# changelog

author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.24.1.el9_3]
changelog:
  - RDMA/mlx5: Fix assigning access flags to cache mkeys (Mohammad Kabat) [RHEL-25242 RHEL-882]
  - drm/amdgpu: Fix potential fence use-after-free v2 (Jan Stancek) [RHEL-24501 RHEL-24504 RHEL-22506 RHEL-22507] {CVE-2023-51042}
  - ceph: defer stopping mdsc delayed_work (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: never send metrics if disable_send_metrics is set (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: don't let check_caps skip sending responses for revoke msgs (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: issue a cap release immediately if no cap exists (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: trigger to flush the buffer when making snapshot (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: fix blindly expanding the readahead windows (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: add a dedicated private data for netfs rreq (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: voluntarily drop Xx caps for requests those touch parent mtime (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: try to dump the msgs when decoding fails (Xiubo Li) [RHEL-22256 RHEL-16415]
  - ceph: only send metrics when the MDS rank is ready (Xiubo Li) [RHEL-22256 RHEL-16415]
  - x86/boot: Ignore NMIs during very early boot (Derek Barbosa) [RHEL-24449 RHEL-9380]
  - Documentation, mm/unaccepted: document accept_memory kernel parameter (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - proc/kcore: do not try to access unaccepted memory (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/unaccepted: do not let /proc/vmcore try to access unaccepted memory (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/traps: Fix load_unaligned_zeropad() handling for shared TDX memory (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/unaccepted: Fix off-by-one when checking for overlapping ranges (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Zero out the missing RSI in TDX_HYPERCALL macro (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/kvm: Do not try to disable kvmclock if it was not enabled (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Mark TSC reliable (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - RHEL: kABI fixup for struct zone (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - RHEL: introduce NR_VM_ZONE_STAT_ITEMS_ACTUAL for kABI-preserving zone stats (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - RHEL: 9.3 kABI fixup for struct efi (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/mm: Fix enc_status_change_finish_noop() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Fix race between set_memory_encrypted() and load_unaligned_zeropad() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/mm: Allow guest.enc_status_change_prepare() to fail (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/coco: Mark cc_platform_has() and descendants noinstr (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - virt: sevguest: Add CONFIG_CRYPTO dependency (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - mm/page_alloc: make deferred page init free pages in MAX_ORDER blocks (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - mm/page_alloc: fix obsolete comment in deferred_pfn_valid() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/sev: Change npages to unsigned long in snp_accept_memory() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/unaccepted: Fix soft lockups caused by parallel memory acceptance (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/unaccepted: Make sure unaccepted table is mapped (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/efi: Safely enable unaccepted memory in UEFI (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/sev: Add SNP-specific unaccepted memory support (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/sev: Use large PSC requests if applicable (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/sev: Allow for use of the early boot GHCB for PSC requests (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/sev: Put PSC struct on the stack in prep for unaccepted memory support (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/sev: Fix calculation of end address based on number of pages (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Wrap exit reason with hcall_func() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Add unaccepted memory support (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Refactor try_accept_one() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/unaccepted: Avoid load_unaligned_zeropad() stepping into unaccepted memory (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: Add unaccepted memory support (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/boot/compressed: Handle unaccepted memory (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/unaccepted: Use ACPI reclaim memory for unaccepted memory table (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/libstub: Implement support for unaccepted memory (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/x86: Get full memory map in allocate_e820() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - memblock tests: Fix compilation errors. (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - mm: Add support for unaccepted memory (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/boot: Centralize __pa()/__va() definitions (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/boot: Add an efi.h header for the decompressor (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Make _tdx_hypercall() and __tdx_module_call() available in boot stub (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Drop flags from __tdx_hypercall() (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Disable NOTIFY_ENABLES (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Relax SEPT_VE_DISABLE check for debug TD (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Use ReportFatalError to report missing SEPT_VE_DISABLE (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - cpuidle, tdx: Make TDX code noinstr clean (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - x86/tdx: Remove TDX_HCALL_ISSUE_STI (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - mm: add pageblock_aligned() macro (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: memmap: Disregard bogus entries instead of returning them (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: memmap: Move manipulation routines into x86 arch tree (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: memmap: Move EFI fake memmap support into x86 arch tree (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: libstub: install boot-time memory map as config table (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: libstub: remove DT dependency from generic stub (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: libstub: unify initrd loading between architectures (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: libstub: remove pointless goto kludge (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: libstub: simplify efi_get_memory_map() and struct efi_boot_memmap (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: libstub: avoid efi_get_memory_map() for allocating the virt map (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: libstub: drop pointless get_memory_map() call (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/libstub: move efi_system_table global var into separate object (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi/x86: libstub: remove unused variable (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - efi: Correct comment on efi_memmap_alloc (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - drivers: fix typo in firmware/efi/memmap.c (Paolo Bonzini) [RHEL-20808 RHEL-10059]
  - netfilter: nf_tables: skip set commit for deleted/destroyed sets (Phil Sutter) [RHEL-20683 RHEL-20686 RHEL-20214 RHEL-20217] {CVE-2024-0193}
  - redhat: add missing -rt JIRAs (Jan Stancek)


author: Jan Stancek <jstancek@redhat.com> [5.14.0-362.1.1.el9_3]
changelog:
  - dlm: fix plock lookup when using multiple lockspaces (Alexander Aring) [2234868]
  - redhat: enable zstream release numbering for rhel 9.3 (Jan Stancek)
  - redhat: change default dist suffix for RHEL 9.3 (Jan Stancek)
  - thunderbolt: Fix Thunderbolt 3 display flickering issue on 2nd hot plug onwards (Desnes Nunes) [2233967]
  - Revert "firmware: raspberrypi: Fix a leak in 'rpi_firmware_get()'" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Relax base protocol sanity checks on the protocol list" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Fix incorrect error propagation in scmi_voltage_descriptors_get" (Lenny Szubowicz) [2234390]
  - Revert "pstore: Add priv field to pstore_record for backend specific use" (Lenny Szubowicz) [2234390]
  - Revert "efi: vars: Don't drop lock in the middle of efivar_init()" (Lenny Szubowicz) [2234390]
  - Revert "efi: vars: Add thin wrapper around EFI get/set variable interface" (Lenny Szubowicz) [2234390]
  - Revert "efi: pstore: Omit efivars caching EFI varstore access layer" (Lenny Szubowicz) [2234390]
  - Revert "efi: vars: Use locking version to iterate over efivars linked lists" (Lenny Szubowicz) [2234390]
  - Revert "efi: vars: Drop __efivar_entry_iter() helper which is no longer used" (Lenny Szubowicz) [2234390]
  - Revert "efi: vars: Remove deprecated 'efivars' sysfs interface" (Lenny Szubowicz) [2234390]
  - Revert "efi: vars: Switch to new wrapper layer" (Lenny Szubowicz) [2234390]
  - Revert "efi: avoid efivars layer when loading SSDTs from variables" (Lenny Szubowicz) [2234390]
  - Revert "efi: vars: Move efivar caching layer into efivarfs" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Add SCMI v3.1 System Power extensions" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Add devm_protocol_acquire helper" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Add SCMI System Power Control driver" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Add SCMI v3.1 powercap protocol basic support" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Generalize the fast channel support" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Add SCMI v3.1 powercap fast channels support" (Lenny Szubowicz) [2234390]
  - Revert "include: trace: Add SCMI fast channel tracing" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Use fast channel tracing" (Lenny Szubowicz) [2234390]
  - Revert "efi: Fix efi_power_off() not being run before acpi_power_off() when necessary" (Lenny Szubowicz) [2234390]
  - Revert "cpufreq: scmi: Use .register_em() to register with energy model" (Lenny Szubowicz) [2234390]
  - Revert "cpufreq: scmi: Support the power scale in micro-Watts in SCMI v3.1" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Get detailed power scale from perf" (Lenny Szubowicz) [2234390]
  - Revert "firmware: dmi: Use the proper accessor for the version field" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Fix missing kernel-doc in optee" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Improve checks in the info_get operations" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Harden accesses to the sensor domains" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Harden accesses to the reset domains" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Fix the asynchronous reset requests" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Add SCMI PM driver remove routine" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Disable struct randomization" (Lenny Szubowicz) [2234390]
  - Revert "efi/x86: libstub: remove unused variable" (Lenny Szubowicz) [2234390]
  - Revert "efi: capsule-loader: Fix use-after-free in efi_capsule_write" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: add some missing EFI prototypes" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: use EFI provided memcpy/memset routines" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: move efi_system_table global var into separate object" (Lenny Szubowicz) [2234390]
  - Revert "efi/dev-path-parser: Refactor _UID handling to use acpi_dev_uid_to_integer()" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: implement generic EFI zboot" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: fix type confusion for load_options_size" (Lenny Szubowicz) [2234390]
  - Revert "efi: efibc: avoid efivar API for setting variables" (Lenny Szubowicz) [2234390]
  - Revert "efi: efibc: Guard against allocation failure" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: drop pointless get_memory_map() call" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: check Shim mode using MokSBStateRT" (Lenny Szubowicz) [2234390]
  - Revert "Revert "firmware: arm_scmi: Add clock management to the SCMI power domain"" (Lenny Szubowicz) [2234390]
  - Revert "firmware: dmi: Fortify entry point length checks" (Lenny Szubowicz) [2234390]
  - Revert "psci: Fix the function type for psci_initcall_t" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: avoid efi_get_memory_map() for allocating the virt map" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: simplify efi_get_memory_map() and struct efi_boot_memmap" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: remove pointless goto kludge" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: unify initrd loading between architectures" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: remove DT dependency from generic stub" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: install boot-time memory map as config table" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: refactor the initrd measuring functions" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: measure EFI LoadOptions" (Lenny Szubowicz) [2234390]
  - Revert "efi/arm: libstub: move ARM specific code out of generic routines" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: fix up the last remaining open coded boot service call" (Lenny Szubowicz) [2234390]
  - Revert "efi: zboot: create MemoryMapped() device path for the parent if needed" (Lenny Szubowicz) [2234390]
  - Revert "efi/arm64: libstub: avoid SetVirtualAddressMap() when possible" (Lenny Szubowicz) [2234390]
  - Revert "firmware: raspberrypi: Use dev_err_probe() to simplify code" (Lenny Szubowicz) [2234390]
  - Revert "efi: pstore: Follow convention for the efi-pstore backend name" (Lenny Szubowicz) [2234390]
  - Revert "efi/cper: Export several helpers for ghes_edac to use" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Remove zboot signing from build options" (Lenny Szubowicz) [2234390]
  - Revert "efi: ssdt: Don't free memory if ACPI table was loaded successfully" (Lenny Szubowicz) [2234390]
  - Revert "efi: efivars: Fix variable writes without query_variable_store()" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Give efi_main() asmlinkage qualification" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Fix incorrect payload size in zboot header" (Lenny Szubowicz) [2234390]
  - Revert "efi: runtime: Don't assume virtual mappings are missing if VA == PA == 0" (Lenny Szubowicz) [2234390]
  - Revert "firmware: imx: scu-pd: add missed USB_1_PHY pd" (Lenny Szubowicz) [2234390]
  - Revert "efi: random: reduce seed size to 32 bytes" (Lenny Szubowicz) [2234390]
  - Revert "efi: random: Use 'ACPI reclaim' memory for random seed" (Lenny Szubowicz) [2234390]
  - Revert "firmware: raspberrypi: Introduce rpi_firmware_find_node()" (Lenny Szubowicz) [2234390]
  - Revert "firmware: ti_sci: Switch transport to polled mode during system suspend" (Lenny Szubowicz) [2234390]
  - Revert "firmware: ti_sci: Use the bitmap API to allocate bitmaps" (Lenny Szubowicz) [2234390]
  - Revert "firmware: ti_sci: Use the non-atomic bitmap API when applicable" (Lenny Szubowicz) [2234390]
  - Revert "firmware: ti_sci: Fix polled mode during system suspend" (Lenny Szubowicz) [2234390]
  - Revert "efi: efivars: Fix variable writes with unsupported query_variable_store()" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Cleanup the core driver removal callback" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Suppress the driver's bind attributes" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Fix devres allocation device in virtio transport" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Fix deferred_tx_wq release on error paths" (Lenny Szubowicz) [2234390]
  - Revert "firmware: ti_sci: Use devm_bitmap_zalloc when applicable" (Lenny Szubowicz) [2234390]
  - Revert "ARM: 9255/1: efi/dump UEFI runtime page tables for ARM" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Drop randomization of runtime memory map" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Drop handling of EFI properties table" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Deduplicate ftrace command line argument filtering" (Lenny Szubowicz) [2234390]
  - Revert "arm64: efi: Move dcache cleaning of loaded image out of efi_enter_kernel()" (Lenny Szubowicz) [2234390]
  - Revert "arm64: efi: Avoid dcache_clean_poc() altogether in efi_enter_kernel()" (Lenny Szubowicz) [2234390]
  - Revert "arm64: efi: Move efi-entry.S into the libstub source directory" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Use local strncmp() implementation unconditionally" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Clone memcmp() into the stub" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Enable efi_printk() in zboot decompressor" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Move screen_info handling to common code" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Provide local implementations of strrchr() and memchr()" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Factor out EFI stub entrypoint into separate file" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Add image code and data size to the zimage metadata" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Factor out min alignment and preferred kernel load address" (Lenny Szubowicz) [2234390]
  - Revert "efi/arm64: libstub: Split off kernel image relocation for builtin stub" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Merge zboot decompressor with the ordinary stub" (Lenny Szubowicz) [2234390]
  - Revert "arm64: unwind: add asynchronous unwind tables to kernel and modules" (Lenny Szubowicz) [2234390]
  - Revert "arm64: efi: Force the use of SetVirtualAddressMap() on Altra machines" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Implement devicepath support for initrd commandline loader" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Permit mixed mode return types other than efi_status_t" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Add mixed mode support to command line initrd loader" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Undeprecate the command line initrd loader" (Lenny Szubowicz) [2234390]
  - Revert "efi: memmap: Move EFI fake memmap support into x86 arch tree" (Lenny Szubowicz) [2234390]
  - Revert "efi: Correct comment on efi_memmap_alloc" (Lenny Szubowicz) [2234390]
  - Revert "drivers: fix typo in firmware/efi/memmap.c" (Lenny Szubowicz) [2234390]
  - Revert "efi: memmap: Move manipulation routines into x86 arch tree" (Lenny Szubowicz) [2234390]
  - Revert "efi: pstore: Add module parameter for setting the record size" (Lenny Szubowicz) [2234390]
  - Revert "efi: random: combine bootloader provided RNG seed with RNG protocol output" (Lenny Szubowicz) [2234390]
  - Revert "firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe()" (Lenny Szubowicz) [2234390]
  - Revert "efi: stub: use random seed from EFI variable" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: Always enable initrd command line loader and bump version" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_ffa: Move constants to header file" (Lenny Szubowicz) [2234390]
  - Revert "efi: Put Linux specific magic number in the DOS header" (Lenny Szubowicz) [2234390]
  - Revert "efi: fix NULL-deref in init error path" (Lenny Szubowicz) [2234390]
  - Revert "efi: fix userspace infinite retry read efivars after EFI runtime services page fault" (Lenny Szubowicz) [2234390]
  - Revert "firmware/sysfb: Fix EFI/VESA format selection" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Clear stale xfer->hdr.status" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Harden shared memory access in fetch_response" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Harden shared memory access in fetch_notification" (Lenny Szubowicz) [2234390]
  - Revert "firmware: arm_scmi: Fix virtio channels cleanup on shutdown" (Lenny Szubowicz) [2234390]
  - Revert "efi/earlycon: Replace open coded strnchrnul()" (Lenny Szubowicz) [2234390]
  - Revert "firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle" (Lenny Szubowicz) [2234390]
  - Revert "efi: memmap: Disregard bogus entries instead of returning them" (Lenny Szubowicz) [2234390]
  - Revert "efi: verify that variable services are supported" (Lenny Szubowicz) [2234390]
  - Revert "efi: efivars: prevent double registration" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: Add memory attribute protocol definitions" (Lenny Szubowicz) [2234390]
  - Revert "efi: Accept version 2 of memory attributes table" (Lenny Szubowicz) [2234390]
  - Revert "efi: fix potential NULL deref in efi_mem_reserve_persistent" (Lenny Szubowicz) [2234390]
  - Revert "efi: zboot: Use EFI protocol to remap code/data with the right attributes" (Lenny Szubowicz) [2234390]
  - Revert "efi: Use standard format for printing the EFI revision" (Lenny Szubowicz) [2234390]
  - Revert "efi: Discover BTI support in runtime services regions" (Lenny Szubowicz) [2234390]
  - Revert "arm64: efi: Force the use of SetVirtualAddressMap() on eMAG and Altra Max machines" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: zboot: Mark zboot EFI application as NX compatible" (Lenny Szubowicz) [2234390]
  - Revert "efi: earlycon: Reprobe after parsing config tables" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: smbios: Use length member instead of record struct size" (Lenny Szubowicz) [2234390]
  - Revert "arm64: efi: Use SMBIOS processor version to key off Ampere quirk" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: smbios: Drop unused 'recsize' parameter" (Lenny Szubowicz) [2234390]
  - Revert "efi: sysfb_efi: Fix DMI quirks not working for simpledrm" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: zboot: Add compressed image to make targets" (Lenny Szubowicz) [2234390]
  - Revert "efi/libstub: randomalloc: Return EFI_OUT_OF_RESOURCES on failure" (Lenny Szubowicz) [2234390]
  - Revert "efi: Bump stub image version for macOS HVF compatibility" (Lenny Szubowicz) [2234390]
  - Revert "firmware/sysfb: Fix VESA format selection" (Lenny Szubowicz) [2234390]
  - Revert "redhat/configs: update firmware configs" (Lenny Szubowicz) [2234390]
  - Revert "ACPI: power: Switch to sys-off handler API" (Lenny Szubowicz) [2234390]
  - Revert "gsmi: fix null-deref in gsmi_get_variable" (Lenny Szubowicz) [2234390]
  - Revert "efi: efivars: drop kobject from efivars_register()" (Lenny Szubowicz) [2234390]
  - Revert "efi: libstub: fix efi_load_initrd_dev_path() kernel-doc comment" (Lenny Szubowicz) [2234390]
