehp: Fix hot-add vs powerfault detection order (Myron Stowe) [1634816]
  - [pci] Revert "PCI: Add ACS quirk for Intel 300 series" (Myron Stowe) [1634816]
  - [powerpc] powerpc/numa: Use associativity if VPHN hcall is successful (Steve Best) [1633569]
  - [pci] PCI: vmd: White list for fast interrupt handlers (Myron Stowe) [1632816]
  - [pci] PCI: Add function 1 DMA alias quirk for Marvell 88SS9183 (Myron Stowe) [1632816]
  - [pci] PCI: Rename pci_try_reset_bus() to pci_reset_bus() (Myron Stowe) [1632816]
  - [pci] PCI: Deprecate pci_reset_bus() and pci_reset_slot() functions (Myron Stowe) [1632816]
  - [pci] PCI: Unify try slot and bus reset API (Myron Stowe) [1632816]
  - [pci] PCI: Hide pci_reset_bridge_secondary_bus() from drivers (Myron Stowe) [1632816]
  - [pci] IB/hfi1: Use pci_try_reset_bus() for initiating PCI Secondary Bus Reset (Myron Stowe) [1632816]
  - [pci] PCI: Handle error return from pci_reset_bridge_secondary_bus() (Myron Stowe) [1632816]
  - [pci] PCI/IOV: Tidy pci_sriov_set_totalvfs() (Myron Stowe) [1632816]
  - [pci] PCI: Enable PASID only if entire path supports End-End TLP prefixes (Myron Stowe) [1632816]
  - [pci] PCI: Expand documentation for pci_add_dma_alias() (Myron Stowe) [1632816]
  - [pci] PCI: Add DMA alias quirk for Microsemi Switchtec NTB (Myron Stowe) [1632816]
  - [pci] switchtec: Use generic PCI Vendor ID and Class Code (Myron Stowe) [1632816]
  - [pci] PCI: Make pci_get_rom_size() static (Myron Stowe) [1632816]
  - [pci] PCI: Add check code for last image indicator not set (Myron Stowe) [1632816]
  - [pci] PCI: Avoid accessing memory outside the ROM BAR (Myron Stowe) [1632816]
  - [pci] PCI: Make early dump functionality generic (Myron Stowe) [1632816]
  - [pci] PCI: Cleanup PCI_REBAR_CTRL_BAR_SHIFT handling (Myron Stowe) [1632816]
  - [pci] PCI: Restore resized BAR state on resume (Myron Stowe) [1632816]
  - [pci] PCI: Clean up resource allocation in devm_of_pci_get_host_bridge_resources() (Myron Stowe) [1632816]
  - [pci] PCI: Add ACS Redirect disable quirk for Intel Sunrise Point (Myron Stowe) [1632816]
  - [pci] PCI: Add device-specific ACS Redirect disable infrastructure (Myron Stowe) [1632816]
  - [pci] PCI: Convert device-specific ACS quirks from NULL termination to ARRAY_SIZE (Myron Stowe) [1632816]
  - [pci] PCI: Add "pci=disable_acs_redir=" parameter for peer-to-peer support (Myron Stowe) [1632816]
  - [pci] PCI: Allow specifying devices using a base bus and path of devfns (Myron Stowe) [1632816]
  - [pci] PCI: Make specifying PCI devices in kernel parameters reusable (Myron Stowe) [1632816]
  - [pci] PCI: Hide ACS quirk declarations inside PCI core (Myron Stowe) [1632816]
  - [pci] PCI: Document ACPI description of PCI host bridges (Myron Stowe) [1632816]
  - [pci] PCI/MSI: Set IRQCHIP_ONESHOT_SAFE for PCI-MSI irqchips (Myron Stowe) [1632816]
  - [pci] PCI: Limit config space size for Netronome NFP5000 (Myron Stowe) [1632816]
  - [pci] PCI: Add PCI_DEVICE_DATA() macro to fully describe device ID entry (Myron Stowe) [1632816]
  - [pci] PCI: Unify PCI and normal DMA direction definitions (Myron Stowe) [1632816]
  - [pci] PCI: Use IRQF_ONESHOT if pci_request_irq() called with no handler (Myron Stowe) [1632816]
  - [pci] PCI: Call dma_debug_add_bus() for pci_bus_type from PCI core (Myron Stowe) [1632816]
  - [pci] PCI: Mark fall-through switch cases before enabling -Wimplicit-fallthrough (Myron Stowe) [1632816]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-23.el8]
changelog:
  - [dma] driver/dma/ioat: Call del_timer_sync() without holding prep_lock (Waiman Long) [1607654]
  - [netdrv] bnxt_en: Fix VF mac address regression (Jonathan Toppins) [1635846]
  - [netdrv] bnxt_en: Do not adjust max_cp_rings by the ones used by RDMA (Jonathan Toppins) [1635846]
  - [netdrv] bnxt_en: Clean up unused functions (Jonathan Toppins) [1635846]
  - [fs] fsnotify: fix ignore mask logic in fsnotify() (Lukas Czerner) [1635537]
  - [net] net/af_iucv: locate IUCV header via skb_network_header() (Philipp Rudo) [1635332]
  - [net] net/af_iucv: drop inbound packets with invalid flags (Philipp Rudo) [1635332]
  - [net] net/af_iucv: fix skb handling on HiperTransport xmit error (Philipp Rudo) [1635332]
  - [hid] HID: i2c-hid: Fix flooded incomplete report after S3 on Rayd touchscreen (David Arcari) [1635746]
  - [i2c] i2c: core: ACPI: Make acpi_gsb_i2c_read_bytes() check i2c_transfer return value (David Arcari) [1635746]
  - [i2c] i2c: designware: Re-init controllers with pm_disabled set on resume (David Arcari) [1635746]
  - [i2c] i2c: core: ACPI: Properly set status byte to 0 for multi-byte writes (David Arcari) [1635746]
  - [fs] fs/quota: Fix spectre gadget in do_quotactl (Lukas Czerner) [1635521]
  - [fs] xfs: fix error handling in xfs_bmap_extents_to_btree (Brian Foster) [1633171]
  - [fs] xfs: remove invalid log recovery first/last cycle check (Brian Foster) [1633171]
  - [fs] xfs: validate inode di_forkoff (Brian Foster) [1633171]
  - [fs] xfs: skip delalloc COW blocks in xfs_reflink_end_cow (Brian Foster) [1633171]
  - [fs] xfs: don't treat unknown di_flags2 as corruption in scrub (Brian Foster) [1633171]
  - [fs] xfs: remove duplicated include from alloc.c (Brian Foster) [1633171]
  - [fs] xfs: don't bring in extents in xfs_bmap_punch_delalloc_range (Brian Foster) [1633171]
  - [fs] xfs: fix transaction leak in xfs_reflink_allocate_cow() (Brian Foster) [1633171]
  - [fs] xfs: avoid lockdep false positives in xfs_trans_alloc (Brian Foster) [1633171]
  - [fs] xfs: refactor xfs_buf_log_item reference count handling (Brian Foster) [1633171]
  - [fs] xfs: clean up xfs_trans_brelse() (Brian Foster) [1633171]
  - [fs] xfs: don't unlock invalidated buf on aborted tx commit (Brian Foster) [1633171]
  - [fs] xfs: remove last of unnecessary xfs_defer_cancel() callers (Brian Foster) [1633171]
  - [fs] xfs: don't crash the vfs on a garbage inline symlink (Brian Foster) [1633171]
  - [fs] iomap: set page dirty after partial delalloc on mkwrite (Brian Foster) [1633171]
  - [fs] xfs: sanity check ag header values in xrep_calc_ag_resblks (Brian Foster) [1633171]
  - [fs] xfs: recalculate summary counters at mount time if icount is bad (Brian Foster) [1633171]
  - [fs] xfs: fix a null pointer dereference in xfs_bmap_extents_to_btree (Brian Foster) [1633171]
  - [fs] xfs: remove b_last_holder & associated macros (Brian Foster) [1633171]
  - [fs] xfs: repair the AGI (Brian Foster) [1633171]
  - [fs] xfs: repair the AGFL (Brian Foster) [1633171]
  - [fs] xfs: repair the AGF (Brian Foster) [1633171]
  - [fs] xfs: remove dead error handling code in xfs_dquot_disk_alloc() (Brian Foster) [1633171]
  - [fs] xfs: use WRITE_ONCE to update if_seq (Brian Foster) [1633171]
  - [fs] xfs: fix a comment in xfs_log_reserve (Brian Foster) [1633171]
  - [fs] xfs: only validate summary counts on primary superblock (Brian Foster) [1633171]
  - [fs] xfs: substitute spaces with tabs (Brian Foster) [1633171]
  - [fs] xfs: fold dfops into the transaction (Brian Foster) [1633171]
  - [fs] xfs: always defer agfl block frees (Brian Foster) [1633171]
  - [fs] xfs: pass transaction to xfs_defer_add() (Brian Foster) [1633171]
  - [fs] xfs: replace xfs_defer_ops ->dop_pending with on-stack list (Brian Foster) [1633171]
  - [fs] xfs: cancel dfops on xfs_defer_finish() error (Brian Foster) [1633171]
  - [fs] xfs: clean out superfluous dfops dop params/vars (Brian Foster) [1633171]
  - [fs] xfs: drop dop param from xfs_defer_op_type ->finish_item() callback (Brian Foster) [1633171]
  - [fs] xfs: automatic dfops inode relogging (Brian Foster) [1633171]
  - [fs] xfs: automatic dfops buffer relogging (Brian Foster) [1633171]
  - [fs] xfs: add missing defer ijoins for held inodes (Brian Foster) [1633171]
  - [fs] xfs: replace dop_low with transaction flag (Brian Foster) [1633171]
  - [fs] xfs: pass transaction to dfops reset/move helpers (Brian Foster) [1633171]
  - [fs] xfs: remove unused __xfs_defer_cancel() internal helper (Brian Foster) [1633171]
  - [fs] xfs: use transaction for intent recovery instead of raw dfops (Brian Foster) [1633171]
  - [fs] xfs: refactor internal dfops initialization (Brian Foster) [1633171]
  - [fs] xfs: check da node magic in _node_lookup_int (Brian Foster) [1633171]
  - [fs] xfs: use a local variable for magic number in xfs_da3_node_lookup_int (Brian Foster) [1633171]
  - [fs] xfs: refactor log recovery check (Brian Foster) [1633171]
  - [fs] xfs: move extent busy tree initialization to xfs_initialize_perag (Brian Foster) [1633171]
  - [fs] xfs: avoid COW fork extent lookups in writeback if the fork didn't change (Brian Foster) [1633171]
  - [fs] xfs: maintain a sequence count for inode fork manipulations (Brian Foster) [1633171]
  - [fs] xfs: check for unknown v5 feature bits in superblock write verifier (Brian Foster) [1633171]
  - [fs] xfs: verify icount in superblock write (Brian Foster) [1633171]
  - [fs] libxfs: add more bounds checking to sb sanity checks (Brian Foster) [1633171]
  - [fs] xfs: refactor superblock verifiers (Brian Foster) [1633171]
  - [fs] xfs: refactor the xrep_extent_list into xfs_bitmap (Brian Foster) [1633171]
  - [fs] xfs: introduce a new xfs_inode_has_cow_data helper (Brian Foster) [1633171]
  - [fs] xfs: remove the xfs_ifork_t typedef (Brian Foster) [1633171]
  - [fs] xfs: simplify xfs_idata_realloc (Brian Foster) [1633171]
  - [fs] xfs: remove if_real_bytes (Brian Foster) [1633171]
  - [fs] xfs: move the repair extent list into its own file (Brian Foster) [1633171]
  - [fs] xfs: pass transaction lock while setting up agresv on cyclic metadata (Brian Foster) [1633171]
  - [fs] xfs: remove deprecated barrier/nobarrier mount (Brian Foster) [1633171]
  - [fs] xfs: clean up IRELE/iput callsites (Brian Foster) [1633171]
  - [fs] xfs: kill IHOLD (Brian Foster) [1633171]
  - [fs] xfs: bypass final dfops roll in trans commit path (Brian Foster) [1633171]
  - [fs] xfs: drop unnecessary xfs_defer_finish() dfops parameter (Brian Foster) [1633171]
  - [fs] xfs: remove unnecessary dfops init calls in xattr code (Brian Foster) [1633171]
  - [fs] xfs: remove all boilerplate defer init/finish code (Brian Foster) [1633171]
  - [fs] xfs: use internal dfops during (b|c)ui recovery (Brian Foster) [1633171]
  - [fs] xfs: use internal dfops in attr code (Brian Foster) [1633171]
  - [fs] xfs: use internal dfops in cow blocks cancel (Brian Foster) [1633171]
  - [fs] xfs: support embedded dfops in transaction (Brian Foster) [1633171]
  - [fs] xfs: pack holes in xfs_defer_ops and xfs_trans (Brian Foster) [1633171]
  - [fs] xfs: reset dfops to initial state after finish (Brian Foster) [1633171]
  - [fs] xfs: remove unused deferred ops committed field (Brian Foster) [1633171]
  - [fs] xfs: make deferred processing safe for embedded dfops (Brian Foster) [1633171]
  - [fs] xfs: fix transaction leak on remote attr set/remove failure (Brian Foster) [1633171]
  - [fs] xfs: use ->t_dfops in log recovery intent processing (Brian Foster) [1633171]
  - [fs] xfs: pull up dfops from xfs_itruncate_extents() (Brian Foster) [1633171]
  - [fs] xfs: force summary counter recalc at next mount (Brian Foster) [1633171]
  - [fs] xfs: refactor unmount record write (Brian Foster) [1633171]
  - [fs] xfs: detect and fix bad summary counts at mount (Brian Foster) [1633171]
  - [fs] xfs: fix indentation and other whitespace problems in scrub/repair (Brian Foster) [1633171]
  - [fs] xfs: shorten struct xfs_scrub_context to struct xfs_scrub (Brian Foster) [1633171]
  - [fs] xfs: shorten xfs_repair_ prefix to xrep_ (Brian Foster) [1633171]
  - [fs] xfs: shorten xfs_scrub_ prefix (Brian Foster) [1633171]
  - [fs] xfs: clean up xfs_btree_del_cursor callers (Brian Foster) [1633171]
  - [fs] xfs: trivial xfs_btree_del_cursor cleanups (Brian Foster) [1633171]
  - [fs] xfs: return from _defer_finish with a clean transaction (Brian Foster) [1633171]
  - [fs] xfs: check leaf attribute block freemap in verifier (Brian Foster) [1633171]
  - [fs] libxfs: Fix a couple of sparse complaintis (Brian Foster) [1633171]
  - [fs] xfs: use swap macro in xfs_dir2_leafn_rebalance (Brian Foster) [1633171]
  - [fs] xfs_bmap_util: use swap macro (Brian Foster) [1633171]
  - [fs] xfs_attr_leaf: use swap macro in xfs_attr3_leaf_rebalance (Brian Foster) [1633171]
  - [fs] xfs: don't assume a left rmap when allocating a new rmap (Brian Foster) [1633171]
  - [fs] xfs: kill __xfs_buf_submit_common() (Brian Foster) [1633171]
  - [fs] xfs: combine (a)sync buffer submission apis (Brian Foster) [1633171]
  - [fs] xfs: use sync buffer I/O for sync delwri queue submission (Brian Foster) [1633171]
  - [fs] xfs: refactor buffer submission into a common helper (Brian Foster) [1633171]
  - [fs] xfs: remove xfs_defer_init() firstblock param (Brian Foster) [1633171]
  - [fs] xfs: use ->t_firstblock in inode inactivate (Brian Foster) [1633171]
  - [fs] xfs: use ->t_firstblock in extent swap (Brian Foster) [1633171]
  - [fs] xfs: use ->t_firstblock in reflink cow block cancel (Brian Foster) [1633171]
  - [fs] xfs: replace no-op firstblock init with ->t_firstblock (Brian Foster) [1633171]
  - [fs] xfs: use ->t_firstblock in dq alloc (Brian Foster) [1633171]
  - [fs] xfs: remove xfs_alloc_arg firstblock field (Brian Foster) [1633171]
  - [fs] xfs: remove xfs_btree_cur private firstblock field (Brian Foster) [1633171]
  - [fs] xfs: remove bmap format helpers firstblock params (Brian Foster) [1633171]
  - [fs] xfs: remove bmap extent add helper firstblock params (Brian Foster) [1633171]
  - [fs] xfs: remove xfs_bmalloca firstblock field (Brian Foster) [1633171]
  - [fs] xfs: use ->t_firstblock in bmap extent split (Brian Foster) [1633171]
  - [fs] xfs: remove bmap insert/collapse firstblock param (Brian Foster) [1633171]
  - [fs] xfs: remove xfs_bunmapi() firstblock param (Brian Foster) [1633171]
  - [fs] xfs: remove xfs_bmapi_write() firstblock param (Brian Foster) [1633171]
  - [fs] xfs: use ->t_firstblock in insert/collapse range (Brian Foster) [1633171]
  - [fs] xfs: use ->t_firstblock in xfs_bmapi_remap() (Brian Foster) [1633171]
  - [fs] xfs: use ->t_firstblock for all xfs_bunmapi() callers (Brian Foster) [1633171]
  - [fs] xfs: use ->t_firstblock for all xfs_bmapi_write() callers (Brian Foster) [1633171]
  - [fs] xfs: use ->t_firstblock in xattr ops (Brian Foster) [1633171]
  - [fs] xfs: use ->t_firstblock in attrfork add (Brian Foster) [1633171]
  - [fs] xfs: remove firstblock param from xfs dir ops (Brian Foster) [1633171]
  - [fs] xfs: use ->t_firstblock in dir ops (Brian Foster) [1633171]
  - [fs] xfs: add firstblock field to xfs_trans (Brian Foster) [1633171]
  - [fs] xfs: allow null firstblock in xfs_bmapi_write() when tp is null (Brian Foster) [1633171]
  - [fs] xfs: refactor dfops init to attach to transaction (Brian Foster) [1633171]
  - [fs] xfs: use ->t_dfops in reflink cow recover path (Brian Foster) [1633171]
  - [fs] xfs: use ->t_dfops in cancel cow blocks operation (Brian Foster) [1633171]
  - [fs] xfs: use ->t_dfops for rmap extent swap operations (Brian Foster) [1633171]
  - [fs] xfs: remove unused btree cursor bc_private.a.dfops field (Brian Foster) [1633171]
  - [fs] xfs: remove xfs_btree_cur bmbt dfops field (Brian Foster) [1633171]
  - [fs] xfs: remove dfops param from internal bmap extent helpers (Brian Foster) [1633171]
  - [fs] xfs: use ->t_dfops for collapse/insert range operations (Brian Foster) [1633171]
  - [fs] xfs: remove struct xfs_bmalloca dfops field (Brian Foster) [1633171]
  - [fs] xfs: remove xfs_bmapi_remap() dfops param (Brian Foster) [1633171]
  - [fs] xfs: remove xfs_bunmapi() dfops param (Brian Foster) [1633171]
  - [fs] xfs: use ->t_dfops for all xfs_bunmapi() callers (Brian Foster) [1633171]
  - [fs] xfs: remove xfs_bmapi_write() dfops param (Brian Foster) [1633171]
  - [fs] xfs: use ->t_dfops for all xfs_bmapi_write() callers (Brian Foster) [1633171]
  - [fs] xfs: use ->t_dfops in dqalloc transaction (Brian Foster) [1633171]
  - [fs] xfs: replace xfs_da_args->dfops accesses with ->t_dfops and remove (Brian Foster) [1633171]
  - [fs] xfs: use ->t_dfops in extent split tx and remove param (Brian Foster) [1633171]
  - [fs] xfs: remove dfops param in attr fork add path (Brian Foster) [1633171]
  - [fs] xfs: use ->t_dfops for attr set/remove operations (Brian Foster) [1633171]
  - [fs] xfs: use ->t_dfops for recovery of (b|c)ui log items (Brian Foster) [1633171]
  - [fs] xfs: remove dfops param from high level dirname calls (Brian Foster) [1633171]
  - [fs] xfs: remove dfops parameter from ifree call stack (Brian Foster) [1633171]
  - [fs] xfs: rename xfs_trans ->t_agfl_dfops to ->t_dfops (Brian Foster) [1633171]
  - [fs] xfs: cow unwritten conversion uses uninitialized dfops (Brian Foster) [1633171]
  - [fs] xfs: update my copyrights for the writeback and iomap code (Brian Foster) [1633171]
  - [fs] xfs: add support for sub-pagesize writeback without buffer_heads (Brian Foster) [1633171]