  - Revert "notifier: Add atomic_notifier_call_chain_is_empty()" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Wrap legacy power-off callbacks into sys-off handlers" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Add do_kernel_power_off()" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Add stub for pm_power_off" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Add kernel_can_power_off()" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Add register_platform_power_off()" (Lenny Szubowicz) [2234390]
  - Revert "reboot: Remove pm_power_off_prepare()" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Change registration order of legacy power-off handler" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Use static handler for register_platform_power_off()" (Lenny Szubowicz) [2234390]
  - Revert "kernel/reboot: Fix powering off using a non-syscall code paths" (Lenny Szubowicz) [2234390]
  - Revert "PM: hibernate: Use kernel_can_power_off()" (Lenny Szubowicz) [2234390]
  - x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled (Waiman Long) [2227917]
  - Documentation/hw-vuln: Document the interaction between IBRS and STIBP (Waiman Long) [2227917]
  - x86/CPU/AMD: Make sure EFER[AIBRSE] is set (Waiman Long) [2227917]
  - sched/core: Use empty mask to reset cpumasks in sched_setaffinity() (Waiman Long) [2219681]
  - cgroup/cpuset: Extend test_cpuset_prs.sh to test remote partition (Waiman Long) [2174568]
  - cgroup/cpuset: Documentation update for partition (Waiman Long) [2174568]
  - cgroup/cpuset: Check partition conflict with housekeeping setup (Waiman Long) [2174568]
  - cgroup/cpuset: Introduce remote partition (Waiman Long) [2174568]
  - cgroup/cpuset: Add cpuset.cpus.exclusive for v2 (Waiman Long) [2174568]
  - cgroup/cpuset: Add cpuset.cpus.exclusive.effective for v2 (Waiman Long) [2174568]
  - cgroup/cpuset: simplify the percpu kthreads check in update_tasks_cpumask() (Waiman Long) [2174568]
  - cgroup/cpuset: Allow suppression of sched domain rebuild in update_cpumasks_hier() (Waiman Long) [2174568]
  - cgroup/cpuset: Improve temporary cpumasks handling (Waiman Long) [2174568]
  - cgroup/cpuset: Extract out CS_CPU_EXCLUSIVE & CS_SCHED_LOAD_BALANCE handling (Waiman Long) [2174568]
  - cgroup/cpuset: Inherit parent's load balance state in v2 (Waiman Long) [2174568]
  - cgroup/cpuset: Free DL BW in case can_attach() fails (Waiman Long) [2174568]
  - sched/deadline: Create DL BW alloc, free & check overflow interface (Waiman Long) [2174568]
  - cgroup/cpuset: Iterate only if DEADLINE tasks are present (Waiman Long) [2174568]
  - sched/cpuset: Keep track of SCHED_DEADLINE task in cpusets (Waiman Long) [2174568]
  - sched/cpuset: Bring back cpuset_mutex (Waiman Long) [2174568]
  - cgroup/cpuset: Rename functions dealing with DEADLINE accounting (Waiman Long) [2174568]
  - cgroup/cpuset: Minor updates to test_cpuset_prs.sh (Waiman Long) [2174568]
  - cgroup/cpuset: Include offline CPUs when tasks' cpumasks in top_cpuset are updated (Waiman Long) [2174568]
  - cgroup/cpuset: Skip task update if hotplug doesn't affect current cpuset (Waiman Long) [2174568]
  - kselftest/cgroup: Add cleanup() to test_cpuset_prs.sh (Waiman Long) [2174568]
  - kselftest/cgroup: Fix gathering number of CPUs (Waiman Long) [2174568]
  - redhat: configs: Disable CONFIG_CRYPTO_STATS since performance issue for storage (Herbert Xu) [2227964]
  - redhat: list Z-Jiras in the changelog before Y-Jiras (Herton R. Krzesinski)


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.6.1.el9_4]
changelog:
  - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Daniel Vacek) [RHEL-26063]
  - ASoC: Intel: soc-acpi: rt713+rt1316, no sdw-dmic config (Jaroslav Kysela) [RHEL-26456]
  - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Maxim Levitsky) [RHEL-26435]
  - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Maxim Levitsky) [RHEL-26435]
  - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ivan Vecera) [RHEL-26463 RHEL-26465] {CVE-2024-26586}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.7.1.el9_4]
changelog:
  - NFS: Read unlock folio on nfs_page_create_from_folio() error (Benjamin Coddington) [RHEL-18029]
  - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-15701]
  - i40e: Fix firmware version comparison function (Ivan Vecera) [RHEL-15701]
  - i40e: disable NAPI right after disabling irqs when handling xsk_pool (Ivan Vecera) [RHEL-15701]
  - i40e: take into account XDP Tx queues when stopping rings (Ivan Vecera) [RHEL-15701]
  - i40e: avoid double calling i40e_pf_rxq_wait() (Ivan Vecera) [RHEL-15701]
  - i40e: Fix wrong mask used during DCB config (Ivan Vecera) [RHEL-15701]
  - i40e: Fix waiting for queues of all VSIs to be disabled (Ivan Vecera) [RHEL-15701]
  - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-15701]
  - net: intel: fix old compiler regressions (Ivan Vecera) [RHEL-15701]
  - i40e: update xdp_rxq_info::frag_size for ZC enabled Rx queue (Ivan Vecera) [RHEL-15701]
  - i40e: set xdp_rxq_info::frag_size (Ivan Vecera) [RHEL-15701]
  - intel: xsk: initialize skb_frag_t::bv_offset in ZC drivers (Ivan Vecera) [RHEL-15701]
  - i40e: handle multi-buffer packets that are shrunk by xdp prog (Ivan Vecera) [RHEL-15701]
  - i40e: Include types.h to some headers (Ivan Vecera) [RHEL-15701]
  - i40e: Restore VF MSI-X state during PCI reset (Ivan Vecera) [RHEL-15701]
  - i40e: fix use-after-free in i40e_aqc_add_filters() (Ivan Vecera) [RHEL-15701]
  - i40e: Avoid unnecessary use of comma operator (Ivan Vecera) [RHEL-15701]
  - i40e: Fix VF disable behavior to block all traffic (Ivan Vecera) [RHEL-15701]
  - i40e: Fix filter input checks to prevent config with invalid values (Ivan Vecera) [RHEL-15701]
  - i40e: field get conversion (Ivan Vecera) [RHEL-15701]
  - i40e: field prep conversion (Ivan Vecera) [RHEL-15701]
  - intel: add bit macro includes where needed (Ivan Vecera) [RHEL-15701]
  - i40e: remove fake support of rx-frames-irq (Ivan Vecera) [RHEL-15701]
  - i40e: Fix ST code value for Clause 45 (Ivan Vecera) [RHEL-15701]
  - i40e: Fix unexpected MFS warning message (Ivan Vecera) [RHEL-15701]
  - i40e: Remove queue tracking fields from i40e_adminq_ring (Ivan Vecera) [RHEL-15701]
  - i40e: Remove AQ register definitions for VF types (Ivan Vecera) [RHEL-15701]
  - i40e: Delete unused and useless i40e_pf fields (Ivan Vecera) [RHEL-15701]
  - i40e: Fix adding unsupported cloud filters (Ivan Vecera) [RHEL-15701]
  - i40e: Delete unused i40e_mac_info fields (Ivan Vecera) [RHEL-15701]
  - i40e: Move inline helpers to i40e_prototype.h (Ivan Vecera) [RHEL-15701]
  - i40e: Remove VF MAC types (Ivan Vecera) [RHEL-15701]
  - i40e: Use helpers to check running FW and AQ API versions (Ivan Vecera) [RHEL-15701]
  - i40e: Add other helpers to check version of running firmware and AQ API (Ivan Vecera) [RHEL-15701]
  - i40e: Move i40e_is_aq_api_ver_ge helper (Ivan Vecera) [RHEL-15701]
  - i40e: Initialize hardware capabilities at single place (Ivan Vecera) [RHEL-15701]
  - i40e: Consolidate hardware capabilities (Ivan Vecera) [RHEL-15701]
  - i40e: Use DECLARE_BITMAP for flags field in i40e_hw (Ivan Vecera) [RHEL-15701]
  - i40e: Use DECLARE_BITMAP for flags and hw_features fields in i40e_pf (Ivan Vecera) [RHEL-15701]
  - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-15701]
  - i40e: Remove unused flags (Ivan Vecera) [RHEL-15701]
  - i40e: add an error code check in i40e_vsi_setup (Ivan Vecera) [RHEL-15701]
  - i40e: increase max descriptors for XL710 (Ivan Vecera) [RHEL-15701]
  - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (Ivan Vecera) [RHEL-15701]
  - i40e: sync next_to_clean and next_to_process for programming status desc (Ivan Vecera) [RHEL-15701]
  - i40e: Fix I40E_FLAG_VF_VLAN_PRUNING value (Ivan Vecera) [RHEL-15701]
  - i40e: xsk: remove count_mask (Ivan Vecera) [RHEL-15701]
  - i40e: use scnprintf over strncpy+strncat (Ivan Vecera) [RHEL-15701]
  - intel: fix format warnings (Ivan Vecera) [RHEL-15701]
  - i40e: Refactor and rename i40e_read_pba_string() (Ivan Vecera) [RHEL-15701]
  - i40e: Split and refactor i40e_nvm_version_str() (Ivan Vecera) [RHEL-15701]
  - i40e: prevent crash on probe if hw registers have invalid values (Ivan Vecera) [RHEL-15701]
  - i40e: Move DDP specific macros and structures to i40e_ddp.c (Ivan Vecera) [RHEL-15701]
  - i40e: Remove circular header dependencies and fix headers (Ivan Vecera) [RHEL-15701]
  - i40e: Split i40e_osdep.h (Ivan Vecera) [RHEL-15701]
  - i40e: Move memory allocation structures to i40e_alloc.h (Ivan Vecera) [RHEL-15701]
  - i40e: Simplify memory allocation functions (Ivan Vecera) [RHEL-15701]
  - i40e: Refactor I40E_MDIO_CLAUSE* macros (Ivan Vecera) [RHEL-15701]
  - i40e: Move I40E_MASK macro to i40e_register.h (Ivan Vecera) [RHEL-15701]
  - i40e: Remove back pointer from i40e_hw structure (Ivan Vecera) [RHEL-15701]
  - i40e: Add rx_missed_errors for buffer exhaustion (Ivan Vecera) [RHEL-15701]
  - net: Tree wide: Replace xdp_do_flush_map() with xdp_do_flush(). (Ivan Vecera) [RHEL-15701]
  - i40e: fix potential memory leaks in i40e_remove() (Ivan Vecera) [RHEL-15701]
  - i40e: fix potential NULL pointer dereferencing of pf->vf i40e_sync_vsi_filters() (Ivan Vecera) [RHEL-15701]
  - i40e: fix misleading debug logs (Ivan Vecera) [RHEL-15701]
  - i40e: Replace one-element array with flex-array member in struct i40e_profile_aq_section (Ivan Vecera) [RHEL-15701]
  - i40e: Replace one-element array with flex-array member in struct i40e_section_table (Ivan Vecera) [RHEL-15701]
  - i40e: Replace one-element array with flex-array member in struct i40e_profile_segment (Ivan Vecera) [RHEL-15701]
  - i40e: Replace one-element array with flex-array member in struct i40e_package_header (Ivan Vecera) [RHEL-15701]
  - i40e: Remove unused function declarations (Ivan Vecera) [RHEL-15701]
  - i40e: remove i40e_status (Ivan Vecera) [RHEL-15701]
  - i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (Ivan Vecera) [RHEL-15701]
  - i40e: xsk: add TX multi-buffer support (Ivan Vecera) [RHEL-15701]
  - i40e: xsk: add RX multi-buffer support (Ivan Vecera) [RHEL-15701]
  - i40e, xsk: fix comment typo (Ivan Vecera) [RHEL-15701]
  - i40e: remove unnecessary check for old MAC == new MAC (Ivan Vecera) [RHEL-15701]
  - i40e: fix i40e_setup_misc_vector() error handling (Ivan Vecera) [RHEL-15701]
  - i40e: fix accessing vsi->active_filters without holding lock (Ivan Vecera) [RHEL-15701]
  - i40e: Add support for VF to specify its primary MAC address (Ivan Vecera) [RHEL-15701]
  - i40e: fix registers dump after run ethtool adapter self test (Ivan Vecera) [RHEL-15701]
  - i40e: fix flow director packet filter programming (Ivan Vecera) [RHEL-15701]
  - i40e: add support for XDP multi-buffer Rx (Ivan Vecera) [RHEL-15701]
  - i40e: add xdp_buff to i40e_ring struct (Ivan Vecera) [RHEL-15701]
  - i40e: introduce next_to_process to i40e_ring (Ivan Vecera) [RHEL-15701]
  - i40e: use frame_sz instead of recalculating truesize for building skb (Ivan Vecera) [RHEL-15701]
  - i40e: Change size to truesize when using i40e_rx_buffer_flip() (Ivan Vecera) [RHEL-15701]
  - i40e: add pre-xdp page_count in rx_buffer (Ivan Vecera) [RHEL-15701]
  - i40e: change Rx buffer size for legacy-rx to support XDP multi-buffer (Ivan Vecera) [RHEL-15701]
  - i40e: consolidate maximum frame size calculation for vsi (Ivan Vecera) [RHEL-15701]
  - i40e: check vsi type before setting xdp_features flag (Ivan Vecera) [RHEL-15701]
  - drivers: net: turn on XDP features (Ivan Vecera) [RHEL-15701]
  - i40e: add xdp frags support to ndo_xdp_xmit (Ivan Vecera) [RHEL-15701]
  - dmaengine: idxd: Ensure safe user copy of completion record (Jerry Snitselaar) [RHEL-28511]
  - dmaengine: idxd: Remove shadow Event Log head stored in idxd (Jerry Snitselaar) [RHEL-28511]
  - dmaengine: idxd: Move dma_free_coherent() out of spinlocked context (Jerry Snitselaar) [RHEL-28511]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.8.1.el9_4]
changelog:
  - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29679]
  - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29679]
  - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-7976]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.10.1.el9_4]
changelog:
  - NFS: remove sync_mode test from nfs_writepage_locked() (Jeffrey Layton) [RHEL-28630]
  - nfs: Remove writepage (Jeffrey Layton) [RHEL-28630]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.12.1.el9_4]
changelog:
  - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28877 RHEL-28878] {CVE-2023-52489}
  - Revert "[redhat] kabi: add symbol __scsi_execute to stablelist" (Ewan D. Milne) [RHEL-30725]


author: Mark Will <mark.will@oracle.com> [5.14.0-427.13.1.el9_4.OL9]
changelog:
  - Disable UKI signing [Orabug: 36571828]
  - Update Oracle Linux certificates (Kevin Lyons)
  - Disable signing for aarch64 (Ilya Okomin)
  - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237]
  - Update x509.genkey [Orabug: 24817676]
  - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5.el9
  - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535]
  - Add Oracle Linux IMA certificates


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.14.1.el9_4]
changelog:
  - crypto: dh - implement FIPS PCT (Vladis Dronov) [RHEL-27009 RHEL-25845]
  - crypto: tcrypt - add ffdhe2048(dh) test (Vladis Dronov) [RHEL-27009 RHEL-25845]
  - crypto: dh - Make public key test FIPS-only (Vladis Dronov) [RHEL-27009 RHEL-25845]
  - printk: allow disabling printk per-console device kthreads at boot (Luis Claudio R. Goncalves) [RHEL-30678 RHEL-17709]
  - mm, vmscan: remove ISOLATE_UNMAPPED (Nico Pache) [RHEL-29235 RHEL-28667]
  - trace-vmscan-postprocess: sync with tracepoints updates (Nico Pache) [RHEL-29235 RHEL-28667]
  - tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate (Nico Pache) [RHEL-29235 RHEL-28667]
  - mm/mglru: skip special VMAs in lru_gen_look_around() (Nico Pache) [RHEL-29235 RHEL-28667]
  - mm/mglru: reclaim offlined memcgs harder (Nico Pache) [RHEL-29235 RHEL-28667]
  - mm/mglru: try to stop at high watermarks (Nico Pache) [RHEL-29235 RHEL-28667]
  - mm/mglru: fix underprotected page cache (Nico Pache) [RHEL-29235 RHEL-28667]
  - mm: multi-gen LRU: reuse some legacy trace events (Nico Pache) [RHEL-29235 RHEL-28667]
  - mm: multi-gen LRU: improve design doc (Nico Pache) [RHEL-29235 RHEL-28667]
  - mm: multi-gen LRU: clean up sysfs code (Nico Pache) [RHEL-29235 RHEL-28667]
  - cpu/hotplug: Do not bail-out in DYING/STARTING sections (David Arcari) [RHEL-29673 RHEL-19514]
  - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-29079 RHEL-17113] {CVE-2023-6240}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.15.1.el9_4]
changelog:
  - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-30110 RHEL-19000]
  - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-30110 RHEL-19000]
  - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-30110 RHEL-19000]
  - crypto: iaa - mark tech preview (Vladis Dronov) [RHEL-32242 RHEL-29685]
  - crypto: iaa - Fix nr_cpus < nr_iaa case (Vladis Dronov) [RHEL-32242 RHEL-29685]
  - crypto: iaa - fix the missing CRYPTO_ALG_ASYNC in cra_flags (Vladis Dronov) [RHEL-32242 RHEL-29685]
  - crypto: iaa - Fix comp/decomp delay statistics (Vladis Dronov) [RHEL-32242 RHEL-29685]
  - crypto: iaa - Fix async_disable descriptor leak (Vladis Dronov) [RHEL-32242 RHEL-29685]
  - crypto: iaa - Remove unnecessary debugfs_create_dir() error check in iaa_crypto_debugfs_init() (Vladis Dronov) [RHEL-32242 RHEL-29685]
  - crypto: iaa - Remove header table code (Vladis Dronov) [RHEL-32242 RHEL-29685]
  - cgroup: cgroup-v1: do not exclude cgrp_dfl_root (Laurent Vivier) [RHEL-32716 RHEL-31381]
  - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30030 RHEL-30031] {CVE-2024-25743 CVE-2024-25742}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.16.1.el9_4]
changelog:
  - memory: tegra: Skip SID programming if SID registers aren't set (Robert Foss) [RHEL-32675 RHEL-23656]
  - memory: tegra: Add SID override programming for MC clients (Robert Foss) [RHEL-32675 RHEL-23656]
  - iommu: Don't reserve 0-length IOVA region (Robert Foss) [RHEL-32675 RHEL-23656]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.17.1.el9_4]
changelog:
  - ceph: switch to use cap_delay_lock for the unlink delay list (Jay Shin) [RHEL-33003 RHEL-32997]
  - ceph: remove useless session parameter for check_caps() (Xiubo Li) [RHEL-33003 RHEL-19813]
  - ceph: flush the dirty caps immediatelly when quota is approaching (Xiubo Li) [RHEL-33003 RHEL-19813]
  - vhost: Add smp_rmb() in vhost_enable_notify() (Gavin Shan) [RHEL-31839 RHEL-26104]
  - vhost: Add smp_rmb() in vhost_vq_avail_empty() (Gavin Shan) [RHEL-31839 RHEL-26104]
  - iommu/vt-d: Support enforce_cache_coherency only for empty domains (Jerry Snitselaar) [RHEL-32793 RHEL-31083]
  - iommu/vt-d: Add MTL to quirk list to skip TE disabling (Jerry Snitselaar) [RHEL-32793 RHEL-31083]
  - iommu/vt-d: Make context clearing consistent with context mapping (Jerry Snitselaar) [RHEL-32793 RHEL-31083]
  - iommu/vt-d: Disable PCI ATS in legacy passthrough mode (Jerry Snitselaar) [RHEL-32793 RHEL-31083]
  - iommu/vt-d: Omit devTLB invalidation requests when TES=0 (Jerry Snitselaar) [RHEL-32793 RHEL-31083]
  - PCI/MSI: Prevent MSI hardware interrupt number truncation (Myron Stowe) [RHEL-33656 RHEL-21453]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.18.1.el9_4]
changelog:
  - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-32971 RHEL-30082] {CVE-2024-26642}
  - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-33070 RHEL-30078] {CVE-2024-26643}
  - netfilter: nft_ct: fix l3num expectations with inet pseudo family (Phil Sutter) [RHEL-32963 RHEL-31345] {CVE-2024-26673}
  - netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations (Phil Sutter) [RHEL-32963 RHEL-31345] {CVE-2024-26673}
  - arm64: tlb: Fix TLBI RANGE operand (Shaoqin Huang) [RHEL-33412 RHEL-26259]
  - arm64/mm: Modify range-based tlbi to decrement scale (Shaoqin Huang) [RHEL-33412 RHEL-26259]
  - rh_messages.h: mark mlx5 on Bluefield-3 as unmaintained (Scott Weaver) [RHEL-35878 RHEL-33061]
  - net: ip_tunnel: prevent perpetual headroom growth (Guillaume Nault) [RHEL-33934 RHEL-31816] {CVE-2024-26804}
  - gitlab-ci: use zstream builder container image (Michael Hofmann)
  - selftests: net: gro fwd: update vxlan GRO test expectations (Antoine Tenart) [RHEL-30910 RHEL-19729]
  - udp: prevent local UDP tunnel packets from being GROed (Antoine Tenart) [RHEL-30910 RHEL-19729]
  - udp: do not transition UDP GRO fraglist partial checksums to unnecessary (Antoine Tenart) [RHEL-30910 RHEL-19729]
  - gro: fix ownership transfer (Antoine Tenart) [RHEL-30910 RHEL-19729]
  - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Antoine Tenart) [RHEL-30910 RHEL-19729]
  - bpf, tcx: Get rid of tcx_link_const (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Add additional mprog query test coverage (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Make seen_tc* variable tests more robust (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Test query on empty mprog and pass revision into attach (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Adapt assert_mprog_count to always expect 0 count (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Test bpf_mprog query API via libbpf and raw syscall (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftest/bpf: Add various selftests for program limits (Felix Maurer) [RHEL-33062 RHEL-28590]
  - bpf: Refuse unused attributes in bpf_prog_{attach,detach} (Felix Maurer) [RHEL-33062 RHEL-28590]
  - bpf: Handle bpf_mprog_query with NULL entry (Felix Maurer) [RHEL-33062 RHEL-28590]
  - net: Fix skb consume leak in sch_handle_egress (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Add various more tcx test cases (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Add test for detachment on empty mprog entry (Felix Maurer) [RHEL-33062 RHEL-28590]
  - tcx: Fix splat during dev unregister (Felix Maurer) [RHEL-33062 RHEL-28590]
  - tcx: Fix splat in ingress_destroy upon tcx_entry_free (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Add mprog API tests for BPF tcx links (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Add mprog API tests for BPF tcx opts (Felix Maurer) [RHEL-33062 RHEL-28590]
  - bpf: Add fd-based tcx multi-prog infra with link support (Felix Maurer) [RHEL-33062 RHEL-28590]
  - bpftool: Implement link show support for tcx (Artem Savkov) [RHEL-33062 RHEL-23643]
  - bpftool: Extend net dump with tcx progs (Artem Savkov) [RHEL-33062 RHEL-23643]
  - bpf: fix precision backtracking instruction iteration (Jay Shin) [RHEL-35230 RHEL-23643]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.19.1.el9_4]
changelog:
  - x86/mce: Cleanup mce_usable_address() (Prarit Bhargava) [RHEL-33810 RHEL-25415]
  - x86/mce: Define amd_mce_usable_address() (Prarit Bhargava) [RHEL-33810 RHEL-25415]
  - x86/MCE/AMD: Split amd_mce_is_memory_error() (Prarit Bhargava) [RHEL-33810 RHEL-25415]
  - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35302 RHEL-35078] {CVE-2024-26993}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.20.1.el9_4]
changelog:
  - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-33968 RHEL-31732] {CVE-2024-26735}
  - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-36145 RHEL-29035]
  - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-36145 RHEL-29035]
  - PCI: Fix pci_rh_check_status() call semantics (Luiz Capitulino) [RHEL-36541 RHEL-35032]
  - cxgb4: Properly lock TX queue for the selftest. (John B. Wyatt IV) [RHEL-36530 RHEL-31990 RHEL-9354]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.21.1.el9_4]
changelog:
  - drm/i915/display: Increase number of fast wake precharge pulses (Mika Penttilä) [RHEL-36534 RHEL-20439]
  - drm/i915/psr: Improve fast and IO wake lines calculation (Mika Penttilä) [RHEL-36534 RHEL-20439]
  - drm/i915/display: Make intel_dp_aux_fw_sync_len available for PSR code (Mika Penttilä) [RHEL-36534 RHEL-20439]
  - smb: client: improve DFS mount check (Jay Shin) [RHEL-36743 RHEL-28739]
  - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-37622 RHEL-9872]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.22.1.el9_4]
changelog:
  - dpll: fix dpll_pin_on_pin_register() for multiple parent pins (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: indent DPLL option type by a tab (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: fix dpll_xa_ref_*_del() for multiple registrations (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: spec: use proper enum for pin capabilities attribute (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: move all dpll<>netdev helpers to dpll code (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: fix build failure due to rcu_dereference_check() on unknown type (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: rely on rcu for netdev_dpll_pin() (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: fix possible deadlock during netlink dump operation (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: check that pin is registered in __dpll_pin_unregister() (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: move xa_erase() call in to match dpll_pin_alloc() error path order (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: expose fractional frequency offset value to user (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: allocate pin ids in cycle (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: remove leftover mode_supported() op and use mode_get() instead (Petr Oros) [RHEL-36572 RHEL-32098]
  - Documentation: dpll: wrap DPLL_CMD_PIN_GET output in a code block (Petr Oros) [RHEL-36572 RHEL-32098]
  - Documentation: dpll: Fix code blocks (Petr Oros) [RHEL-36572 RHEL-32098]
  - MAINTAINERS: adjust header file entry in DPLL SUBSYSTEM (Petr Oros) [RHEL-36572 RHEL-32098]
  - netdev: Remove unneeded semicolon (Petr Oros) [RHEL-36572 RHEL-32098]
  - netlink: add variable-length / auto integers (Petr Oros) [RHEL-36572 RHEL-30145]
  - netlink: allow be16 and be32 types in all uint policy checks (Ivan Vecera) [RHEL-36572 RHEL-30656]
  - net: netlink: recommend policy range validation (Ivan Vecera) [RHEL-36572 RHEL-30344]
  - netlink: add nla be16/32 types to minlen array (Ivan Vecera) [RHEL-36572 RHEL-30344]
  - netlink: introduce bigendian integer types (Michal Schmidt) [RHEL-36572 RHEL-30344]
  - netlink: introduce NLA_POLICY_MAX_BE (Ivan Vecera) [RHEL-36572 RHEL-30344]
  - ice: use irq_update_affinity_hint() (Michal Schmidt) [RHEL-38512 RHEL-35293]
  - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-9296 RHEL-19514]
  - x86/smpboot: Make TSC synchronization function call based (David Arcari) [RHEL-9296 RHEL-19514]
  - Bluetooth: hci_core: Remove le_restart_scan work (David Marlin) [RHEL-38524 RHEL-30099]
  - hwmon: (coretemp) Enlarge per package core count limit (David Arcari) [RHEL-35447 RHEL-22705]
  - hwmon: (coretemp) Fix bogus core_id to attr name mapping (David Arcari) [RHEL-35447 RHEL-22705]
  - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-35447 RHEL-22705]
  - perf: arm_cspmu: Reject events meant for other PMUs (Michael Petlan) [RHEL-34991 RHEL-25824]
  - smb: client: refresh referral without acquiring refpath_lock (Jay Shin) [RHEL-38904 RHEL-7986]
  - smb: client: guarantee refcounted children from parent session (Jay Shin) [RHEL-38904 RHEL-7986]
  - smb3: show beginning time for per share stats (Jay Shin) [RHEL-38904 RHEL-31245]
  - smb: client: fix mount when dns_resolver key is not available (Jay Shin) [RHEL-38904 RHEL-31245]
  - smb: client: get rid of dfs code dep in namespace.c (Jay Shin) [RHEL-38904 RHEL-31245]
  - smb: client: get rid of dfs naming in automount code (Jay Shin) [RHEL-38904 RHEL-31245]
  - smb: client: rename cifs_dfs_ref.c to namespace.c (Jay Shin) [RHEL-38904 RHEL-31245]
  - smb: client: ensure to try all targets when finding nested links (Jay Shin) [RHEL-38904 RHEL-31245]
  - smb: client: introduce DFS_CACHE_TGT_LIST() (Jay Shin) [RHEL-38904 RHEL-31245]
  - smb: client: remove redundant pointer 'server' (Jay Shin) [RHEL-38904 RHEL-28739]
  - smb: client: fix parsing of source mount option (Jay Shin) [RHEL-38904 RHEL-28739]
  - integrity: eliminate unnecessary "Problem loading X.509 certificate" msg (Coiby Xu) [RHEL-39933 RHEL-12346]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.23.1.el9_4]
changelog:
  - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-34050 RHEL-30492] {CVE-2023-52626}
  - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-38595 RHEL-36684]
  - net/sched: flower: Add lock protection when remove filter handle (Petr Oros) [RHEL-35672 RHEL-33379]
  - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-33913 RHEL-31828] {CVE-2024-26801}
  - net: hns3: do not allow call hns3_nic_net_open repeatedly (Jose Ignacio Tornos Martinez) [RHEL-38933 RHEL-37707] {CVE-2021-47400}
  - tmpfs: fix Documentation of noswap and huge mount options (Nico Pache) [RHEL-38252 RHEL-31975]
  - shmem: add support to ignore swap (Chris von Recklinghausen) [RHEL-38252 RHEL-31975]
  - shmem: update documentation (Chris von Recklinghausen) [RHEL-38252 RHEL-31975]
  - shmem: skip page split if we're not reclaiming (Chris von Recklinghausen) [RHEL-38252 RHEL-31975]
  - shmem: move reclaim check early on writepages() (Chris von Recklinghausen) [RHEL-38252 RHEL-31975]
  - shmem: set shmem_writepage() variables early (Chris von Recklinghausen) [RHEL-38252 RHEL-31975]
  - shmem: remove check for folio lock on writepage() (Chris von Recklinghausen) [RHEL-38252 RHEL-31975]
  - ice: Add automatic VF reset on Tx MDD events (Petr Oros) [RHEL-39083 RHEL-36317]
  - net/ipv6: SKB symmetric hash should incorporate transport ports (Ivan Vecera) [RHEL-37641 RHEL-36218]
  - ipv6: sr: fix memleak in seg6_hmac_init_algo (Hangbin Liu) [RHEL-37669 RHEL-37511]
  - ipv6: sr: fix missing sk_buff release in seg6_input_core (Hangbin Liu) [RHEL-37669 RHEL-37511]
  - ipv6: sr: fix invalid unregister error path (Hangbin Liu) [RHEL-37669 RHEL-37511]
  - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-37669 RHEL-37511]
  - ipv6: sr: add missing seg6_local_exit (Hangbin Liu) [RHEL-37669 RHEL-37511]
  - block: fix q->blkg_list corruption during disk rebind (Ming Lei) [RHEL-36687 RHEL-33577]
  - ice: fix uninitialized dplls mutex usage (Petr Oros) [RHEL-36716 RHEL-36283]
  - ice: fix pin phase adjust updates on PF reset (Petr Oros) [RHEL-36716 RHEL-36283]
  - ice: fix dpll periodic work data updates on PF reset (Petr Oros) [RHEL-36716 RHEL-36283]
  - ice: fix dpll and dpll_pin data access on PF reset (Petr Oros) [RHEL-36716 RHEL-36283]
  - ice: fix dpll input pin phase_adjust value updates (Petr Oros) [RHEL-36716 RHEL-36283]
  - ice: fix connection state of DPLL and out pin (Petr Oros) [RHEL-36716 RHEL-36283]
  - redhat: remove the merge subtrees script (Derek Barbosa)
  - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa)
  - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa)
  - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-38954 RHEL-37422] {CVE-2024-35960}
  - smb: client: fix UAF in smb2_reconnect_server() (Jay Shin) [RHEL-28943 RHEL-40177 RHEL-37273 RHEL-7986] {CVE-2024-35870}
  - smb: client: remove extra @chan_count check in __cifs_put_smb_ses() (Jay Shin) [RHEL-28943 RHEL-31245]
  - RHEL: enable CONFIG_AMD_ATL (Aristeu Rozanski) [RHEL-36220 RHEL-26704]
  - EDAC/amd64: Use new AMD Address Translation Library (Aristeu Rozanski) [RHEL-36220 RHEL-26704]
  - RAS: Introduce AMD Address Translation Library (Aristeu Rozanski) [RHEL-36220 RHEL-26704]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.24.1.el9_4]
changelog:
  - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-43272 RHEL-23117]
  - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-43272 RHEL-23117]
  - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-43272 RHEL-23117]
  - bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() (Michal Schmidt) [RHEL-43272 RHEL-23117]
  - bnx2x: fix potential memory leak in bnx2x_tpa_stop() (Michal Schmidt) [RHEL-43272 RHEL-23117]
  - xen-netfront: Add missing skb_mark_for_recycle (Vitaly Kuznetsov) [RHEL-37626 RHEL-36573] {CVE-2024-27393}
  - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-34953 RHEL-29239]
  - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-34953 RHEL-29239]
  - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-38972 RHEL-37093] {CVE-2023-52667}
  - crypto: qat - Fix typo (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-38546 RHEL-35816] {CVE-2024-26974}
  - crypto: qat - specify firmware files for 402xx (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - validate slices count returned by FW (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - improve error logging to be consistent across features (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - improve error message in adf_get_arbiter_mapping() (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - Fix spelling mistake "Invalide" -> "Invalid" (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - Avoid -Wflex-array-member-not-at-end warnings (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - implement interface for live migration (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add interface for live migration (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add bank save and restore flows (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - expand CSR operations for QAT GEN4 devices (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - rename get_sla_arr_of_type() (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - relocate CSR access code (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - move PFVF compat checker to a function (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - relocate and rename 4xxx PF2VM definitions (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - adf_get_etr_base() helper (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - redhat/configs: Add CONFIG_CRYPTO_DEV_QAT_420XX (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - make ring to service map common for QAT GEN4 (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - fix ring to service map for dcc in 420xx (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - fix ring to service map for dcc in 4xxx (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - fix comment structure (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - remove unnecessary description from comment (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - remove double initialization of value (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - removed unused macro in adf_cnv_dbgfs.c (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - remove unused macros in qat_comp_alg.c (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - uninitialized variable in adf_hb_error_inject_write() (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - Documentation: qat: fix auto_reset section (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-38546 RHEL-35816] {CVE-2024-26974}
  - crypto: qat - change SLAs cleanup flow at shutdown (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - improve aer error reset handling (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - limit heartbeat notifications (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add auto reset on error (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add fatal error notification (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - re-enable sriov after pf reset (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - update PFVF protocol for recovery (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - disable arbitration before reset (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add fatal error notify method (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add heartbeat error simulator (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - avoid memcpy() overflow warning (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - fix arbiter mapping generation algorithm for QAT 402xx (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - generate dynamically arbiter mappings (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add support for ring pair level telemetry (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add support for device telemetry (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add admin msgs for telemetry (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - include pci.h for GET_DEV() (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add support for 420xx devices (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - move fw config related structures (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - relocate portions of qat_4xxx code (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - change signature of uof_get_num_objs() (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - relocate and rename get_service_enabled() (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - seq_file: add helper macro to define attribute for rw file (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - minmax: Introduce {min,max}_array() (Vladis Dronov) [RHEL-38546 RHEL-35816]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.25.1.el9_4]
changelog:
  - nvme: fix reconnection fail due to reserved tag allocation (Maurizio Lombardi) [RHEL-42896 RHEL-36896] {CVE-2024-27435}
  - net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg (cki-backport-bot) [RHEL-43625] {CVE-2021-47596}
  - scsi: sg: Avoid race in error handling & drop bogus warn (Ewan D. Milne) [RHEL-36106 RHEL-35659]
  - scsi: sg: Avoid sg device teardown race (Ewan D. Milne) [RHEL-36106 RHEL-35659]
  - netfilter: nf_tables: use timestamp to check for set element timeout (Florian Westphal) [RHEL-38032 RHEL-33985] {CVE-2024-27397}
  - netfilter: nft_set_rbtree: Remove unused variable nft_net (Florian Westphal) [RHEL-38032 RHEL-33985]
  - netfilter: nft_set_rbtree: prefer sync gc to async worker (Florian Westphal) [RHEL-38032 RHEL-33985]
  - netfilter: nft_set_rbtree: rename gc deactivate+erase function (Florian Westphal) [RHEL-38032 RHEL-33985]
  - netfilter: nf_tables: de-constify set commit ops function argument (Florian Westphal) [RHEL-38032 RHEL-33985]
  - octeontx2-af: avoid off-by-one read from userspace (Kamal Heib) [RHEL-40486 RHEL-39873] {CVE-2024-36957}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.26.1.el9_4]
changelog:
  - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-39217 RHEL-37430] {CVE-2024-35958}
  - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-41749 RHEL-39837] {CVE-2024-36904}
  - mm/mglru: Revert "don't sync disk for each aging cycle" (Waiman Long) [RHEL-44418]
  - tipc: fix UAF in error path (Xin Long) [RHEL-34848 RHEL-34280] {CVE-2024-36886}
  - selftest/cgroup: Update test_cpuset_prs.sh to match changes (Waiman Long) [RHEL-45139]
  - cgroup/cpuset: Make cpuset.cpus.exclusive independent of cpuset.cpus (Waiman Long) [RHEL-45139]
  - cgroup/cpuset: Delay setting of CS_CPU_EXCLUSIVE until valid partition (Waiman Long) [RHEL-45139]
  - selftest/cgroup: Fix test_cpuset_prs.sh problems reported by test robot (Waiman Long) [RHEL-45139]
  - cgroup/cpuset: Fix remote root partition creation problem (Waiman Long) [RHEL-45139]
  - cgroup/cpuset: Optimize isolated partition only generate_sched_domains() calls (Waiman Long) [RHEL-45139]
  - cgroup/cpuset: Fix retval in update_cpumask() (Waiman Long) [RHEL-45139]
  - cgroup/cpuset: Fix a memory leak in update_exclusive_cpumask() (Waiman Long) [RHEL-45139]
  - ice: implement AQ download pkg retry (Petr Oros) [RHEL-38907 RHEL-17318]
  - redhat: include resolve_btfids in kernel-devel (Viktor Malik) [RHEL-43426 RHEL-40707]
  - blk-cgroup: fix list corruption from resetting io stat (cki-backport-bot) [RHEL-44977] {CVE-2024-38663}
  - misc: rtsx: do clear express reg every SD_INT (David Arcari) [RHEL-39985 RHEL-33706]
  - misc: rtsx: Fix rts5264 driver status incorrect when card removed (David Arcari) [RHEL-39985 RHEL-33706]
  - netfilter: tproxy: bail out if IP has been disabled on the device (cki-backport-bot) [RHEL-44371] {CVE-2024-36270}
  - lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure (cki-backport-bot) [RHEL-44263 RHEL-44261] {CVE-2024-38543}
  - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44039] {CVE-2024-38586}
  - net: micrel: Fix receiving the timestamp in the frame for lan8841 (cki-backport-bot) [RHEL-43996] {CVE-2024-38593}
  - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-43379 RHEL-27780] {CVE-2022-48627}
  - net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map (Kamal Heib) [RHEL-42728 RHEL-34192] {CVE-2024-26858}
  - locking/atomic: Make test_and_*_bit() ordered on failure (Paolo Bonzini) [RHEL-45896]
  - mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index (Rafael Aquini) [RHEL-42659 RHEL-31840] {CVE-2024-26783}
  - can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock (Jose Ignacio Tornos Martinez) [RHEL-42379 RHEL-31530] {CVE-2023-52638}
  - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-42226 RHEL-38715] {CVE-2021-47548}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.27.1.el9_4]
changelog:
  - drm/ast: Fix soft lockup (CKI Backport Bot) [RHEL-45716]
  - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41838 RHEL-33217] {CVE-2024-26880}
  - KVM: arm64: Do not re-initialize the KVM lock (Sebastian Ott) [RHEL-37528 RHEL-36279]
  - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Sebastian Ott) [RHEL-37528 RHEL-36279]
  - KVM: arm64: Fix host-programmed guest events in nVHE (Sebastian Ott) [RHEL-37528 RHEL-36279]
  - KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler (Sebastian Ott) [RHEL-37528 RHEL-36279]
  - KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table() (Sebastian Ott) [RHEL-37528 RHEL-36279]
  - KVM: arm64: Fix double-free following kvm_pgtable_stage2_free_unlinked() (Sebastian Ott) [RHEL-37528 RHEL-36279]
  - octeontx2-af: Use separate handlers for interrupts (Kamal Heib) [RHEL-42846 RHEL-35170] {CVE-2024-27030}
  - Squashfs: check the inode number is not the invalid value of zero (Abhi Das) [RHEL-42811 RHEL-35098] {CVE-2024-26982}
  - net: fix sk_memory_allocated_{add|sub} vs softirqs (Paolo Abeni) [RHEL-36773 RHEL-34070]
  - tcp: sk_forced_mem_schedule() optimization (Paolo Abeni) [RHEL-36773 RHEL-34070]
  - net: make SK_MEMORY_PCPU_RESERV tunable (Paolo Abeni) [RHEL-36773 RHEL-34070]
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-42655 RHEL-31690] {CVE-2024-26773}
  - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-42528 RHEL-38200] {CVE-2023-52809}
  - KVM: x86/mmu: Retry fault before acquiring mmu_lock if mapping is changing (Maxim Levitsky) [RHEL-43388]
  - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-40398 RHEL-36047]
  - RAS: enable CONFIG_RAS_FMPM (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS: Avoid build errors when CONFIG_DEBUG_FS=n (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/FMPM: Safely handle saved records of various sizes (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/FMPM: Avoid NULL ptr deref in get_saved_records() (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - Merge tag 'edac_updates_for_v6.9' of git://git.kernel.org/pub/scm/linux/kernel/git/ras/ras (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/FMPM: Fix off by one when unwinding on error (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/FMPM: Add debugfs interface to print record entries (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/FMPM: Save SPA values (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS: Export helper to get ras_debugfs_dir (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/ATL: Fix bit overflow in denorm_addr_df4_np2() (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS: Introduce a FRU memory poison manager (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - x86/cpu/amd: Provide a separate accessor for Node ID (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/ATL: Add MI300 row retirement support (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - Documentation: Move RAS section to admin-guide (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300() (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/ATL: Add MI300 support (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - Documentation: RAS: Add index and address translation section (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - cpu/SMT: Make SMT control more robust against enumeration failures (Aristeu Rozanski) [RHEL-36212 RHEL-17008]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.28.1.el9_4]
changelog:
  - mlxbf_gige: call request_irq() after NAPI initialized (Kamal Heib) [RHEL-43012 RHEL-37179] {CVE-2024-35907}
  - mlxbf_gige: stop PHY during open() error paths (Kamal Heib) [RHEL-43012 RHEL-37179] {CVE-2024-35907}
  - mlxbf_gige: stop interface during shutdown (Kamal Heib) [RHEL-41708 RHEL-37244] {CVE-2024-35885}
  - net: amd-xgbe: Fix skb data length underflow (Ken Cox) [RHEL-43796 RHEL-43794] {CVE-2022-48743}
  - nfp: flower: handle acti_netdevs allocation failure (Ken Cox) [RHEL-42852 RHEL-35158] {CVE-2024-27046}
  - block: add check that partition length needs to be aligned with block size (Ming Lei) [RHEL-45501 RHEL-26616] {CVE-2023-52458}
  - nfsd: hold a lighter-weight client reference over CB_RECALL_ANY (Benjamin Coddington) [RHEL-45517 RHEL-31513]
  - NFSD: CREATE_SESSION must never cache NFS4ERR_DELAY replies (Benjamin Coddington) [RHEL-45517 RHEL-31513]
  - NFSD: Document the phases of CREATE_SESSION (Benjamin Coddington) [RHEL-45517 RHEL-31513]
  - NFSD: Fix the NFSv4.1 CREATE_SESSION operation (Benjamin Coddington) [RHEL-45517 RHEL-31513]
  - icmp: prevent possible NULL dereferences from icmp_build_probe() (Antoine Tenart) [RHEL-42974 RHEL-37002] {CVE-2024-35857}
  - NFSv4.1: fix handling NFS4ERR_DELAY when testing for session trunking (Scott Mayhew) [RHEL-45360 RHEL-24133]
  - RAS/AMD/ATL: Use system settings for MI300 DRAM to normalized address translation (Aristeu Rozanski) [RHEL-46335 RHEL-38634]
  - RAS/AMD/ATL: Fix MI300 bank hash (Aristeu Rozanski) [RHEL-46335 RHEL-38634]
  - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-42689 RHEL-33271] {CVE-2024-26852}
  - epoll: be better about file lifetimes (Pavel Reichl) [RHEL-44091 RHEL-44083] {CVE-2024-38580}
  - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Dick Kennedy) [RHEL-40659 RHEL-40665 RHEL-24508 RHEL-39793] {CVE-2024-36924}
  - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Dick Kennedy) [RHEL-40659 RHEL-40669 RHEL-24508 RHEL-39887] {CVE-2024-36952}
  - bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel (Viktor Malik) [RHEL-42640 RHEL-31726] {CVE-2024-26737}
  - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv (Ken Cox) [RHEL-41489 RHEL-38415] {CVE-2021-47459}
  - wifi: ath11k: restore country code during resume (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - wifi: ath11k: refactor setting country code logic (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - bus: mhi: host: Add mhi_power_down_keep_dev() API to support system suspend/hibernation (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - net: qrtr: support suspend/hibernation (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - wifi: ath11k: support hibernation (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - wifi: ath11k: thermal: don't try to register multiple times (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - wifi: ath11k: fix warning on DMA ring capabilities event (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - wifi: ath11k: do not dump SRNG statistics during resume (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - wifi: ath11k: remove MHI LOOPBACK channels (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - wifi: ath11k: rearrange IRQ enable/disable in reset path (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.29.1.el9_4]
changelog:
  - net: Avoid address overwrite in kernel_connect (Davide Caratti) [RHEL-45728 RHEL-30875]
  - net: replace calls to sock->ops->connect() with kernel_connect() (Davide Caratti) [RHEL-45728 RHEL-33410]
  - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-41638 RHEL-39704] {CVE-2024-36020}
  - cifs: translate network errors on send to -ECONNABORTED (Jay Shin) [RHEL-47047 RHEL-31245]
  - wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-44132] {CVE-2024-38575}
  - wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-43208 RHEL-39803] {CVE-2024-36921}
  - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-42906 RHEL-36809] {CVE-2024-35789}
  - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-42886 RHEL-36900] {CVE-2024-27434}
  - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-42860 RHEL-35142] {CVE-2024-27052}