  - [fs] xfs: allow writeback on pages without buffer heads (Brian Foster) [1633171]
  - [fs] xfs: refactor the tail of xfs_writepage_map (Brian Foster) [1633171]
  - [fs] xfs: remove xfs_start_page_writeback (Brian Foster) [1633171]
  - [fs] xfs: move all writeback buffer_head manipulation into xfs_map_at_offset (Brian Foster) [1633171]
  - [fs] xfs: don't look at buffer heads in xfs_add_to_ioend (Brian Foster) [1633171]
  - [fs] xfs: remove the imap_valid flag (Brian Foster) [1633171]
  - [fs] xfs: simplify xfs_map_blocks by using xfs_iext_lookup_extent directly (Brian Foster) [1633171]
  - [fs] xfs: remove xfs_reflink_find_cow_mapping (Brian Foster) [1633171]
  - [fs] xfs: remove the now unused XFS_BMAPI_IGSTATE flag (Brian Foster) [1633171]
  - [fs] xfs: make xfs_writepage_map extent map centric (Brian Foster) [1633171]
  - [fs] xfs: rename the offset variable in xfs_writepage_map (Brian Foster) [1633171]
  - [fs] xfs: remove xfs_map_cow (Brian Foster) [1633171]
  - [fs] xfs: remove xfs_reflink_trim_irec_to_next_cow (Brian Foster) [1633171]
  - [fs] xfs: don't use XFS_BMAPI_IGSTATE in xfs_map_blocks (Brian Foster) [1633171]
  - [fs] xfs: don't clear imap_valid for a non-uptodate buffers (Brian Foster) [1633171]
  - [fs] xfs: do not set the page uptodate in xfs_writepage_map (Brian Foster) [1633171]
  - [fs] xfs: move locking into xfs_bmap_punch_delalloc_range (Brian Foster) [1633171]
  - [fs] xfs: simplify xfs_aops_discard_page (Brian Foster) [1633171]
  - [fs] xfs: use iomap for blocksize == PAGE_SIZE readpage and readpages (Brian Foster) [1633171]
  - [fs] iomap: fix WARN_ON_ONCE on uninitialized variable (Brian Foster) [1633171]
  - [fs] iomap: Switch to offset_in_page for clarity (Brian Foster) [1633171]
  - [fs] iomap: add support for sub-pagesize buffered I/O without buffer heads (Brian Foster) [1633171]
  - [fs] iomap: add inline data support to iomap_readpage_actor (Brian Foster) [1633171]
  - [fs] iomap: support direct I/O to inline data (Brian Foster) [1633171]
  - [fs] iomap: refactor iomap_dio_actor (Brian Foster) [1633171]
  - [fs] iomap: add initial support for writes without buffer heads (Brian Foster) [1633171]
  - [fs] iomap: add an iomap-based readpage and readpages implementation (Brian Foster) [1633171]
  - [fs] iomap: add private pointer to struct iomap (Brian Foster) [1633171]
  - [fs] iomap: add a page_done callback (Brian Foster) [1633171]
  - [fs] iomap: generic inline data handling (Brian Foster) [1633171]
  - [fs] iomap: complete partial direct I/O writes synchronously (Brian Foster) [1633171]
  - [fs] iomap: mark newly allocated buffer heads as new (Brian Foster) [1633171]
  - [fs] fs: factor out a __generic_write_end helper (Brian Foster) [1633171]
  - [netdrv] amd-xgbe: mark driver as tech preview (David Arcari) [1633209]
  - [fs] ext4, dax: set ext4_dax_aops for dax files (Lukas Czerner) [1633239]
  - [fs] ext4, dax: add ext4_bmap to ext4_dax_aops (Lukas Czerner) [1633239]
  - [fs] ext4: don't mark mmp buffer head dirty (Lukas Czerner) [1633239]
  - [fs] ext4: show test_dummy_encryption mount option in /proc/mounts (Lukas Czerner) [1633239]
  - [fs] ext4: fix online resizing for bigalloc file systems with a 1k block size (Lukas Czerner) [1633239]
  - [fs] ext4: fix online resize's handling of a too-small final block group (Lukas Czerner) [1633239]
  - [fs] ext4: recalucate superblock checksum after updating free blocks/inodes (Lukas Czerner) [1633239]
  - [fs] ext4: avoid arithemetic overflow that can trigger a BUG (Lukas Czerner) [1633239]
  - [fs] ext4: avoid divide by zero fault when deleting corrupted inline directories (Lukas Czerner) [1633239]
  - [fs] ext4: check to make sure the rename(2)'s destination is not freed (Lukas Czerner) [1633239]
  - [fs] ext4: remove unneeded variable "err" in ext4_mb_release_inode_pa() (Lukas Czerner) [1633239]
  - [fs] ext4: fix spectre gadget in ext4_mb_regular_allocator() (Lukas Czerner) [1633239]
  - [fs] ext4: check for NUL characters in extended attribute's name (Lukas Czerner) [1633239]
  - [fs] ext4: use ext4_warning() for sb_getblk failure (Lukas Czerner) [1633239]
  - [fs] ext4: fix race when setting the bitmap corrupted flag (Lukas Czerner) [1633239]
  - [fs] ext4: reset error code in ext4_find_entry in fallback (Lukas Czerner) [1633239]
  - [fs] ext4: check allocation failure when duplicating "data" in ext4_remount() (Lukas Czerner) [1633239]
  - [fs] ext4: sysfs: print ext4_super_block fields as little-endian (Lukas Czerner) [1633239]
  - [firmware] efi/x86: Handle page faults occurring while running EFI runtime services (Bhupesh Sharma) [1627557]
  - [firmware] efi: Make efi_rts_work accessible to efi page fault handler (Bhupesh Sharma) [1627557]
  - [firmware] efi: Remove the declaration of efi_late_init() as the function is unused (Bhupesh Sharma) [1627557]
  - [firmware] efi: Use a work queue to invoke EFI Runtime Services (Bhupesh Sharma) [1627557]
  - [firmware] efi/x86: Use non-blocking SetVariable() for efi_delete_dummy_variable() (Bhupesh Sharma) [1627557]
  - [fs] gfs2: Special-case rindex for gfs2_grow (Robert S Peterson) [1628360]
  - [fs] GFS2: Fix recovery issues for spectators (Robert S Peterson) [1628298]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-24.el8]
changelog:
  - [netdrv] amd-xgbe: use dma_mapping_error to check map errors (David Arcari) [1637666]
  - [crypto] crypto: qat - Fix KASAN stack-out-of-bounds bug in adf_probe() (Waiman Long) [1629547]
  - [powerpc] powerpc: fix csum_ipv6_magic() on little endian platforms (Diego Domingos) [1625579]
  - [net] smc: generic netlink family should be __ro_after_init (Philipp Rudo) [1632435]
  - [net] net/smc: fix sizeof to int comparison (Philipp Rudo) [1632435]
  - [net] net/smc: no urgent data check for listen sockets (Philipp Rudo) [1632435]
  - [net] net/smc: enable fallback for connection abort in state INIT (Philipp Rudo) [1632435]
  - [net] net/smc: remove duplicate mutex_unlock (Philipp Rudo) [1632435]
  - [net] net/smc: fix non-blocking connect problem (Philipp Rudo) [1632435]
  - [net] net/smc: send response to test link signal (Philipp Rudo) [1632435]
  - [net] net: simplify sock_poll_wait (Philipp Rudo) [1632435]
  - [net] net/smc: Simplify ib_post_(send|recv|srq_recv)() calls (Philipp Rudo) [1632435]
  - [net] net/smc: Remove a WARN_ON() statement (Philipp Rudo) [1632435]
  - [powerpc] KVM: PPC: Book3S HV: Add NO_HASH flag to GET_SMMU_INFO ioctl result (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S HV: Add a VM capability to enable nested virtualization (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S HV: Add nested shadow page tables to debugfs (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S HV: Allow HV module to load without hypervisor mode (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S HV: Handle differing endianness for H_ENTER_NESTED (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S HV: Sanitise hv_regs on nested guest entry (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S HV: Add one-reg interface to virtual PTCR register (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S HV: Don't access HFSCR, LPIDR or LPCR when running nested (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S HV: Invalidate TLB when nested vcpu moves physical cpu (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S HV: Use hypercalls for TLB invalidation when nested (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S HV: Implement H_TLB_INVALIDATE hcall (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S HV: Introduce rmap to track nested guest mappings (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S HV: Handle page fault for a nested guest (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S HV: Handle hypercalls correctly when nested (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S HV: Use XICS hypercalls when running as a nested hypervisor (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S HV: Nested guest entry via hypercall (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S HV: Framework and hcall stubs for nested virtualization (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S HV: Use kvmppc_unmap_pte() in kvm_unmap_radix() (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S HV: Refactor radix page fault handler (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S HV: Make kvmppc_mmu_radix_xlate process/partition table agnostic (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S HV: Clear partition table entry on vm teardown (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Use ccr field in pt_regs struct embedded in vcpu struct (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S HV: Add a debugfs file to dump radix mappings (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S HV: Handle hypervisor instruction faults better (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S HV: Streamlined guest entry/exit path on P9 for radix guests (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S HV: Call kvmppc_handle_exit_hv() with vcore unlocked (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S: Rework TM save/restore code and make it C-callable (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S HV: Simplify real-mode interrupt handling (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S HV: Extract PMU save/restore operations as C-callable functions (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S HV: Move interrupt delivery on guest entry to C code (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S HV: Remove left-over code in XICS-on-XIVE emulation (Suraj Jitindar Singh) [1505999]