  - wifi: mt76: mt7925e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-42856 RHEL-35148] {CVE-2024-27049}
  - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-42743 RHEL-34187] {CVE-2024-26897}
  - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (Jose Ignacio Tornos Martinez) [RHEL-42383 RHEL-35199] {CVE-2023-52651}
  - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-41402 RHEL-39781] {CVE-2024-36929}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.30.1.el9_4]
changelog:
  - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35840] {CVE-2024-21823}
  - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35840] {CVE-2024-21823}
  - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35840] {CVE-2024-21823}
  - tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer (Mark Salter) [RHEL-49538 RHEL-39308]
  - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails (Jon Maloy) [RHEL-44467] {CVE-2024-37353}
  - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-36271 RHEL-26682] {CVE-2024-26600}
  - eeprom: at24: fix memory corruption race condition (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - eeprom: at24: Probe for DDR3 thermal sensor in the SPD case (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - eeprom: at24: Use dev_err_probe for nvmem register failure (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - eeprom: at24: Add support for 24c1025 EEPROM (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - eeprom: at24: remove struct at24_client (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - at24: Support probing while in non-zero ACPI D state (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44439] {CVE-2024-37356}
  - cxl/region: Fix cxlr_pmem leaks (cki-backport-bot) [RHEL-44486] {CVE-2024-38391}
  - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44480] {CVE-2024-36489}
  - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-42714 RHEL-33266] {CVE-2024-26853}
  - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44404 RHEL-44402] {CVE-2024-33621}
  - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-44404 RHEL-32205]
  - ipvlan: properly track tx_errors (Davide Caratti) [RHEL-44404 RHEL-32205]
  - wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-41698 RHEL-39754] {CVE-2024-36941}
  - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-41658 RHEL-37028] {CVE-2024-35845}
  - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-41556 RHEL-37018] {CVE-2024-35852}
  - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44215] {CVE-2024-38558}
  - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-41520 RHEL-39799] {CVE-2024-36922}
  - wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-38754 RHEL-37345] {CVE-2024-35937}
  - ice: fix memory corruption bug with suspend and rebuild (Petr Oros) [RHEL-49858 RHEL-17486] {CVE-2024-35911}
  - ipv6: prevent possible NULL deref in fib6_nh_init() (Hangbin Liu) [RHEL-48182 RHEL-45826] {CVE-2024-40961}
  - netns: Make get_net_ns() handle zero refcount net (Paolo Abeni) [RHEL-48117 RHEL-46610] {CVE-2024-40958}
  - net: do not leave a dangling sk pointer, when socket creation fails (Paolo Abeni) [RHEL-48072 RHEL-46610] {CVE-2024-40954}
  - net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (CKI Backport Bot) [RHEL-47902] {CVE-2024-40928}
  - net: netlink: af_netlink: Prevent empty skb by adding a check on len. (Ivan Vecera) [RHEL-43619 RHEL-30344] {CVE-2021-47606}
  - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46921] {CVE-2024-39487}
  - nfs: fix panic when nfs4_ff_layout_prepare_ds() fails (Benjamin Coddington) [RHEL-42732 RHEL-34875] {CVE-2024-26868}
  - efi: fix panic in kdump kernel (Steve Best) [RHEL-42920 RHEL-36998] {CVE-2024-35800}
  - ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() (Hangbin Liu) [RHEL-41735 RHEL-31050] {CVE-2024-27417}
  - netfilter: nf_tables: do not compare internal table flags on updates (Florian Westphal) [RHEL-41682 RHEL-33985] {CVE-2024-27065}
  - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-41466 RHEL-39786] {CVE-2024-36903}
  - netfilter: nf_tables: honor table dormant flag from netdev release event path (Florian Westphal) [RHEL-40056 RHEL-33985] {CVE-2024-36005}
  - cifs: fix underflow in parse_server_interfaces() (Paulo Alcantara) [RHEL-34636 RHEL-31245] {CVE-2024-26828}
  - drm/i915/audio: Fix audio time stamp programming for DP (CKI Backport Bot) [RHEL-45843]
  - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-42548 RHEL-38260] {CVE-2023-52864}
  - platform/x86: wmi: remove unnecessary initializations (David Arcari) [RHEL-42548 RHEL-38260] {CVE-2023-52864}
  - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (CKI Backport Bot) [RHEL-43170] {CVE-2024-36017}
  - netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (Florian Westphal) [RHEL-40062 RHEL-33985] {CVE-2024-26808}
  - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-39017 RHEL-32372] {CVE-2024-35969}
  - netfilter: nf_tables: flush pending destroy work before exit_net release (Florian Westphal) [RHEL-38765 RHEL-33985] {CVE-2024-35899}
  - vt: fix unicode buffer corruption when deleting characters (Andrew Halaney) [RHEL-42947 RHEL-24205] {CVE-2024-35823}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.31.1.el9_4]
changelog:
  - net: fix __dst_negative_advice() race (CKI Backport Bot) [RHEL-46798] {CVE-2024-36971}
  - net: annotate data-races around sk->sk_dst_pending_confirm (CKI Backport Bot) [RHEL-46798] {CVE-2024-36971}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.32.1.el9_4]
changelog:
  - REDHAT: Makefile, dont reset dist-git-tmp if set (Lucas Zampieri)
  - net/mlx5e: Fix netif state handling (Benjamin Poirier) [RHEL-43872 RHEL-43870] {CVE-2024-38608}
  - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Benjamin Poirier) [RHEL-43872 RHEL-43870] {CVE-2024-38608}
  - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50202 RHEL-50203] {CVE-2024-41091}
  - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50264 RHEL-50265] {CVE-2024-41090}
  - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-43421 RHEL-30023] {CVE-2024-26810}
  - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44299] {CVE-2024-38538}
  - KVM: arm64: Ensure target address is granule-aligned for range TLBI (Sebastian Ott) [RHEL-52248 RHEL-31215]
  - RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (cki-backport-bot) [RHEL-44250] {CVE-2024-38544}
  - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-52082] {CVE-2024-41076}
  - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46421 RHEL-35393] {CVE-2024-39476}
  - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50074]
  - cxl/port: Fix delete_endpoint() vs parent unregistration race (John W. Linville) [RHEL-39290 RHEL-23582] {CVE-2023-52771}
  - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (Petr Oros) [RHEL-49862 RHEL-17486] {CVE-2024-26855}
  - ice: fix LAG and VF lock dependency in ice_reset_vf() (Petr Oros) [RHEL-49820 RHEL-17486] {CVE-2024-36003}
  - net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (Jose Ignacio Tornos Martinez) [RHEL-47992 RHEL-9429] {CVE-2024-40939}
  - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47770] {CVE-2024-40911}
  - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47788] {CVE-2024-40912}
  - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47920] {CVE-2024-40929}
  - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48028] {CVE-2024-40941}
  - seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors (Hangbin Liu) [RHEL-48098 RHEL-45826] {CVE-2024-40957}
  - ipv6: fix possible race in __fib6_drop_pcpu_from() (Hangbin Liu) [RHEL-47572 RHEL-45826] {CVE-2024-40905}
  - redhat/configs: Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-39581 RHEL-28760]
  - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-39581 RHEL-28760]
  - drm/mgag200: Fix caching setup for remapped video memory (Scott Weaver) [RHEL-39581 RHEL-24102]
  - Revert "drm/mgag200: Flush the cache to improve latency" (Scott Weaver) [RHEL-39581 RHEL-28760]
  - net: psample: fix flag being set in wrong skb (Adrian Moreno) [RHEL-47275]
  - net: openvswitch: store sampling probability in cb. (Adrian Moreno) [RHEL-47275]
  - net: openvswitch: add psample action (Adrian Moreno) [RHEL-47275]
  - net: psample: allow using rate as probability (Adrian Moreno) [RHEL-47275]
  - net: psample: skip packet copy if no listeners (Adrian Moreno) [RHEL-47275]
  - net: psample: add user cookie (Adrian Moreno) [RHEL-47275]
  - i40e: fix: remove needless retries of NVM update (CKI Backport Bot) [RHEL-48169 RHEL-36692]
  - ice: Reject pin requests with unsupported flags (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: Don't process extts if PTP is disabled (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: Fix improper extts handling (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: stop destroying and reinitalizing Tx tracker during reset (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: factor out ice_ptp_rebuild_owner() (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: rename ice_ptp_tx_cfg_intr (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: don't check has_ready_bitmap in E810 functions (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: rename verify_cached to has_ready_bitmap (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: pass reset type to PTP reset functions (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: introduce PTP state machine (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: make RX HW timestamp reading code more reusable (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: Rename E822 to E82X (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: periodically kick Tx timestamp interrupt (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: Re-enable timestamping correctly after reset (Petr Oros) [RHEL-50388 RHEL-17486]
  - ptp: introduce helpers to adjust by scaled parts per million (Petr Oros) [RHEL-50388 RHEL-17486]
  - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (Andrew Halaney) [RHEL-42566 RHEL-24205] {CVE-2023-52880}
  - netfilter: complete validation of user input (Phil Sutter) [RHEL-47384 RHEL-37212] {CVE-2024-35962}
  - netfilter: validate user input for expected length (Phil Sutter) [RHEL-41668 RHEL-37212] {CVE-2024-35896}
  - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-40051 RHEL-39719] {CVE-2024-36025}
  - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-37615 RHEL-33260] {CVE-2024-26908}
  - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Prarit Bhargava) [RHEL-37615 RHEL-25415]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.33.1.el9_4]
changelog:
  - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44287] {CVE-2024-38540}
  - netfilter: flowtable: validate pppoe header (Florian Westphal) [RHEL-44430 RHEL-33469] {CVE-2024-27016}
  - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44116] {CVE-2024-38579}
  - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51035 RHEL-51033] {CVE-2024-41041}
  - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Florian Westphal) [RHEL-42832 RHEL-33985] {CVE-2024-27019}
  - netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEV (Florian Westphal) [RHEL-42832 RHEL-33985]
  - netfilter: nf_tables: NULL pointer dereference in nf_tables_updobj() (Florian Westphal) [RHEL-42832 RHEL-33985]
  - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Florian Westphal) [RHEL-41802 RHEL-33985] {CVE-2024-26925}
  - netfilter: nf_tables: discard table flag update with pending basechain deletion (Florian Westphal) [RHEL-40231 RHEL-33985] {CVE-2024-35897}
  - netfilter: nf_tables: reject table flag and netdev basechain updates (Florian Westphal) [RHEL-40231 RHEL-33985]
  - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-42966 RHEL-37040] {CVE-2024-35839}
  - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-42966 RHEL-37040] {CVE-2024-35839}
  - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-42966 RHEL-37040] {CVE-2024-35839}
  - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-42966 RHEL-37040] {CVE-2024-35839}
  - netfilter: nft_limit: reject configurations that cause integer overflow (Florian Westphal) [RHEL-40065 RHEL-33985] {CVE-2024-26668}
  - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48339] {CVE-2024-40978}
  - mm/huge_memory: don't unpoison huge_zero_folio (Aristeu Rozanski) [RHEL-47804] {CVE-2024-40914}
  - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48375 RHEL-6118] {CVE-2024-40983}
  - netfilter: nft_set_rbtree: skip end interval element from gc (Florian Westphal) [RHEL-41265] {CVE-2024-26581}
  - nvmet: fix a possible leak when destroy a ctrl during qp establishment (CKI Backport Bot) [RHEL-52021 RHEL-52019 RHEL-52020] {CVE-2024-42152}
  - net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (CKI Backport Bot) [RHEL-51756] {CVE-2024-42110}
  - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Florian Westphal) [RHEL-40265 RHEL-33985] {CVE-2024-35898}
  - netfilter: br_netfilter: remove WARN traps (CKI Backport Bot) [RHEL-42882] {CVE-2024-27415}
  - netfilter: br_netfilter: skip conntrack input hook for promisc packets (CKI Backport Bot) [RHEL-42882] {CVE-2024-27415}
  - netfilter: bridge: confirm multicast packets before passing them up the stack (CKI Backport Bot) [RHEL-42882] {CVE-2024-27415}
  - netfilter: nf_conntrack_bridge: initialize err to 0 (CKI Backport Bot) [RHEL-42882] {CVE-2024-27415}
  - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Florian Westphal) [RHEL-42842 RHEL-33985] {CVE-2024-27020}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.34.1.el9_4]
changelog:
  - mm: prevent derefencing NULL ptr in pfn_section_valid() (Jarod Wilson) [RHEL-51140 RHEL-51138] {CVE-2024-41055}
  - mm, kmsan: fix infinite recursion due to RCU critical section (Jarod Wilson) [RHEL-51140 RHEL-51138] {CVE-2024-41055}
  - ppp: reject claimed-as-LCP but actually malformed packets (CKI Backport Bot) [RHEL-51061 RHEL-51059] {CVE-2024-41044}
  - x86: stop playing stack games in profile_pc() (CKI Backport Bot) [RHEL-51651] {CVE-2024-42096}
  - PCI/MSI: Fix UAF in msi_capability_init (CKI Backport Bot) [RHEL-51438] {CVE-2024-41096}
  - iommufd: Fix missing update of domains_itree after splitting iopt_area (Jerry Snitselaar) [RHEL-42518 RHEL-28780] {CVE-2023-52801}
  - mm: cachestat: fix folio read-after-free in cache walk (Nico Pache) [RHEL-41739 RHEL-5619] {CVE-2024-26630}
  - regmap: maple: Fix cache corruption in regcache_maple_drop() (Jaroslav Kysela) [RHEL-43179 RHEL-39706] {CVE-2024-36019}
  - mm: cachestat: fix two shmem bugs (Nico Pache) [RHEL-36912] {CVE-2024-35797}
  - kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address (Steve Best) [RHEL-42778 RHEL-34985] {CVE-2024-26946}
  - mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-43132 RHEL-37467] {CVE-2024-36000}
  - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52675 RHEL-50366]
  - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52675 RHEL-50366]
  - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52675 RHEL-50366]
  - gpio: tegra186: Fix tegra186_gpio_is_accessible() check (Charles Mirabile) [RHEL-49347 RHEL-32452]
  - net/sched: Fix UAF when resolving a clash (CKI Backport Bot) [RHEL-51022 RHEL-51020] {CVE-2024-41040}
  - KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() (Maxim Levitsky) [RHEL-41462 RHEL-32430] {CVE-2024-35791}
  - cxl/region: Fix memregion leaks in devm_cxl_add_region() (John W. Linville) [RHEL-47965 RHEL-23582] {CVE-2024-40936}
  - x86/coco: Require seeding RNG with RDRAND on CoCo systems (Lenny Szubowicz) [RHEL-42986 RHEL-37269] {CVE-2024-35875}
  - scsi: qedf: Ensure the copied buf is NUL terminated (cki-backport-bot) [RHEL-44203] {CVE-2024-38559}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.35.1.el9_4]
changelog:
  - usb-storage: alauda: Check whether the media is initialized (CKI Backport Bot) [RHEL-43716] {CVE-2024-38619}
  - ceph: force sending a cap update msg back to MDS for revoke op (Xiubo Li) [RHEL-55437]
  - ceph: periodically flush the cap releases (Xiubo Li) [RHEL-55437]
  - mm: avoid overflows in dirty throttling logic (Jay Shin) [RHEL-51848 RHEL-50004] {CVE-2024-42131}
  - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Jay Shin) [RHEL-51701 RHEL-50004] {CVE-2024-42102}
  - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Jay Shin) [RHEL-42628 RHEL-5619] {CVE-2024-26720}
  - net: fix out-of-bounds access in ops_init (Paolo Abeni) [RHEL-43188 RHEL-46610] {CVE-2024-36883}
  - nvme: avoid double free special payload (CKI Backport Bot) [RHEL-51311] {CVE-2024-41073}
  - kernfs: change kernfs_rename_lock into a read-write lock (Jay Shin) [RHEL-55253 RHEL-52956]
  - kernfs: Separate kernfs_pr_cont_buf and rename_lock (Jay Shin) [RHEL-55253 RHEL-52956]
  - kernfs: fix missing kernfs_iattr_rwsem locking (Jay Shin) [RHEL-55253 RHEL-52956]
  - kernfs: Use a per-fs rwsem to protect per-fs list of kernfs_super_info (Jay Shin) [RHEL-55253 RHEL-52956]
  - kernfs: Introduce separate rwsem to protect inode attributes (Jay Shin) [RHEL-55253 RHEL-52956]
  - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47894 RHEL-47892] {CVE-2024-40927}
  - Bluetooth: af_bluetooth: Fix deadlock (Bastien Nocera) [RHEL-34161] {CVE-2024-26886}
  - xdp: Remove WARN() from __xdp_reg_mem_model() (CKI Backport Bot) [RHEL-51586] {CVE-2024-42082}
  - nfsd: don't take fi_lock in nfsd_break_deleg_cb() (Benjamin Coddington) [RHEL-42578 RHEL-34875]
  - nfsd: fix RELEASE_LOCKOWNER (Benjamin Coddington) [RHEL-42578 RHEL-34875] {CVE-2024-26629}
  - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (CKI Backport Bot) [RHEL-43729 RHEL-43727]
  - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (CKI Backport Bot) [RHEL-43729 RHEL-43727]
  - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43729] {CVE-2024-36979}
  - efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-42343 RHEL-26588] {CVE-2023-52463}
  - ACPI: arm64: export acpi_arch_thermal_cpufreq_pctg() (Charles Mirabile) [RHEL-34234 RHEL-1697]
  - ACPI: processor: reduce CPUFREQ thermal reduction pctg for Tegra241 (Charles Mirabile) [RHEL-34234 RHEL-1697]
  - ACPI: thermal: Add Thermal fast Sampling Period (_TFP) support (Scott Weaver) [RHEL-34234 RHEL-1697]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.36.1.el9_4]
changelog:
  - scsi: qla2xxx: Fix double free of fcport (Nilesh Javali) [RHEL-39547 RHEL-40034 RHEL-25184 RHEL-35020] {CVE-2024-26929}
  - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Nilesh Javali) [RHEL-39547 RHEL-41325 RHEL-25184 RHEL-35016] {CVE-2024-26930}
  - scsi: qla2xxx: Fix command flush on cable pull (Nilesh Javali) [RHEL-39547 RHEL-40029 RHEL-25184 RHEL-35012] {CVE-2024-26931}
  - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (Benjamin Coddington) [RHEL-53708 RHEL-53004] {CVE-2024-42246}
  - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-56275 RHEL-56084]
  - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52368] {CVE-2024-42225}
  - cppc_cpufreq: Fix possible null pointer dereference (cki-backport-bot) [RHEL-44145] {CVE-2024-38573}
  - ring-buffer: Fix a race between readers and resize checks (cki-backport-bot) [RHEL-43920] {CVE-2024-38601}
  - fork: defer linking file vma until vma is fully initialized (Rafael Aquini) [RHEL-35617 RHEL-35022] {CVE-2024-27022}
  - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48393 RHEL-48391] {CVE-2024-40984}
  - KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes (Maxim Levitsky) [RHEL-41345 RHEL-32430] {CVE-2024-26991}
  - net/sched: act_mirred: don't override retval if we already lost the skb (Davide Caratti) [RHEL-42644 RHEL-31724] {CVE-2024-26739}
  - net/sched: act_mirred: Create function tcf_mirred_to_dev and improve readability (Davide Caratti) [RHEL-42644 RHEL-32137]
  - cpufreq: exit() callback is optional (cki-backport-bot) [RHEL-43848] {CVE-2024-38615}
  - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44157 RHEL-44155] {CVE-2024-38570}
  - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44157 RHEL-44155] {CVE-2024-38570}
  - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44157 RHEL-44155] {CVE-2024-38570}
  - wifi: nl80211: Avoid address calculations via out of bounds array indexing (Jose Ignacio Tornos Martinez) [RHEL-46505 RHEL-34696] {CVE-2024-38562}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.37.1.el9_4]
changelog:
  - ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses (CKI Backport Bot) [RHEL-42783] {CVE-2024-26947}
  - powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV (Mamatha Inamdar) [RHEL-45537 RHEL-25055]
  - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Steve Best) [RHEL-40517 RHEL-39354] {CVE-2024-36016}
  - smb: client: set correct id, uid and cruid for multiuser automounts (Jay Shin) [RHEL-47260 RHEL-31245]
  - printk: printk.c: Disable per_console_kthreads on !CONFIG_PREEMPT_RT (Derek Barbosa) [RHEL-39064]
  - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-41275 RHEL-26233] {CVE-2023-52439}
  - gpiolib: cdev: Fix use after free in lineinfo_changed_notify (Steve Best) [RHEL-43192 RHEL-39849] {CVE-2024-36899}
  - wifi: mac80211: Avoid address calculations via out of bounds array indexing (CKI Backport Bot) [RHEL-51287 RHEL-51285] {CVE-2024-41071}
  - Input: cyapa - add missing input core locking to suspend/resume functions (cki-backport-bot) [RHEL-44455] {CVE-2023-52884}
  - net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Limit number of driver warning messages (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Fix race condition in disconnect handling (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Fix race conditions in suspend/resume handling (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Fix partial packet errors on suspend/resume (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Fix exception on link speed change (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Add missing return code checks (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Remove unused pause frame queue (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Set flow control threshold to prevent packet loss (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Remove unused timer (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Fix white space and style issues (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - sctp: fix association labeling in the duplicate COOKIE-ECHO case (CKI Backport Bot) [RHEL-56745 RHEL-48647]
  - ice: xsk: fix txq interrupt mapping (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: add missing WRITE_ONCE when clearing ice_rx_ring::xdp_prog (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: improve updating ice_{t,r}x_ring::xsk_pool (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: toggle netif_carrier when setting up XSK pool (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: modify error handling when setting XSK pool in ndo_bpf (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: replace synchronize_rcu with synchronize_net (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: don't busy wait for Rx queue disable in ice_qp_dis() (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: respect netif readiness in AF_XDP ZC related ndo's (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: remove af_xdp_zc_qps bitmap (Petr Oros) [RHEL-52771 RHEL-17486]