  - [powerpc] KVM: PPC: Book3S: Simplify external interrupt handling (Suraj Jitindar Singh) [1505999]
  - [powerpc] powerpc: Turn off CPU_FTR_P9_TM_HV_ASSIST in non-hypervisor mode (Suraj Jitindar Singh) [1505999]
  - [powerpc] powerpc/64s: Remove POWER9 DD1 support (Suraj Jitindar Singh) [1505999]
  - [netdrv] net/mlx5: Add Fast teardown support (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Set vlan masks for all offloaded TC rules (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5: E-Switch, Fix out of bound access when setting vport rate (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Avoid unbounded peer devices when unpairing TC hairpin rules (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5: Cache the system image guid (Alaa Hleihel) [1636554]
  - [netdrv] mlx5: remove ndo_poll_controller (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5: Check for SQ and not RQ state when modifying hairpin SQ (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5: Fix read from coherent memory (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: don't set CHECKSUM_COMPLETE on SCTP packets (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Set ECN for received packets using CQE indication (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5: Fix possible deadlock from lockdep when adding fte to fg (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5: Check for error in mlx5_attach_interface (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5: Consider PCI domain in search for next dev (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5: Fix not releasing read lock when adding flow rules (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5: E-Switch, Fix memory leak when creating switchdev mode FDB tables (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5: Use u16 for Work Queue buffer strides offset (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5: Use u16 for Work Queue buffer fragment size (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5: Fix debugfs cleanup in the device init/remove flow (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5: Fix use-after-free in self-healing flow (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Make function mlx5i_grp_sw_update_stats() static (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: IPoIB, Use priv stats in completion rx flow (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: IPoIB, Add ndo stats support for IPoIB child devices (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: IPoIB, Add ndo stats support for IPoIB netdevices (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: IPoIB, Initialize max_opened_tc in mlx5i_init flow (Alaa Hleihel) [1636554]
  - [netdrv] IB/mlx5: Fix leaking stack memory to userspace (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5: Reorganize the makefile (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: clock.c depends on CONFIG_PTP_1588_CLOCK (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: vxlan.c depends on CONFIG_VXLAN (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Move flow steering declarations into en/fs.h (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Add CONFIG_MLX5_EN_ARFS for accelerated flow steering support (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Add CONFIG_MLX5_EN_RXNFC for ethtool rx nfc (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Ethtool steering, move ethtool callbacks (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5: Reduce command polling interval (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5: Use max_num_eqs for calculation of required MSIX vectors (Alaa Hleihel) [1636554]
  - [netdrv] RDMA/mlx5: Fix shift overflow in mlx5_ib_create_wq (Alaa Hleihel) [1636554]
  - [netdrv] overflow.h: Add arithmetic shift helper (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Fix uninitialized variable (Alaa Hleihel) [1636554]
  - [netdrv] RDMA: Fix return code check in rdma_set_cq_moderation (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Vxlan, move vxlan logic to core driver (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Vxlan, add sync lock for add/del vxlan port (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Vxlan, return values for add/del port (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Vxlan, rename from mlx5e to mlx5 (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Vxlan, rename struct mlx5e_vxlan to mlx5_vxlan_port (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Vxlan, move netdev only logic to en_main.c (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Vxlan, add direct delete function (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Vxlan, cleanup an unused member in vxlan work (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Vxlan, replace ports radix-tree with hash table (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Vxlan, check maximum number of UDP ports (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Vxlan, reflect 4789 UDP port default addition to software database (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Move XDP related code into new XDP files (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Restrict the combination of large MTU and XDP (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Gather all XDP pre-requisite checks in a single function (Alaa Hleihel) [1636554]
  - [netdrv] IB/mlx5: avoid excessive warning msgs when creating VFs on 2nd port (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Use PARTIAL_GSO for UDP segmentation (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Remove redundant WARN when we cannot find neigh entry (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5: Fix tristate and description for MLX5 module (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5: Better return types for CQE API (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5: Use ERR_CAST() instead of coding it (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5: Add missing SET_DRIVER_VERSION command translation (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5: fix uaccess beyond "count" in debugfs read/write handlers (Alaa Hleihel) [1636554]
  - [netdrv] IB/mlx5: Honor cnt_set_id_valid flag instead of set_id (Alaa Hleihel) [1636554]
  - [infiniband] IB/mlx5: fix uaccess beyond "count" in debugfs read/write handlers (Alaa Hleihel) [1636554]
  - [infiniband] IB/mlx5: Fix GRE flow specification (Alaa Hleihel) [1636554]
  - [infiniband] IB/mlx5: Remove set-but-not-used variables (Alaa Hleihel) [1636554]
  - [infiniband] RDMA/mlx5: Don't leak UARs in case of free fails (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Update NIC HW stats on demand only (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Add counter for total num of NOP operations (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Add counter for MPWQE filler strides (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Add channel events counter (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Add a counter for congested UMRs (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Add NAPI statistics (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Add XDP_TX completions statistics (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Add TX completions statistics (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: RX, Use existing WQ local variable (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Convert large order kzalloc allocations to kvzalloc (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Add UDP GSO remaining counter (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5e: Add UDP GSO support (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5: Rate limit errors in command interface (Alaa Hleihel) [1636554]
  - [netdrv] net/mlx5: Prevent warns in dmesg upon firmware commands (Alaa Hleihel) [1636554]
  - [netdrv] mlx4: remove ndo_poll_controller (Alaa Hleihel) [1636553]
  - [netdrv] net/mlx4: Use cpumask_available for eq->affinity_mask (Alaa Hleihel) [1636553]
  - [netdrv] net/mlx4/en_rx: Mark expected switch fall-throughs (Alaa Hleihel) [1636553]
  - [netdrv] net/mlx4/mcg: Mark expected switch fall-throughs (Alaa Hleihel) [1636553]
  - [infiniband] IB/mlx4: Use 4K pages for kernel QP's WQE buffer (Alaa Hleihel) [1636553]
  - [netdrv] net/mlx4_core: Allow MTTs starting at any index (Alaa Hleihel) [1636553]
  - [infiniband] IB/mlx4: Test port number before querying type (Alaa Hleihel) [1636553]
  - [powerpc] powerpc/numa: Skip onlining a offline node in kdump path (Steve Best) [1637118]
  - [netdrv] net: aquantia: Make function aq_fw1x_set_power() static (David Arcari) [1636533]
  - [netdrv] net: aquantia: memory corruption on jumbo frames (David Arcari) [1636533 1630377]
  - [netdrv] net: aquantia: bump driver version (David Arcari) [1636533]
  - [netdrv] net: aquantia: renaming for better visibility (David Arcari) [1636533]
  - [netdrv] net: aquantia: whitespace changes (David Arcari) [1636533]
  - [netdrv] net: aquantia: implement EEE support (David Arcari) [1636533]
  - [netdrv] net: aquantia: implement WOL support (David Arcari) [1636533]
  - [netdrv] net: aquantia: definitions for WOL (David Arcari) [1636533]
  - [netdrv] net: aquantia: fix hw_atl_utils_fw_upload_dwords (David Arcari) [1636533]
  - [netdrv] net: aquantia: Make some functions static (David Arcari) [1636533]
  - [netdrv] net: aquantia: bump driver version (David Arcari) [1636533]
  - [netdrv] net: aquantia: Add renegotiate ethtool operation support (David Arcari) [1636533]
  - [netdrv] net: aquantia: Implement rx/tx flow control ethtools callback (David Arcari) [1636533]
  - [netdrv] net: aquantia: Improve adapter init/deinit logic (David Arcari) [1636533]
  - [netdrv] net: aquantia: Ethtool based ring size configuration (David Arcari) [1636533]
  - [wireless] ath10k: fix memory leak of tpc_stats (Petr Oros) [1637528]
  - [wireless] ath10k: snoc: use correct bus-specific pointer in RX retry (Petr Oros) [1637528]
  - [wireless] ath10k: fix incorrect size of dma_free_coherent in ath10k_ce_alloc_src_ring_64 (Petr Oros) [1637528]
  - [wireless] brcmsmac: fix wrap around in conversion from constant to s16 (Petr Oros) [1637528]
  - [wireless] mt76x2: fix mrr idx/count estimation in mt76x2_mac_fill_tx_status() (Petr Oros) [1637528]
  - [wireless] ath10k: transmit queued frames after processing rx packets (Petr Oros) [1637528]
  - [wireless] ath10k: protect ath10k_htt_rx_ring_free with rx_ring.lock (Petr Oros) [1637528]
  - [wireless] ath10k: use locked skb_dequeue for rx completions (Petr Oros) [1637528]
  - [wireless] ath10k: sdio: set skb len for all rx packets (Petr Oros) [1637528]
  - [wireless] ath10k: sdio: use same endpoint id for all packets in a bundle (Petr Oros) [1637528]
  - [wireless] iwlwifi: cancel the injective function between hw pointers to tfd entry index (Petr Oros) [1637528]
  - [wireless] ath10k: disable bundle mgmt tx completion event support (Petr Oros) [1637528]
  - [wireless] ath10k: prevent active scans on potential unusable channels (Petr Oros) [1637528]
  - [wireless] ath9k_hw: fix channel maximum power level test (Petr Oros) [1637528]
  - [wireless] ath9k: report tx status on EOSP (Petr Oros) [1637528]
  - [wireless] iwlwifi: pcie: don't access periphery registers when not available (Petr Oros) [1637528]
  - [wireless] brcmfmac: fix brcmf_wiphy_wowl_params() NULL pointer dereference (Petr Oros) [1637528]
  - [netdrv] be2net: don't flip hw_features when VXLANs are added/deleted (Petr Oros) [1637133]
  - [netdrv] be2net: Fix memory leak in be_cmd_get_profile_config() (Petr Oros) [1637133]
  - [netdrv] be2net: Mark expected switch fall-through (Petr Oros) [1637133]
  - [netdrv] be2net: fix spelling mistake "seqence" -> "sequence" (Petr Oros) [1637133]
  - [netdrv] be2net: Update the driver version to 12.0.0.0 (Petr Oros) [1637133]
  - [netdrv] be2net: gather debug info and reset adapter (only for Lancer) on a tx-timeout (Petr Oros) [1637133]
  - [netdrv] be2net: move rss_flags field in rss_info to ensure proper alignment (Petr Oros) [1637133]
  - [netdrv] be2net: re-order fields in be_error_recovert to avoid hole (Petr Oros) [1637133]
  - [netdrv] be2net: remove unused tx_jiffies field from be_tx_stats (Petr Oros) [1637133]
  - [netdrv] be2net: move txcp field in be_tx_obj to eliminate holes in the struct (Petr Oros) [1637133]
  - [netdrv] be2net: reorder fields in be_eq_obj structure (Petr Oros) [1637133]
  - [netdrv] be2net: remove desc field from be_eq_obj (Petr Oros) [1637133]
  - [netdrv] be2net: remove unused old custom busy-poll fields (Petr Oros) [1637133]
  - [netdrv] be2net: remove unused old AIC info (Petr Oros) [1637133]
  - [x86] x86/spec_ctrl/compat: Call IBRS_ENTRY only after valid kernel stack (Waiman Long) [1636843]
  - [acpi] ACPI/PPTT: Handle architecturally unknown cache types (Jeremy Linton) [1636567]
  - [base] drivers: base: cacheinfo: Do not populate sysfs for unknown cache types (Jeremy Linton) [1636567]
  - [fs] getxattr: use correct xattr length (Lukas Czerner) [1637049]
  - [x86] Mark Intel Cascade Lake supported (Steve Best) [1636651]
  - [x86] x86/boot: Fix kexec booting failure in the SEV bit detection code (Kairui Song) [1632514]
  - [scsi] scsi: megaraid_sas: driver version upgrade (Tomas Henzl) [1635565]
  - [scsi] scsi: megaraid_sas: Support FW provided TM timeout values (Tomas Henzl) [1635565]
  - [scsi] scsi: megaraid_sas: Return immediately from wait_for_adapter_operational after kill adapter (Tomas Henzl) [1635565]
  - [scsi] scsi: megaraid_sas: Update controller info during resume (Tomas Henzl) [1635565]
  - [scsi] scsi: megaraid_sas: Do not do Kill adapter if GET_CTRL_INFO times out (Tomas Henzl) [1635565]
  - [scsi] qla2xxx: Update driver version to 10.00.00.07.08.0-k (Himanshu Madhani) [1633373]
  - [scsi] scsi: qla2xxx: Check for Register disconnect (Himanshu Madhani) [1633373]
  - [scsi] scsi: qla2xxx: Fix driver hang when FC-NVMe LUNs are configured (Himanshu Madhani) [1633373]
  - [scsi] scsi: qla2xxx: Fix re-using LoopID when handle is in use (Himanshu Madhani) [1633373]
  - [scsi] scsi: qla2xxx: Fix duplicate switch database entries (Himanshu Madhani) [1633373]
  - [scsi] scsi: qla2xxx: Fix NVMe session hang on unload (Himanshu Madhani) [1633373]
  - [scsi] scsi: qla2xxx: Fix iIDMA error (Himanshu Madhani) [1633373]
  - [scsi] scsi: qla2xxx: Fix stalled relogin (Himanshu Madhani) [1633373]
  - [scsi] scsi: qla2xxx: Fix unintended Logout (Himanshu Madhani) [1633373]
  - [powerpc] powerpc/pseries: Disable CPU hotplug across migrations (Steve Best) [1633587]
  - [block] blk-mq: I/O and timer unplugs are inverted in blktrace (Ming Lei) [1634330]
  - [block] block: fix deadline elevator drain for zoned block devices (Ming Lei) [1634333]
  - [block] blk-mq: Allow blocking queue tag iter callbacks (Ming Lei) [1634328]
  - [block] block: use nanosecond resolution for iostat (Ming Lei) [1634329]
  - [block] null_blk: fix zoned support for non-rq based operation (Ming Lei) [1634324]
  - [block] blk-cgroup: increase number of supported policies (Ming Lei) [1634335]
  - [block] block: bfq: swap puts in bfqg_and_blkg_put (Ming Lei) [1634334]
  - [block] block: don't warn when doing fsync on read-only devices (Ming Lei) [1634331]
  - [block] blkcg: use tryget logic when associating a blkg with a bio (Ming Lei) [1634332]
  - [block] blkcg: delay blkg destruction until after writeback has (Ming Lei) [1634332]
  - [block] Revert "blk-throttle: fix race between (Ming Lei) [1634332]
  - [block] blk-wbt: remove dead code (Ming Lei) [1634326]
  - [block] blk-wbt: improve waking of tasks (Ming Lei) [1634326]