  - ice: reorder disabling IRQ and NAPI in ice_qp_dis (Petr Oros) [RHEL-52771 RHEL-17486]
  - ice: make ice_vsi_cfg_txq() static (Petr Oros) [RHEL-52771 RHEL-17486]
  - ice: make ice_vsi_cfg_rxq() static (Petr Oros) [RHEL-52771 RHEL-17486]
  - ice: make use of DEFINE_FLEX() for struct ice_aqc_add_tx_qgrp (Petr Oros) [RHEL-52771 RHEL-17486]
  - xdp: reflect tail increase for MEM_TYPE_XSK_BUFF_POOL (Petr Oros) [RHEL-52771 RHEL-38863]
  - ice: update xdp_rxq_info::frag_size for ZC enabled Rx queue (Petr Oros) [RHEL-52771 RHEL-38863]
  - intel: xsk: initialize skb_frag_t::bv_offset in ZC drivers (Petr Oros) [RHEL-52771 RHEL-38863]
  - ice: remove redundant xdp_rxq_info registration (Petr Oros) [RHEL-52771 RHEL-38863]
  - ice: work on pre-XDP prog frag count (Petr Oros) [RHEL-52771 RHEL-38863]
  - xsk: fix usage of multi-buffer BPF helpers for ZC XDP (Petr Oros) [RHEL-52771 RHEL-38863]
  - xsk: make xsk_buff_pool responsible for clearing xdp_buff::flags (Petr Oros) [RHEL-52771 RHEL-38863]
  - xsk: recycle buffer in case Rx queue was full (Petr Oros) [RHEL-52771 RHEL-38863]
  - overflow: add DEFINE_FLEX() for on-stack allocs (Petr Oros) [RHEL-52771 RHEL-30138]
  - overflow: Add struct_size_t() helper (Petr Oros) [RHEL-52771 RHEL-30138]
  - bpf, sockmap: Prevent lock inversion deadlock in map delete elem (Felix Maurer) [RHEL-41479 RHEL-30107] {CVE-2024-35895}
  - xfs: allow SECURE namespace xattrs to use reserved block pool (CKI Backport Bot) [RHEL-54443 RHEL-49806]
  - platform/x86/intel-uncore-freq: Don't present root domain on error (David Arcari) [RHEL-43291 RHEL-38558]
  - platform/x86/intel-uncore-freq: Increase minor number support (David Arcari) [RHEL-43291 RHEL-38558]
  - platform/x86/intel-uncore-freq: Process read/write blocked feature status (David Arcari) [RHEL-43291 RHEL-38558]
  - platform/x86/intel/tpmi: Move TPMI ID definition (Steve Best) [RHEL-43291 RHEL-35956]
  - ice: fix VSI lists confusion when adding VLANs (CKI Backport Bot) [RHEL-57778 RHEL-20571]
  - ice: fix accounting for filters shared by multiple VSIs (CKI Backport Bot) [RHEL-57778 RHEL-20571]
  - ice: fix accounting if a VLAN already exists (CKI Backport Bot) [RHEL-57778 RHEL-17486]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.38.1.el9_4]
changelog:
  - module: avoid allocation if module is already present and ready (Donald Dutile) [RHEL-52417]
  - module: move early sanity checks into a helper (Donald Dutile) [RHEL-52417]
  - module: extract patient module check into helper (Donald Dutile) [RHEL-52417]
  - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-58636 RHEL-39662]
  - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-58636 RHEL-39662]
  - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (cki-backport-bot) [RHEL-43472] {CVE-2024-36978}
  - netfilter: nft_flow_offload: release dst in case direct xmit path is used (Florian Westphal) [RHEL-38520 RHEL-33469]
  - netfilter: nft_flow_offload: reset dst in route object after setting up flow (Florian Westphal) [RHEL-38520 RHEL-33469] {CVE-2024-27403}
  - netfilter: flowtable: simplify route logic (Florian Westphal) [RHEL-38520 RHEL-33469]
  - net: psample: fix uninitialized metadata. (Adrian Moreno) [RHEL-56909]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.39.1.el9_4]
changelog:
  - mptcp: ensure snd_nxt is properly initialized on connect (cki-backport-bot) [RHEL-52474 RHEL-39867] {CVE-2024-36889}
  - ping: fix address binding wrt vrf (Antoine Tenart) [RHEL-57563 RHEL-50920]
  - net/mlx5: Add a timeout to acquire the command queue semaphore (Benjamin Poirier) [RHEL-44227 RHEL-44225] {CVE-2024-38556}
  - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48142 RHEL-48140] {CVE-2024-40959}
  - ionic: fix use after netif_napi_del() (Michal Schmidt) [RHEL-47636 RHEL-47634] {CVE-2024-39502}
  - ionic: clean interrupt before enabling queue to avoid credit race (Michal Schmidt) [RHEL-47636 RHEL-36065]
  - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Benjamin Poirier) [RHEL-42391 RHEL-24466] {CVE-2023-52658}
  - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55075 RHEL-55074] {CVE-2024-42284}
  - x86: set FSRS automatically on AMD CPUs that have FSRM (Prarit Bhargava) [RHEL-56970 RHEL-25415]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.40.1.el9_4]
changelog:
  - gfs2: Fix NULL pointer dereference in gfs2_log_flush (CKI Backport Bot) [RHEL-51561 RHEL-51559] {CVE-2024-42079}
  - net: stmmac: Separate C22 and C45 transactions for xgmac (CKI Backport Bot) [RHEL-60274 RHEL-6297]
  - dmaengine: idxd: Check for driver name match before sva user feature (Jerry Snitselaar) [RHEL-47239 RHEL-44836 RHEL-46619]
  - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-57609 RHEL-26722]
  - KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked (CKI Backport Bot) [RHEL-46428] {CVE-2024-39483}
  - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-60567 RHEL-46609]
  - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-60567 RHEL-46609]
  - x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - Revert "x86/bugs: Use fixed addressing for VERW operand" (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - redhat/configs: Enable x86 CONFIG_MITIGATION_RFDS (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - KVM/VMX: Move VERW closer to VMentry for MDS mitigation (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - x86/entry: Harden return-to-user (Prarit Bhargava) [RHEL-48713 RHEL-25415]
  - x86/entry: Optimize common_interrupt_return() (Prarit Bhargava) [RHEL-48713 RHEL-25415]
  - x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - sched: act_ct: take care of padding in struct zones_ht_key (Xin Long) [RHEL-55112 RHEL-50682] {CVE-2024-42272}
  - sched: act_ct: add netns into the key of tcf_ct_flow_table (Xin Long) [RHEL-55112 RHEL-28816]
  - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (CKI Backport Bot) [RHEL-41361] {CVE-2024-35989}
  - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-42115 RHEL-37721] {CVE-2021-47385}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.41.1.el9_4]
changelog:
  - iommu/amd: Fix panic accessing amd_iommu_enable_faulting (Jerry Snitselaar) [RHEL-55507 RHEL-37320 RHEL-40344]
  - iommu/vt-d: Allocate DMAR fault interrupts locally (Jerry Snitselaar) [RHEL-55507 RHEL-28780]
  - netfilter: nft_inner: validate mandatory meta and payload (Phil Sutter) [RHEL-47488 RHEL-47486] {CVE-2024-39504}
  - netfilter: flowtable: initialise extack before use (CKI Backport Bot) [RHEL-58546 RHEL-58544] {CVE-2024-45018}
  - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48285 RHEL-48282] {CVE-2024-40972}
  - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48285 RHEL-48282] {CVE-2024-40972}
  - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48519 RHEL-48517] {CVE-2024-40998}
  - ext4: turn quotas off if mount failed after enabling quotas (Carlos Maiolino) [RHEL-48519 RHEL-48517] {CVE-2024-40998}
  - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-59920 RHEL-32669] {CVE-2024-26826}
  - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50864 RHEL-50862] {CVE-2024-41014}
  - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). (Davide Caratti) [RHEL-42771 RHEL-33410]
  - af_unix: Fix garbage collector racing against connect() (Davide Caratti) [RHEL-42771 RHEL-33410] {CVE-2024-26923}
  - af_unix: fix lockdep positive in sk_diag_dump_icons() (Davide Caratti) [RHEL-42771 RHEL-33410]
  - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50887 RHEL-50885] {CVE-2024-41013}
  - ipv6: prevent possible NULL dereference in rt6_probe() (Hangbin Liu) [RHEL-48161 RHEL-45826] {CVE-2024-40960}
  - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-42795 RHEL-34969] {CVE-2024-26961}
  - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47945 RHEL-47943] {CVE-2024-40931}
  - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47560 RHEL-47558] {CVE-2024-40904}
  - nvme-multipath: fix io accounting on failover (John Meneghini) [RHEL-59646 RHEL-56635]
  - nvme: fix multipath batched completion accounting (John Meneghini) [RHEL-59646 RHEL-56635]
  - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46481 RHEL-46479] {CVE-2024-39472}
  - tcp: add sanity checks to rx zerocopy (Paolo Abeni) [RHEL-58403 RHEL-29496] {CVE-2024-26640}
  - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49373 RHEL-49371] {CVE-2024-41005}
  - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48321 RHEL-48319] {CVE-2024-40977}
  - smb: client: fix hang in wait_for_response() for negproto (Jay Shin) [RHEL-61606 RHEL-57983]
  - NFSv4.1/pnfs: fix NFS with TLS in pnfs (Benjamin Coddington) [RHEL-61467 RHEL-34576]
  - ceph: remove the incorrect Fw reference check when dirtying pages (Xiubo Li) [RHEL-61415 RHEL-60255]
  - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Davide Caratti) [RHEL-48483 RHEL-44375] {CVE-2024-40995}
  - net/sched: taprio: extend minimum interval restriction to entire cycle too (Davide Caratti) [RHEL-44377 RHEL-44375] {CVE-2024-36244}
  - net/sched: taprio: make q->picos_per_byte available to fill_sched_entry() (Davide Caratti) [RHEL-44377 RHEL-44375] {CVE-2024-36244}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.42.1.el9_4]
changelog:
  - redhat/configs: Add CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - KVM: x86: Add BHI_NO (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - KVM: x86: Use a switch statement and macros in __feature_translate() (Maxim Levitsky) [RHEL-45492 RHEL-32430]
  - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Maxim Levitsky) [RHEL-45492 RHEL-32430]
  - x86/entry/32: Convert do_fast_syscall_32() to bool return type (Prarit Bhargava) [RHEL-45492 RHEL-25415]
  - x86/entry: Add do_SYSENTER_32() prototype (Prarit Bhargava) [RHEL-45492 RHEL-25415]
  - x86/bugs: Reset speculation control settings on init (Prarit Bhargava) [RHEL-45492 RHEL-25415]
  - mpls: Reduce skb re-allocations due to skb_cow() (Guillaume Nault) [RHEL-61696 RHEL-55145]
  - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-39539 RHEL-39601 RHEL-33543 RHEL-35000] {CVE-2024-26935}
  - tty: Fix out-of-bound vmalloc access in imageblit (Andrew Halaney) [RHEL-42095 RHEL-24205] {CVE-2021-47383}
  - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54769 RHEL-54768] {CVE-2024-43854}
  - block: cleanup bio_integrity_prep (Ming Lei) [RHEL-54769 RHEL-25988]
  - block: refactor to use helper (Ming Lei) [RHEL-54769 RHEL-25988]
  - ceph: fix cap ref leak via netfs init_request (Patrick Donnelly) [RHEL-62666 RHEL-61459]
  - redhat/configs: Enable CONFIG_OCTEON_EP_VF (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep_vf: add ethtool support (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep_vf: add Tx/Rx processing and interrupt support (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep_vf: add support for ndo ops (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep_vf: add Tx/Rx ring resource setup and cleanup (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep_vf: add VF-PF mailbox communication. (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep_vf: add hardware configuration APIs (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep_vf: Add driver framework and device initialization (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep: support firmware notifications for VFs (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep: control net framework to support VF offloads (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep: PF-VF mailbox version support (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep: add PF-VF mailbox communication (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Chris von Recklinghausen) [RHEL-62209 RHEL-26268]
  - netfilter: nfnetlink_queue: un-break NF_REPEAT (Phil Sutter) [RHEL-62299]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.3.1.el9_5]
changelog:
  - perf: Fix event leak upon exec and file release (Michael Petlan) [RHEL-55606] {CVE-2024-43869}
  - perf: Fix event leak upon exit (Michael Petlan) [RHEL-55603] {CVE-2024-43870}
  - task_work: Introduce task_work_cancel() again (Michael Petlan) [RHEL-55603]
  - task_work: s/task_work_cancel()/task_work_cancel_func()/ (Michael Petlan) [RHEL-55603]
  - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44213] {CVE-2024-38558}
  - net: drop bad gso csum_start and offset in virtio_net_hdr (Laurent Vivier) [RHEL-54891] {CVE-2024-43817}
  - net: change maximum number of UDP segments to 128 (Laurent Vivier) [RHEL-54891] {CVE-2024-43817}
  - net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation (Laurent Vivier) [RHEL-54891] {CVE-2024-43817}
  - net: missing check virtio (Laurent Vivier) [RHEL-54891] {CVE-2024-43817}
  - fuse: Initialize beyond-EOF page contents before setting uptodate (CKI Backport Bot) [RHEL-56932] {CVE-2024-44947}
  - wifi: mac80211: Avoid address calculations via out of bounds array indexing (CKI Backport Bot) [RHEL-51285] {CVE-2024-41071}
  - nvme-pci: add missing condition check for existence of mapped data (Maurizio Lombardi) [RHEL-55099] {CVE-2024-42276}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.4.1.el9_5]
changelog:
  - ice: fix VSI lists confusion when adding VLANs (Michal Schmidt) [RHEL-20571]
  - ice: fix accounting for filters shared by multiple VSIs (Michal Schmidt) [RHEL-20571]
  - nvme-multipath: fix io accounting on failover (John Meneghini) [RHEL-56635]
  - nvme: fix multipath batched completion accounting (John Meneghini) [RHEL-56635]
  - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44369] {CVE-2024-36270}
  - mm: list_lru: fix UAF for memory cgroup (Rafael Aquini) [RHEL-56160] {CVE-2024-43888}
  - platform/x86: dell-smbios-wmi: Avoid false-positive memcpy() warning (David Arcari) [RHEL-56614]
  - arm64: properly install vmlinuz.efi (Lenny Szubowicz) [RHEL-46772]
  - buildtar: fix tarballs with EFI_ZBOOT enabled (Lenny Szubowicz) [RHEL-46772]
  - wifi: iwlwifi: mvm: fix a crash on 7265 (Jose Ignacio Tornos Martinez) [RHEL-57681]
  - wifi: iwlwifi: mvm: support iwl_dev_tx_power_cmd_v8 (Jose Ignacio Tornos Martinez) [RHEL-57681]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.5.1.el9_5]
changelog:
  - kabi: enable check-kabi (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol zlib_inflate_workspacesize to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol zlib_inflateInit2 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol zlib_inflateEnd to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol zlib_inflate to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol zgid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol zap_vma_ptes to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol yield to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xz_dec_run to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xz_dec_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xz_dec_end to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xsk_uses_need_wakeup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xsk_tx_release to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xsk_tx_peek_desc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xsk_tx_completed to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xsk_set_tx_need_wakeup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xsk_set_rx_need_wakeup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xsk_get_pool_from_qid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xsk_clear_rx_need_wakeup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xp_set_rxq_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xp_raw_get_dma to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xp_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xp_dma_unmap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xp_dma_sync_for_device_slow to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xp_dma_sync_for_cpu_slow to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xp_dma_map to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xp_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_warn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_set_features_flag to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_rxq_info_unreg_mem_model to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_rxq_info_unreg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_rxq_info_reg_mem_model to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __xdp_rxq_info_reg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_rxq_info_is_reg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_return_frame_rx_napi to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_return_frame to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_master_redirect to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_features_set_redirect_target to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_features_clear_redirect_target to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_do_redirect to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_do_flush to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_convert_zc_to_xdp_frame to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xattr_full_name to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xa_store to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xas_find to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xa_set_mark to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xa_load to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __xa_insert to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xa_get_mark to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xa_find_after to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xa_find to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xa_erase to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xa_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xa_clear_mark to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __xa_alloc_cyclic to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __xa_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol x86_spec_ctrl_base to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_return_thunk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_rsi to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_rdx to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_rdi to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_rcx to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_rbx to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_rbp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_rax to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_r9 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_r8 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_r15 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_r14 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_r13 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_r12 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_r11 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_r10 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol x86_cpu_to_apicid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __write_overflow_field to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol write_inode_now to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __warn_printk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol wake_up_process to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __wake_up to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __wait_on_buffer to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol wait_for_completion_timeout to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol wait_for_completion_interruptible to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol wait_for_completion to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vzalloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vsprintf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vsnprintf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vscnprintf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vprintk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vm_zone_stat to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vm_munmap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vm_mmap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vm_event_states to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vmemmap_base to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vmalloc_to_page to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vmalloc_node to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vmalloc_base to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vmalloc_32 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vmalloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __vmalloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vlan_dev_vlan_proto to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vlan_dev_vlan_id to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vlan_dev_real_dev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __virt_addr_valid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_unlink to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_symlink to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_statfs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __vfs_setxattr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_rmdir to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_rename to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __vfs_removexattr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_readlink to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_mknod to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_mkdir to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_llseek to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_link to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_iter_write to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_iter_read to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __vfs_getxattr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_get_link to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_getattr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_fsync_range to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_fsync to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfree to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __var_waitqueue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_undefined to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_teardown_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_setup_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_possible_blades to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __uv_hub_info_list to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_get_hubless_system to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __uv_cpu_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_bios_obj_count to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_bios_install_heap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_bios_get_pci_topology to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_bios_get_master_nasid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_bios_get_heapsize to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_bios_get_geoinfo to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_bios_enum_ports to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_bios_enum_objs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol usleep_range_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol up_write to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol up_read to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol up to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_sysctl_table to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_switchdev_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_switchdev_blocking_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_shrinker to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_reboot_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_nmi_handler to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_netevent_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_netdevice_notifier_net to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_netdevice_notifier_dev_net to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_netdevice_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_netdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_kprobe to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_inetaddr_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_inet6addr_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_filesystem to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_fib_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_chrdev_region to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __unregister_chrdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_blkdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_binfmt to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unmap_mapping_range to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unlock_page to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol udp_tunnel_nic_ops to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol udp4_hwcsum to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __udelay to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_unregister_driver to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_termios_encode_baud_rate to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_std_termios to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_register_driver to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_port_link_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_port_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_port_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __tty_insert_flip_string_flags to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_flip_buffer_push to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_driver_kref_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_buffer_request_room to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __tty_alloc_driver to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tsc_khz to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol try_wait_for_completion to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol try_module_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol truncate_pagecache to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol truncate_inode_pages_range to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol truncate_inode_pages_final to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol truncate_inode_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_seq_putc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_seq_printf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_raw_output_prep to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_print_flags_seq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __tracepoint_xdp_exception to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __tracepoint_mmap_lock_start_locking to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __tracepoint_mmap_lock_released to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __tracepoint_mmap_lock_acquire_returned to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_handle_return to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_event_reg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_event_raw_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_event_printf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_event_ignore_this_pid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_event_buffer_reserve to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_event_buffer_commit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol touch_softlockup_watchdog to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _totalram_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tls_validate_xmit_skb to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tls_get_record to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol timer_delete_sync to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol timer_delete to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol timecounter_read to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol timecounter_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol timecounter_cyc2time to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol time64_to_tm to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol this_cpu_off to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol thaw_bdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tcp_hashinfo to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __task_pid_nr_ns to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tasklet_unlock_wait to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tasklet_setup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __tasklet_schedule to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tasklet_kill to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tasklet_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __tasklet_hi_schedule to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sys_tz to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol system_wq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol system_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sysfs_streq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sysfs_remove_group to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sysfs_remove_file_ns to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sysfs_remove_bin_file to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __sysfs_match_string to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sysfs_emit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sysfs_create_group to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sysfs_create_file_ns to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sysfs_create_bin_file to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sysfs_add_file_to_group to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sync_mapping_buffers to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol synchronize_rcu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol synchronize_net to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol synchronize_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sync_blockdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __symbol_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __symbol_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __sw_hweight64 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __sw_hweight32 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol submit_bio_noacct to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol submit_bio to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strstr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strsep to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strrchr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strnlen_user to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strnlen to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strncpy_from_user to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strncpy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strncmp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strncasecmp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strlen to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strlcpy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strlcat to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strim to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strcspn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strcpy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strcmp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strchr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strcat to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol static_key_slow_inc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol static_key_slow_dec to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol static_key_count to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __stack_chk_fail to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sscanf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sprintf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sort to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol softnet_data to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sock_setsockopt to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sock_sendmsg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sock_release to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sock_recvmsg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sock_gen_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sock_create_kern to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sock_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sock_alloc_file to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sn_region_size to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol snprintf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sn_partition_id to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol smp_call_function_single_async to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol smp_call_function_single to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol smp_call_function_many to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sme_me_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sk_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_vlan_pop to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_tstamp_tx to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __skb_recv_udp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_realloc_headroom to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_queue_tail to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_push to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_pull to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __skb_pad to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __skb_flow_dissect to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_ext_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_dequeue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_copy_bits to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_copy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_clone_tx_timestamp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_clone to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_checksum_help to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_checksum to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_add_rx_frag to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sk_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sized_strscpy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol single_release to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol single_open_size to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol single_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol simple_write_to_buffer to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol simple_strtoull to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol simple_strtoul to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol simple_strtol to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol simple_statfs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol simple_read_from_buffer to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol simple_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol simple_attr_release to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol simple_attr_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol si_meminfo to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sigprocmask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol shrink_dcache_sb to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol shrink_dcache_parent to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __sg_page_iter_start to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __sg_page_iter_dma_next to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sg_next to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sget to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sg_copy_to_buffer to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sg_copy_from_buffer to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_user_nice to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_page_writeback to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __set_page_dirty_nobuffers to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_page_dirty_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_page_dirty to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_normalized_timespec64 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_nlink to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_freezable to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_disk_ro to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_current_groups to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_cpus_allowed_ptr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_capacity to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_blocksize to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol setattr_prepare to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol seq_write to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol seq_release to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol seq_read to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol seq_puts to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol seq_putc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol seq_printf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol seq_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol seq_lseek to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol send_sig_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol send_sig to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol security_sb_set_mnt_opts to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol security_sb_eat_lsm_opts to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol security_inode_init_security to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol security_free_mnt_opts to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol security_d_instantiate to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sdev_prefix_printk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __SCT__tp_func_xdp_exception to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __SCT__preempt_schedule_notrace to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __SCT__preempt_schedule to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __SCT__might_resched to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __SCT__cond_resched to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_vpd_lun_id to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_remove_host to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_remove_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_register_driver to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsilun_to_int to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_is_sdev_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_is_fc_rport to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_host_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_host_lookup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_host_busy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_host_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_done to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_device_type to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_device_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_device_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_command_size_tbl to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_change_queue_depth to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsicam_bios_param to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_bus_type to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_alloc_request to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_add_host_with_dma to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_add_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scnprintf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __SCK__tp_func_xdp_exception to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol schedule_timeout to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol schedule to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sched_numa_hop_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sched_clock_cpu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sched_clock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rtnl_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rtnl_trylock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rtnl_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rtnl_is_locked to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rps_may_expire_flow to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol round_jiffies to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol root_device_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __root_device_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rht_bucket_nested_insert to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rht_bucket_nested to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __rht_bucket_nested to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rhltable_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rhashtable_insert_slow to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rhashtable_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rhashtable_free_and_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rhashtable_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol revert_creds to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol request_threaded_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __request_region to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __request_module to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol request_firmware_direct to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol request_firmware to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol remove_wait_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol remove_proc_entry to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol remap_pfn_range to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol release_sock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __release_region to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol release_firmware to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_sysctl_table to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_switchdev_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_switchdev_blocking_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_shrinker to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_reboot_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __register_nmi_handler to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_netevent_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_netdevice_notifier_net to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_netdevice_notifier_dev_net to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_netdevice_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_netdevice to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_netdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_kprobe to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_inetaddr_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_inet6addr_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_filesystem to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_fib_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_chrdev_region to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __register_chrdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __register_blkdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __register_binfmt to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __refrigerator to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol refcount_warn_saturate to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol refcount_dec_if_one to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol refcount_dec_and_mutex_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol recalc_sigpending to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __read_overflow2_field to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_user_mmap_io to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_user_mmap_entry_remove to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_user_mmap_entry_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_user_mmap_entry_insert to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_user_mmap_entry_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_resolve_route to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_resolve_addr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_reject to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_read_gid_l2_fields to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_query_gid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_listen to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_disconnect to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_destroy_qp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_destroy_id to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_create_qp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __rdma_create_kernel_id to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_connect to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_bind_addr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_alloc_hw_stats_struct to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_accept to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rcuref_get_slowpath to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rcu_read_unlock_strict to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __rcu_read_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __rcu_read_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rcu_barrier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rb_next to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rb_insert_color