  - [block] blk-wbt: abstract out end IO completion handler (Ming Lei) [1634326]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-25.el8]
changelog:
  - [mm] mm/sparse: delete old sparse_init and enable new one (Baoquan He) [1625105]
  - [mm] mm/sparse: add new sparse_init_nid() and sparse_init() (Baoquan He) [1625105]
  - [mm] mm/sparse: move buffer init/fini to the common place (Baoquan He) [1625105]
  - [mm] mm/sparse: use the new sparse buffer functions in non-vmemmap (Baoquan He) [1625105]
  - [mm] mm/sparse: abstract sparse buffer allocations (Baoquan He) [1625105]
  - [mm] mm/sparse: optimize memmap allocation during sparse_init() (Baoquan He) [1625105]
  - [mm] mm/sparse.c: add a new parameter 'data_unit_size' for alloc_usemap_and_memmap (Baoquan He) [1625105]
  - [mm] mm/sparsemem.c: defer the ms->section_mem_map clearing (Baoquan He) [1625105]
  - [mm] mm/sparse.c: add a static variable nr_present_sections (Baoquan He) [1625105]
  - [mm] mm/sparse.c: make sparse_init_one_section void and remove check (Baoquan He) [1625105]
  - [target] scsi: target: iscsi: cxgbit: fix csk leak (Arjun Vynipadath) [1628864]
  - [target] scsi: target: iscsi: cxgbit: use pr_debug() instead of pr_info() (Arjun Vynipadath) [1628864]
  - [infiniband] iw_cxgb4: only allow 1 flush on user qps (Arjun Vynipadath) [1628865]
  - [infiniband] iw_cxgb4: pass window scale in flowc work request (Arjun Vynipadath) [1628865]
  - [infiniband] iw_cxgb4: remove duplicate memcpy() in c4iw_create_listen() (Arjun Vynipadath) [1628865]
  - [netdrv] mlxsw: spectrum_switchdev: Do not leak RIFs when removing bridge (Petr Oros) [1638268]
  - [tty] tty: vt_ioctl: fix potential Spectre v1 (Prarit Bhargava) [1637123]
  - [powerpc] powerpc/time: Add set_state_oneshot_stopped decrementer callback (Steve Best) [1638287]
  - [powerpc] powerpc/time: Use clockevents_register_device(), fixing an issue with large decrementer (Steve Best) [1638287]
  - [hwmon] hwmon: (nct6775) Fix potential Spectre v1 (Dean Nelson) [1637464]
  - [vfio] vfio-pci: Disable binding to PFs with SR-IOV enabled (Alex Williamson) [1637871]
  - [netdrv] net: hns3: fix page_offset overflow when CONFIG_ARM64_64K_PAGES (Petr Oros) [1638385]
  - [netdrv] net: hns: fix skb->truesize underestimation (Petr Oros) [1638385]
  - [netdrv] net: hns: fix length and page_offset overflow when CONFIG_ARM64_64K_PAGES (Petr Oros) [1638385]
  - [netdrv] net: hns3: Fix get_vector ops in hclgevf_main module (Petr Oros) [1638385]
  - [netdrv] net: hns3: Fix warning bug when doing lp selftest (Petr Oros) [1638385]
  - [netdrv] net: hns3: Fix for mac pause not disable in pfc mode (Petr Oros) [1638385]
  - [netdrv] net: hns3: Fix for mailbox message truncated problem (Petr Oros) [1638385]
  - [netdrv] net: hns3: Fix return value error in hns3_reset_notify_down_enet (Petr Oros) [1638385]
  - [netdrv] net: hns3: Fix for reset_level default assignment probelm (Petr Oros) [1638385]
  - [netdrv] net: hns3: Reset net device with rtnl_lock (Petr Oros) [1638385]
  - [netdrv] net: hns3: Fix for phy link issue when using marvell phy driver (Petr Oros) [1638385]
  - [netdrv] net: hns3: Fix for command format parsing error in hclge_is_all_function_id_zero (Petr Oros) [1638385]
  - [net] xprtrdma: Fix disconnect regression (Don Dutile) [1635418]
  - [infiniband] RDMA/uverbs: Fix validity check for modify QP (Don Dutile) [1635418]
  - [infiniband] IB/srp: Avoid that sg_reset -d $srp_device triggers an infinite loop (Don Dutile) [1635418]
  - [infiniband] ucma: fix a use-after-free in ucma_resolve_ip() (Don Dutile) [1635418]
  - [infiniband] RDMA/uverbs: Atomically flush and mark closed the comp event queue (Don Dutile) [1635418]
  - [infiniband] RDMA/mlx4: Ensure that maximal send/receive SGE less than supported by HW (Don Dutile) [1635418 1623100]
  - [infiniband] RDMA/cma: Protect cma dev list with lock (Don Dutile) [1635418]
  - [infiniband] IB/ipoib: Avoid a race condition between start_xmit and cm_rep_handler (Don Dutile) [1635418]
  - [infiniband] RDMA/ucma: check fd type in ucma_migrate_id() (Don Dutile) [1635418]
  - [infiniband] RDMA/rxe: Set wqe->status correctly if an unexpected response is received (Don Dutile) [1635418]
  - [infiniband] IB/IPoIB: Set ah valid flag in multicast send flow (Don Dutile) [1635418]
  - [infiniband] RDMA/core: Avoid holding lock while initializing fields on stack (Don Dutile) [1635418]
  - [infiniband] IB/rxe: Drop QP0 silently (Don Dutile) [1635418]
  - [infiniband] RDMA/umem: Don't hold mmap_sem for too long (Don Dutile) [1635418]
  - [infiniband] IB/srpt: Fix srpt_cm_req_recv() error path (2/2) (Don Dutile) [1635418]
  - [infiniband] IB/srpt: Fix srpt_cm_req_recv() error path (1/2) (Don Dutile) [1635418]
  - [infiniband] RDMA: Fix storage of PortInfo CapabilityMask in the kernel (Don Dutile) [1635418]
  - [infiniband] IB/core: type promotion bug in rdma_rw_init_one_mr() (Don Dutile) [1635418]
  - [infiniband] RDMA/i40w: Hold read semaphore while looking after VMA (Don Dutile) [1635418]
  - [infiniband] vmw_pvrdma: Release netdev when vmxnet3 module is removed (Don Dutile) [1635418]
  - [infiniband] ib_srpt: Fix a use-after-free in __srpt_close_all_ch() (Don Dutile) [1635418]
  - [infiniband] ib_srpt: Fix a use-after-free in srpt_close_ch() (Don Dutile) [1635418]
  - [infiniband] IB/srpt: Support HCAs with more than two ports (Don Dutile) [1635418]
  - [infiniband] IB/rxe: don't clear the tx queue on every transfer (Don Dutile) [1635418]
  - [infiniband] IB/core: add max_send_sge and max_recv_sge attributes (Don Dutile) [1635418 1623100]
  - [infiniband] IB/rxe: support for 802.1q VLAN on the listener (Don Dutile) [1635418]
  - [netdrv] cxgb4: impose mandatory VLAN usage when non-zero TAG ID (Arjun Vynipadath) [1628863]
  - [netdrv] cxgb4: when max_tx_rate is 0 disable tx rate limiting (Arjun Vynipadath) [1628863]
  - [netdrv] cxgb4: do not return DUPLEX_UNKNOWN when link is down (Arjun Vynipadath) [1628863]
  - [netdrv] cxgb4: expose stats fetched from firmware via debugfs (Arjun Vynipadath) [1628863]
  - [netdrv] cxgb4: remove stats fetched from firmware (Arjun Vynipadath) [1628863]
  - [netdrv] cxgb4: specify IQTYPE in fw_iq_cmd (Arjun Vynipadath) [1628863]
  - [netdrv] cxgb4: Fix the condition to check if the card is T5 (Arjun Vynipadath) [1628863]
  - [netdrv] cxgb4: Support ethtool private flags (Arjun Vynipadath) [1628863]
  - [netdrv] cxgb4: Add support for FW_ETH_TX_PKT_VM_WR (Arjun Vynipadath) [1628863]
  - [netdrv] cxgb4: Add flag tc_flower_initialized (Arjun Vynipadath) [1628863]
  - [s390] s390/zcrypt: remove VLA usage from the AP bus (Philipp Rudo) [1637865]
  - [s390] s390/ap_bus: replace PTR_RET with PTR_ERR_OR_ZERO (Philipp Rudo) [1637865]
  - [s390] s390/crypto: fix gcc 8 stringop-truncation warning (Philipp Rudo) [1637865]
  - [s390] s390/zcrypt: code beautify (Philipp Rudo) [1637865]
  - [s390] s390/zcrypt: add copy_from_user length plausibility checks (Philipp Rudo) [1637865]
  - [s390] s390/zcrypt: Show load of cards and queues in sysfs (Philipp Rudo) [1637865]
  - [s390] s390/kvm: fix deadlock when killed by oom (Philipp Rudo) [1638264]
  - [fs] xfs: fix data corruption w/ unaligned reflink ranges (Brian Foster) [1633476]
  - [fs] xfs: fix data corruption w/ unaligned dedupe ranges (Brian Foster) [1633476]
  - [fs] xfs: update ctime and remove suid before cloning files (Brian Foster) [1633476]
  - [fs] xfs: zero posteof blocks when cloning above eof (Brian Foster) [1633476]
  - [fs] xfs: refactor clonerange preparation into a separate helper (Brian Foster) [1633476]
  - [netdrv] nfp: avoid buffer leak when FW communication fails (Petr Oros) [1638233]
  - [netdrv] nfp: don't fail probe on pci_sriov_set_totalvfs() errors (Petr Oros) [1638233]
  - [netdrv] nfp: wait for posted reconfigs when disabling the device (Petr Oros) [1638233]
  - [netdrv] liquidio: fix hang when re-binding VF host drv after running DPDK VF driver (Petr Oros) [1638224]
  - [netdrv] r8169: set RxConfig after tx/rx is enabled for RTL8169sb/8110sb devices (Petr Oros) [1638210]
  - [netdrv] r8169: add support for NCube 8168 network card (Petr Oros) [1638210]
  - [netdrv] r8169: don't use MSI-X on RTL8106e (Petr Oros) [1638210]
  - [netdrv] r8169: don't use MSI-X on RTL8168g (Petr Oros) [1638210]
  - [powerpc] KVM: PPC: Book3S HV: Fix guest r11 corruption with POWER9 TM workarounds (David Gibson) [1637766]
  - [drm] drm/amdgpu: Suppress keypresses from ACPI_VIDEO events (Lyude Paul) [1631918]