to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rb_first to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rb_erase to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_write_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_write_unlock_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_write_unlock_bh to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_write_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_write_trylock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_write_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_write_lock_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_write_lock_bh to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_write_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_unlock_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_unlock_bh to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_trylock_bh to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_trylock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_lock_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_lock_bh to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_read_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_read_unlock_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_read_unlock_bh to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_read_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_read_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_read_lock_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_read_lock_bh to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_read_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ___ratelimit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol radix_tree_tag_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol radix_tree_next_chunk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol radix_tree_lookup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol radix_tree_insert to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol radix_tree_delete to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol queue_work_on to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol queue_delayed_work_on to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol qed_put_iscsi_ops to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol qed_put_eth_ops to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol qdisc_reset to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pv_ops to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __put_user_8 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __put_user_4 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __put_user_2 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol put_unused_fd to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol put_disk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __put_devmap_managed_page_refs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol put_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __put_cred to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ptrs_per_p4d to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ptp_schedule_worker to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ptp_parse_header to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ptp_find_pin to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ptp_clock_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ptp_clock_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ptp_clock_index to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ptp_clock_event to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ptp_classify_raw to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ___pskb_trim to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __pskb_pull_tail to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pskb_expand_head to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol psample_sample_packet to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol proc_remove to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol proc_mkdir_mode to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol proc_mkdir to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol proc_dostring to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol proc_dointvec_minmax to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol proc_dointvec to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol proc_create_data to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol proc_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol priv_to_devlink to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __printk_ratelimit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _printk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol print_hex_dump to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol prepare_to_wait_exclusive to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol prepare_to_wait_event to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol prepare_to_wait to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol prepare_creds to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol posix_test_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol posix_lock_file to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol posix_acl_valid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol posix_acl_to_xattr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol posix_acl_from_xattr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol posix_acl_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol poll_initwait to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol poll_freewait to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pm_schedule_suspend to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __pm_runtime_resume to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pldmfw_op_pci_match_record to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pldmfw_flash_image to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pipe_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pipe_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pid_task to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol physical_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol phys_base to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pgprot_writecombine to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pgdir_shift to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol perf_trace_run_bpf_submit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol perf_trace_buf_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol percpu_ref_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol percpu_ref_exit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __per_cpu_offset to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pcpu_hot to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_write_config_word to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_write_config_dword to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_wake_from_d3 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_wait_for_pending_transaction to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_vfs_assigned to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_unregister_driver to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_sriov_set_totalvfs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_sriov_get_totalvfs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_set_power_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_set_master to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_select_bars to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_save_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_restore_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_restore_msi_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_request_selected_regions to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_request_regions to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_release_selected_regions to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_release_regions to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __pci_register_driver to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_read_config_word to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_read_config_dword to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_read_config_byte to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_prepare_to_sleep to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_num_vf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_msix_free_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_msix_can_alloc_dyn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_msix_alloc_irq_at to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_irq_vector to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_iov_virtfn_devfn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_iov_vf_id to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_iov_get_pf_drvdata to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_iounmap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_ioremap_bar to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_iomap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_get_dsn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_get_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_free_irq_vectors to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_find_ext_capability to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_find_capability to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pcie_relaxed_ordering_enabled to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pcie_ptm_enabled to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pcie_print_link_status to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_enable_wake to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_enable_sriov to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_enable_ptm to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_enable_msix_range to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_enable_msi to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_enable_device_mem to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_enable_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_enable_atomic_ops_to_root to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pcie_flr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pcie_capability_read_word to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pcie_capability_read_dword to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pcie_bandwidth_available to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_disable_sriov to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_disable_msix to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_disable_msi to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_disable_link_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_disable_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_dev_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_device_is_present to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_dev_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_dev_driver to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_clear_master to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_cfg_access_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_cfg_access_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_bus_type to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_alloc_irq_vectors to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_aer_clear_nonfatal_status to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol path_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_set_int to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_set_bool to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_ushort to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_ulong to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_uint to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_string to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_short to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_long to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_int to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_charp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_byte to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_bool to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_get_int to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_array_ops to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol panic_notifier_list to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol panic to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __pagevec_release to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pagevec_lookup_range_tag to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol page_pool_update_nid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol page_pool_get_stats to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol page_pool_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol page_pool_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol page_pool_alloc_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol page_offset_base to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol page_frag_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __page_frag_cache_drain to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pagecache_get_page to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol override_creds to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol on_each_cpu_cond_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __num_online_cpus to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol numa_node to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ns_to_timespec64 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol nr_cpu_ids to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol notify_change to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol noop_llseek to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol node_to_cpumask_map to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol node_states to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __node_distance to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol node_data to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol nla_find to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol new_inode to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol net_ratelimit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_tx_wake_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_tx_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_tx_stop_all_queues to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_tx_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_set_xps_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_set_tso_max_size to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_set_real_num_tx_queues to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_set_real_num_rx_queues to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_schedule_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_rx to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __netif_napi_del to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_napi_add_weight to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_device_detach to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_device_attach to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_carrier_on to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_carrier_off to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_carrier_event to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol net_dim to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_warn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_update_features to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_unbind_sb_channel to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_state_change to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_set_tc_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_set_sb_channel to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_set_num_tc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_rx_handler_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_rx_handler_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_rss_key_fill to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_reset_tc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_refcnt_read to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_printk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_port_same_parent_id to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_pick_tx to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_notice to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_master_upper_dev_get_rcu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_master_upper_dev_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_lower_get_next to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_features_change to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_err to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_crit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_bind_sb_channel_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __netdev_alloc_skb to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol neigh_lookup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __neigh_event_send to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol neigh_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ndo_dflt_fdb_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ndo_dflt_bridge_getlink to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __ndelay to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol napi_schedule_prep to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __napi_schedule_irqoff to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __napi_schedule to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol napi_gro_receive to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol napi_enable to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol napi_disable to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol napi_consume_skb to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol napi_complete_done to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol napi_busy_loop to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol napi_build_skb to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol napi_alloc_skb to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol names_cachep to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mutex_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mutex_trylock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mutex_lock_interruptible to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mutex_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mutex_is_locked to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __mutex_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol msleep_interruptible to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol msleep to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __msecs_to_jiffies to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mpage_writepages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mpage_readahead to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mount_nodev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mount_bdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol module_refcount to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol module_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol module_layout to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __module_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mod_timer to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mod_delayed_work_on to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mntput to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mntget to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mmu_notifier_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mmu_notifier_get_locked to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mmput to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __mmap_lock_do_trace_start_locking to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __mmap_lock_do_trace_released to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __mmap_lock_do_trace_acquire_returned to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mlxfw_firmware_flash to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol misc_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol misc_deregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol metadata_dst_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol metadata_dst_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol memset to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mem_section to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mempool_free_slab to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mempool_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mempool_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mempool_create_node to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mempool_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mempool_alloc_slab to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mempool_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol memparse to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol memory_read_from_buffer to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol memmove to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol memdup_user to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol memcpy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol memcmp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol memchr_inv to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mds_idle_clear to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mark_page_accessed to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __mark_inode_dirty to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mark_buffer_dirty to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol loops_per_jiffy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol lookup_one_len to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol lookup_bdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol lock_sock_nested to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol locks_lock_inode_wait to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol locks_delete_block to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol lockref_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __local_bh_enable_ip to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol llist_add_batch to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __list_del_entry_valid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __list_add_valid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kvmalloc_node to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kvfree_call_rcu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kvfree to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ktime_get_with_offset