  - [infiniband] IB/hfi1: Remove race conditions in user_sdma send path (Alex Estrin) [1637068]
  - [infiniband] IB/hfi1: Eliminate races in the SDMA send error path (Alex Estrin) [1637068]
  - [infiniband] IB/hfi1: Fix destroy_qp hang after a link down (Alex Estrin) [1637068]
  - [infiniband] IB/hfi1: Fix context recovery when PBC has an UnsupportedVL (Alex Estrin) [1637068]
  - [infiniband] IB/hfi1: Invalid user input can result in crash (Alex Estrin) [1637068]
  - [infiniband] IB/hfi1: Fix SL array bounds check (Alex Estrin) [1637068]
  - [powerpc] powerpc/fadump: re-register firmware-assisted dump if already registered (Steve Best) [1637383]
  - [powerpc] powerpc/fadump: cleanup crash memory ranges support (Steve Best) [1637383]
  - [powerpc] powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD segements (Steve Best) [1637383]
  - [powerpc] powerpc/fadump: handle crash memory ranges array index overflow (Steve Best) [1637383]
  - [scsi] scsi: qedi: Initialize the stats mutex lock (Chad Dupuis) [1637245]
  - [fs] gfs2: Fix iomap buffered write support for journaled files (Andreas Grunbacher) [1637944]
  - [fs] gfs2: eliminate update_rgrp_lvb_unlinked (Andreas Grunbacher) [1637944]
  - [fs] gfs2: Fix gfs2_testbit to use clone bitmaps (Andreas Grunbacher) [1637944]
  - [fs] gfs2: Get rid of gfs2_ea_strlen (Andreas Grunbacher) [1637944]
  - [fs] GFS2: rgrp free blocks used incorrectly (Andreas Grunbacher) [1637944]
  - [fs] gfs2: remove redundant variable 'moved' (Andreas Grunbacher) [1637944]
  - [fs] gfs2: use iomap_readpage for blocksize == PAGE_SIZE (Andreas Grunbacher) [1637944]
  - [fs] gfs2: Use iomap for stuffed direct I/O reads (Andreas Grunbacher) [1637944]
  - [fs] gfs2: fallocate_chunk: Always initialize struct iomap (Andreas Grunbacher) [1637944]
  - [fs] gfs2: Remove gfs2_write_(begin,end) (Andreas Grunbacher) [1637944]
  - [fs] gfs2: iomap direct I/O support (Andreas Grunbacher) [1637944]
  - [fs] gfs2: gfs2_extent_length cleanup (Andreas Grunbacher) [1637944]
  - [fs] gfs2: iomap buffered write support (Andreas Grunbacher) [1637944]
  - [fs] gfs2: Further iomap cleanups (Andreas Grunbacher) [1637944]
  - [fs] fs: gfs2: Adding new return type vm_fault_t (Andreas Grunbacher) [1637944]
  - [fs] gfs2: using posix_acl_xattr_size instead of posix_acl_to_xattr (Andreas Grunbacher) [1637944]
  - [fs] gfs2: Don't reject a supposedly full bitmap if we have blocks reserved (Andreas Grunbacher) [1637944]
  - [fs] gfs2: Eliminate redundant ip->i_rgd (Andreas Grunbacher) [1637944]
  - [fs] gfs2: Stop messing with ip->i_rgd in the rlist code (Andreas Grunbacher) [1637944]
  - [fs] gfs2: call ktime_get_coarse_real_ts64() directly (Andreas Grunbacher) [1637944]
  - [fs] gfs2: Minor clarification to __gfs2_punch_hole (Andreas Grunbacher) [1637944]
  - [fs] gfs2: Don't withdraw under a spin lock (Andreas Grunbacher) [1637944]
  - [fs] gfs2: eliminate rs_inum and reduce the size of gfs2 inodes (Andreas Grunbacher) [1637944]
  - [drm] drm/nouveau/drm/nouveau: Grab runtime PM ref in nv50_mstc_detect() (Lyude Paul) [1628749]
  - [drm] drm/nouveau/disp: fix DP disable race (Lyude Paul) [1628749]
  - [drm] drm/nouveau/drm/nouveau: Don't forget to cancel hpd_work on suspend/unload (Lyude Paul) [1628749]
  - [drm] drm/nouveau/drm/nouveau: Prevent handling ACPI HPD events too early (Lyude Paul) [1628749]
  - [drm] drm/nouveau: Reset MST branching unit before enabling (Lyude Paul) [1628749]
  - [drm] drm/nouveau: Only write DP_MSTM_CTRL when needed (Lyude Paul) [1628749]
  - [drm] drm/nouveau: Remove useless poll_enable() call in drm_load() (Lyude Paul) [1628749]
  - [drm] drm/nouveau: Remove useless poll_disable() call in switcheroo_set_state() (Lyude Paul) [1628749]
  - [drm] drm/nouveau: Remove useless poll_enable() call in switcheroo_set_state() (Lyude Paul) [1628749]
  - [drm] drm/nouveau: Fix deadlocks in nouveau_connector_detect() (Lyude Paul) [1628749]
  - [drm] drm/nouveau/drm/nouveau: Use pm_runtime_get_noresume() in connector_detect() (Lyude Paul) [1628749]
  - [drm] drm/nouveau/drm/nouveau: Fix deadlock with fb_helper with async RPM requests (Lyude Paul) [1628749]
  - [drm] drm/nouveau: Remove duplicate poll_enable() in pmops_runtime_suspend() (Lyude Paul) [1628749]
  - [drm] drm/nouveau/drm/nouveau: Fix bogus drm_kms_helper_poll_enable() placement (Lyude Paul) [1628749]
  - [md] dm table: require that request-based DM be layered on blk-mq devices (Mike Snitzer) [1637682]
  - [md] dm: rename DM_TYPE_MQ_REQUEST_BASED to DM_TYPE_REQUEST_BASED (Mike Snitzer) [1637682]
  - [md] dm: remove legacy request-based IO path (Mike Snitzer) [1637682]
  - [md] dm linear: fix linear_end_io conditional definition (Mike Snitzer) [1637682]
  - [md] dm linear: eliminate linear_end_io call if CONFIG_DM_ZONED disabled (Mike Snitzer) [1637682]
  - [md] dm: fix report zone remapping to account for partition offset (Mike Snitzer) [1637682]
  - [md] dm cache: destroy migration_cache if cache target registration failed (Mike Snitzer) [1637682]
  - [md] dm cache: fix resize crash if user doesn't reload cache table (Mike Snitzer) [1637682]
  - [md] dm cache metadata: ignore hints array being too small during resize (Mike Snitzer) [1637682]
  - [md] dm raid: remove bogus const from decipher_sync_action() return type (Mike Snitzer) [1637682]
  - [md] dm mpath: fix attached_handler_name leak and dangling hw_handler_name pointer (Mike Snitzer) [1637682]
  - [md] dm thin metadata: fix __udivdi3 undefined on 32-bit (Mike Snitzer) [1637682]
  - [md] dm thin metadata: try to avoid ever aborting transactions (Mike Snitzer) [1637682]
  - [md] dm raid: bump target version, update comments and documentation (Mike Snitzer) [1637682]
  - [md] dm raid: fix RAID leg rebuild errors (Mike Snitzer) [1637682]
  - [md] dm raid: fix rebuild of specific devices by updating superblock (Mike Snitzer) [1637682]
  - [md] dm raid: fix stripe adding reshape deadlock (Mike Snitzer) [1637682]
  - [md] dm raid: fix reshape race on small devices (Mike Snitzer) [1637682]
  - [md] dm: disable CRYPTO_TFM_REQ_MAY_SLEEP to fix a GFP_KERNEL recursion deadlock (Mike Snitzer) [1637682]
  - [md] dm verity: fix crash on bufio buffer that was allocated with vmalloc (Mike Snitzer) [1637682]
  - [md] dm writecache: fix a crash due to reading past end of dirty_bitmap (Mike Snitzer) [1637682]
  - [md] dm crypt: don't decrease device limits (Mike Snitzer) [1637682]
  - [md] dm cache metadata: set dirty on all cache blocks after a crash (Mike Snitzer) [1637682]
  - [md] dm snapshot: remove stale FIXME in snapshot_map() (Mike Snitzer) [1637682]
  - [md] dm snapshot: improve performance by switching out_of_order_list to rbtree (Mike Snitzer) [1637682]
  - [md] dm kcopyd: avoid softlockup in run_complete_job (Mike Snitzer) [1637682]
  - [md] dm cache metadata: save in-core policy_hint_size to on-disk superblock (Mike Snitzer) [1637682]
  - [md] dm thin: stop no_space_timeout worker when switching to write-mode (Mike Snitzer) [1637682]
  - [md] dm kcopyd: return void from dm_kcopyd_copy() (Mike Snitzer) [1637682]
  - [md] dm thin: include metadata_low_watermark threshold in pool status (Mike Snitzer) [1637682]
  - [md] dm writecache: report start_sector in status line (Mike Snitzer) [1637682]
  - [md] dm crypt: convert essiv from ahash to shash (Mike Snitzer) [1637682]
  - [md] dm crypt: use wake_up_process() instead of a wait queue (Mike Snitzer) [1637682]
  - [md] dm integrity: recalculate checksums on creation (Mike Snitzer) [1637682]
  - [md] dm integrity: flush journal on suspend when using separate metadata device (Mike Snitzer) [1637682]
  - [md] dm integrity: use version 2 for separate metadata (Mike Snitzer) [1637682]
  - [md] dm integrity: allow separate metadata device (Mike Snitzer) [1637682]
  - [md] dm integrity: add ic->start in get_data_sector() (Mike Snitzer) [1637682]
  - [md] dm integrity: report provided data sectors in the status (Mike Snitzer) [1637682]
  - [md] dm integrity: implement fair range locks (Mike Snitzer) [1637682]
  - [md] dm integrity: decouple common code in dm_integrity_map_continue() (Mike Snitzer) [1637682]
  - [md] dm integrity: change 'suspending' variable from bool to int (Mike Snitzer) [1637682]
  - [md] dm delay: add flush as a third class of IO (Mike Snitzer) [1637682]
  - [md] dm delay: refactor repetitive code (Mike Snitzer) [1637682]
  - [md] dm cache: only allow a single io_mode cache feature to be requested (Mike Snitzer) [1637682]
  - [md] dm thin: update stale "Status" Documentation (Mike Snitzer) [1637682]
  - [pci] PCI: Reprogram bridge prefetch registers on resume (Myron Stowe) [1637155]
  - [input] Input: xen-kbdfront - fix multi-touch XenStore node's locations (Benjamin Tissoires) [1637027]
  - [input] Input: elantech - enable middle button of touchpad on ThinkPad P72 (Benjamin Tissoires) [1637027]
  - [hid] HID: i2c-hid: Use devm to allocate i2c_hid struct (Benjamin Tissoires) [1637027]
  - [hid] HID: input: fix leaking custom input node name (Benjamin Tissoires) [1637027]
  - [hid] HID: core: fix grouping by application (Benjamin Tissoires) [1637027]
  - [hid] HID: multitouch: fix Elan panels with 2 input modes declaration (Benjamin Tissoires) [1637027]
  - [input] Input: do not use WARN() in input_alloc_absinfo() (Benjamin Tissoires) [1637027]
  - [s390] s390: vfio-ap: setup APCB mask using KVM dedicated function (Cornelia Huck) [1508118]
  - [s390] KVM: s390: Tracing APCB changes (Cornelia Huck) [1508118]
  - [s390] KVM: s390: fix locking for crypto setting error path (Cornelia Huck) [1508118]
  - [s390] s390: doc: detailed specifications for AP virtualization (Cornelia Huck) [1508118]
  - [s390] KVM: s390: CPU model support for AP virtualization (Cornelia Huck) [1508118]
  - [s390] KVM: s390: device attrs to enable/disable AP interpretation (Cornelia Huck) [1508118]
  - [s390] KVM: s390: vsie: allow guest FORMAT-0 CRYCB on host FORMAT-2 (Cornelia Huck) [1508118]
  - [s390] KVM: s390: vsie: allow guest FORMAT-1 CRYCB on host FORMAT-2 (Cornelia Huck) [1508118]
  - [s390] KVM: s390: vsie: allow guest FORMAT-0 CRYCB on host FORMAT-1 (Cornelia Huck) [1508118]
  - [s390] KVM: s390: vsie: allow CRYCB FORMAT-0 (Cornelia Huck) [1508118]
  - [s390] KVM: s390: vsie: allow CRYCB FORMAT-1 (Cornelia Huck) [1508118]
  - [s390] KVM: s390: vsie: Allow CRYCB FORMAT-2 (Cornelia Huck) [1508118]
  - [s390] KVM: s390: vsie: Make use of CRYCB FORMAT2 clear (Cornelia Huck) [1508118]
  - [s390] KVM: s390: vsie: Do the CRYCB validation first (Cornelia Huck) [1508118]
  - [s390] KVM: s390: Clear Crypto Control Block when using vSIE (Cornelia Huck) [1508118]
  - [s390] s390: vfio-ap: implement VFIO_DEVICE_RESET ioctl (Cornelia Huck) [1508118]
  - [s390] s390: vfio-ap: zeroize the AP queues (Cornelia Huck) [1508118]
  - [s390] s390: vfio-ap: implement VFIO_DEVICE_GET_INFO ioctl (Cornelia Huck) [1508118]
  - [s390] s390: vfio-ap: implement mediated device open callback (Cornelia Huck) [1508118]
  - [s390] KVM: s390: interface to clear CRYCB masks (Cornelia Huck) [1508118]
  - [s390] s390: vfio-ap: sysfs interface to view matrix mdev matrix (Cornelia Huck) [1508118]
  - [s390] s390: vfio-ap: sysfs interfaces to configure control domains (Cornelia Huck) [1508118]
  - [s390] s390: vfio-ap: sysfs interfaces to configure domains (Cornelia Huck) [1508118]
  - [s390] s390: vfio-ap: sysfs interfaces to configure adapters (Cornelia Huck) [1508118]
  - [s390] s390: vfio-ap: register matrix device with VFIO mdev framework (Cornelia Huck) [1508118]
  - [s390] s390: vfio-ap: base implementation of VFIO AP device driver (Cornelia Huck) [1508118]
  - [s390] KVM: s390: refactor crypto initialization (Cornelia Huck) [1508118]
  - [s390] KVM: s390: introduce and use KVM_REQ_VSIE_RESTART (Cornelia Huck) [1508118]
  - [s390] KVM: s390: vsie: simulate VCPU SIE entry/exit (Cornelia Huck) [1508118]
  - [s390] s390/zcrypt: hex string mask improvements for apmask and aqmask (Cornelia Huck) [1508118]
  - [s390] s390/zcrypt: AP bus support for alternate driver(s) (Cornelia Huck) [1508118]
  - [s390] s390/zcrypt: switch return type to bool for ap_instructions_available() (Cornelia Huck) [1508118]
  - [s390] s390/zcrypt: fix ap_instructions_available() returncodes (Cornelia Huck) [1508118]
  - [s390] s390/zcrypt: Integrate ap_asm.h into include/asm/ap.h (Cornelia Huck) [1508118]
  - [s390] s390/zcrypt: Review inline assembler constraints (Cornelia Huck) [1508118]
  - [s390] s390/zcrypt: Add ZAPQ inline function (Cornelia Huck) [1508118]
  - [net] ipv6: use rt6_info members when dst is set in rt6_fill_node (Xin Long) [1625864 1625803 1625117]


author: Herton R. Krzesinski <herton@redhat.com> [4.18.0-26.el8]
changelog:
  - [fs] gfs2: Fix iomap buffered write support for journaled files (2) (Andreas Grunbacher) [1637944]
  - [xen] xen/manage: don't complain about an empty value in control/sysrq node (Vitaly Kuznetsov) [1623344]
  - [drm] drm/amdgpu: Silence harmless WARN_ON() during MST disable (Lyude Paul) [1638137]
  - [netdrv] net: macb: Fix regression breaking non-MDIO fixed-link PHYs (Petr Oros) [1638259]
  - [netdrv] net: macb: do not disable MDIO bus at open/close time (Petr Oros) [1638259]
  - [fs] proc: restrict kernel stack dumps to root (Waiman Long) [1638044]
  - [base] firmware: Always initialize the fw_priv list object (Waiman Long) [1638044]
  - [base] firmware: Fix security issue with request_firmware_into_buf() (Waiman Long) [1638044]
  - [fs] sysfs: Do not return POSIX ACL xattrs via listxattr (Waiman Long) [1638044]
  - [fs] vfs: don't evict uninitialized inode (Waiman Long) [1638044]
  - [fs] new primitive: discard_new_inode() (Waiman Long) [1638044]
  - [arm64] arm64: jump_label.h: use asm_volatile_goto macro instead of "asm goto" (Waiman Long) [1638044]
  - [kernel] sched/topology: Set correct NUMA topology type (Waiman Long) [1638044]
  - [kernel] bpf: 32-bit RSH verification must truncate input before the ALU op (Waiman Long) [1638044]
  - [mm] mm: madvise(MADV_DODUMP): allow hugetlbfs pages (Waiman Long) [1638044]
  - [x86] x86/pti: Fix section mismatch warning/error (Waiman Long) [1638044]
  - [kernel] uaccess: Fix is_source param for check_copy_size() in copy_to_iter_mcsafe() (Waiman Long) [1638044]
  - [x86] x86/mm: Expand static page table for fixmap space (Waiman Long) [1638044]
  - [fs] fs/lock: skip lock owner pid translation in case we are in init_pid_ns (Waiman Long) [1638044]
  - [x86] perf/x86/intel/lbr: Fix incomplete LBR call stack (Waiman Long) [1638044]
  - [kernel] perf/hw_breakpoint: Split attribute parse and commit (Waiman Long) [1638044]
  - [kernel] bitfield: fix *_encode_bits() (Waiman Long) [1638044]
  - [kernel] posix-timers: Sanitize overrun handling (Waiman Long) [1638044]
  - [kernel] posix-timers: Make forward callback return s64 (Waiman Long) [1638044]
  - [kernel] alarmtimer: Prevent overflow for relative nanosleep (Waiman Long) [1638044]
  - [x86] x86/entry/64: Add two more instruction suffixes (Waiman Long) [1638044]
  - [powerpc] powerpc/kdump: Handle crashkernel memory reservation failure (Waiman Long) [1638044]
  - [s390] s390/mm: correct allocate_pgste proc_handler callback (Waiman Long) [1638044]
  - [x86] x86/numa_emulation: Fix emulated-to-physical node mapping (Waiman Long) [1638044]
  - [x86] x86/paravirt: Fix some warning messages (Waiman Long) [1638044]
  - [kernel] sched/fair: Fix vruntime_normalized() for remote non-migration wakeup (Waiman Long) [1638044]
  - [kernel] bpf/verifier: disallow pointer subtraction (Waiman Long) [1638044]
  - [mm] mm: shmem.c: Correctly annotate new inodes for lockdep (Waiman Long) [1638044]
  - [kernel] sched/core: Use smp_mb() in wake_woken_function() (Waiman Long) [1638044]
  - [kernel] bpf: fix rcu annotations in compute_effective_progs() (Waiman Long) [1638044]
  - [x86] x86/mm/pti: Add an overflow check to pti_clone_pmds() (Waiman Long) [1638044]
  - [x86] x86/pti: Check the return value of pti_user_pagetable_walk_pmd() (Waiman Long) [1638044]
  - [x86] x86/pti: Check the return value of pti_user_pagetable_walk_p4d() (Waiman Long) [1638044]
  - [powerpc] powerpc/pseries/mm: call H_BLOCK_REMOVE (Steve Best) [1637116]
  - [powerpc] powerpc/pseries/mm: factorize PTE slot computation (Steve Best) [1637116]
  - [powerpc] powerpc/pseries/mm: Introducing FW_FEATURE_BLOCK_REMOVE (Steve Best) [1637116]
  - [watchdog] watchdog/hpwdt: Disable PreTimeout when Timeout is smaller (Joseph Szczypek) [1632945]
  - [watchdog] watchdog: hpwdt: Update Driver Documentation (Joseph Szczypek) [1632945]
  - [watchdog] watchdog: hpwdt: Update version number (Joseph Szczypek) [1632945]
  - [watchdog] watchdog: hpwdt: Module parameter alias (Joseph Szczypek) [1632945]
  - [watchdog] watchdog: hpwdt: Display module parameters (Joseph Szczypek) [1632945]
  - [watchdog] watchdog: hpwdt: Claim NMI from iLO (Joseph Szczypek) [1632945]
  - [watchdog] watchdog: hpwdt: Initialize pretimeout from module parameter (Joseph Szczypek) [1632945]