to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ktime_get_ts64 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ktime_get_snapshot to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ktime_get_real_ts64 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ktime_get_real_seconds to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ktime_get_coarse_real_ts64 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ktime_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_use_mm to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_unuse_mm to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_stop to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_should_stop to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_queue_work to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_queue_delayed_work to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_destroy_worker to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_delayed_work_timer_fn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_create_worker to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_create_on_node to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_complete_and_exit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_cancel_work_sync to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_cancel_delayed_work_sync to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_bind to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kstrtoull to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kstrtouint to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kstrtou8 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kstrtou16 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kstrtos16 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kstrtoll to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kstrtoint to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kstrtobool to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kstrdup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol krealloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kobject_uevent_env to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kobject_uevent to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kobject_set_name to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kobject_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kobject_init_and_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kobject_get_unless_zero to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kobject_create_and_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmemdup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmem_cache_shrink to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmem_cache_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmem_cache_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmem_cache_create_usercopy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmem_cache_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmem_cache_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmalloc_trace to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmalloc_node_trace to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __kmalloc_node to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmalloc_large to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmalloc_caches to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __kmalloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kill_pid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kill_pgrp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kill_fasync to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kill_block_super to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kill_anon_super to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kfree to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kexec_crash_loaded to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kern_path_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kern_path to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kernel_write to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kernel_sigaction to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kernel_sendmsg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kernel_recvmsg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kernel_read to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kernel_fpu_end to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kernel_fpu_begin_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kblockd_schedule_work to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kasprintf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol jiffies_to_usecs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol jiffies_to_msecs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol jiffies_64 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol jiffies to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iter_file_splice_write to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iterate_dir to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol is_vmalloc_addr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol is_uv_system to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iscsi_boot_create_host_kset to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol irq_set_affinity_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol irq_poll_enable to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol irq_poll_disable to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol irq_get_irq_data to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol irq_cpu_rmap_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __irq_apply_affinity_hint to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ipv6_stub to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ipv6_skip_exthdr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ipv6_find_hdr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ipv6_chk_addr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __ipv6_addr_type to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iput to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ip_tos2prio to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ip_send_check to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ip_route_output_flow to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ip_queue_xmit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __ip_dev_find to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ip6_route_output_flags to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ip6_dst_hoplimit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iowrite32be to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iov_iter_kvec to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iov_iter_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iov_iter_advance to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iounmap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ioremap_wc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ioremap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ioread8 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ioread32be to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ioread16be to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iomem_resource to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol invalidate_mapping_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol invalidate_inode_pages2_range to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol invalidate_bdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol int_to_scsilun to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol int_pow to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __insert_inode_hash to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol inode_permission to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol inode_init_always to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol init_wait_var_entry to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __init_waitqueue_head to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol init_wait_entry to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol init_uts_ns to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol init_user_ns to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol init_timer_key to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol init_task to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __init_swait_queue_head to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol init_special_inode to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __init_rwsem to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol init_net to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol in_group_p to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol inet_del_protocol to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol inet_add_protocol to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol in_dev_finish_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol in_aton to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol in6_pton to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol in4_pton to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol import_iovec to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ilookup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol igrab to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol idr_remove to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol idr_preload to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol idr_get_next_ul to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol idr_find to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol idr_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol idr_alloc_u32 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol idr_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ida_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ida_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ida_alloc_range to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_unregister_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_umem_release to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_umem_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_umem_find_best_pgsz to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_umem_dmabuf_get_pinned to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_sg_to_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_set_device_ops to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_resize_cq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_register_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_query_port to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_modify_qp_is_ok to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_get_eth_speed to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_dispatch_event to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ibdev_warn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ibdev_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_device_set_netdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_device_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_device_get_by_netdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ibdev_err to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol I_BDEV to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_destroy_cq_user to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_dereg_mr_user to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_dealloc_pd_user to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_dealloc_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __ib_create_cq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __ib_alloc_pd to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _ib_alloc_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hyperv_write_cfg_blk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hyperv_reg_block_invalidate to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hyperv_read_cfg_blk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hwmon_device_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hwmon_device_register_with_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hwmon_device_register_with_groups to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __hw_addr_unsync_dev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __hw_addr_sync_dev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __hw_addr_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hugetlb_optimize_vmemmap_key to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hrtimer_start_range_ns to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hrtimer_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hrtimer_forward to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hrtimer_cancel to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hex_dump_to_buffer to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol groups_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol groups_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol gnss_register_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol gnss_put_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol gnss_insert_raw to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol gnss_deregister_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol gnss_allocate_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol get_zeroed_page to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol get_user_pages_remote to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol get_user_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __get_user_nocheck_1 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __get_user_2 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __get_user_1 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol get_unused_fd_flags to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol get_random_bytes to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol get_fs_type to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __get_free_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol get_device_system_crosststamp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol get_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_write_end to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_write_checks to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_shutdown_super to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_setlease to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_read_dir to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_pipe_buf_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_permission to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_fillattr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_file_write_iter to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __generic_file_write_iter to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_file_splice_read to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_file_read_iter to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_file_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_file_llseek to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_error_remove_page to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_delete_inode to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol gcd to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol fs_bio_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol freezing_slow_path to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol freeze_bdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol free_percpu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol free_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __free_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol free_netdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol free_irq_cpu_rmap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol free_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol free_fib_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol free_cpumask_var to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol fput to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol fortify_panic to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol forget_all_cached_acls to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol follow_up to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol folio_wait_bit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __folio_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __folio_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __folio_cancel_dirty to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __flush_workqueue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flush_work to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flush_signals to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_vlan to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_pppoe to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_ports to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_ipv6_addrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_ipv4_addrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_ip to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_eth_addrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_enc_ports to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_enc_keyid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_enc_ipv6_addrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_enc_ipv4_addrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_enc_ip to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_enc_control to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_cvlan to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_control to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_basic to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_keys_dissector to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_indr_dev_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_indr_dev_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_indr_block_cb_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_block_cb_setup_simple to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_block_cb_lookup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_block_cb_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_block_cb_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol firmware_request_nowarn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol finish_wait to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol finish_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol finish_no_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol find_vma to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol find_pid_ns to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _find_next_zero_bit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _find_next_bit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _find_next_andnot_bit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _find_next_and_bit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _find_last_bit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol find_get_pid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol find_get_pages_range_tag to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _find_first_zero_bit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _find_first_bit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol filp_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol filp_close to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol file_write_and_wait_range to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol file_ns_capable to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol filemap_write_and_wait_range to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol filemap_fault to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol file_bdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol fget to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __fentry__ to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol fd_install to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol event_triggers_call to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol eth_validate_addr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol eth_type_trans to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ethtool_sprintf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ethtool_op_get_ts_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ethtool_op_get_link to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ethtool_intersect_link_masks to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ethtool_convert_link_mode_to_legacy_u32 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ethtool_convert_legacy_u32_to_link_mode to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol eth_platform_get_mac_address to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol eth_get_headlen to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ether_setup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol end_page_writeback to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol enable_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol empty_zero_page to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol emergency_restart to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol elfcorehdr_addr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol efi to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __dynamic_pr_debug to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __dynamic_netdev_dbg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __dynamic_ibdev_dbg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __dynamic_dev_dbg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dump_stack to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dst_release to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_set_d_op to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol drop_super to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol driver_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol driver_remove_file to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol driver_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol driver_for_each_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol driver_create_file to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_rehash to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dql_reset to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dql_completed to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dput to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_prune_aliases to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_pin_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_pin_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_pin_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_pin_on_pin_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_pin_on_pin_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_pin_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_pin_change_ntf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_netdev_pin_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_netdev_pin_clear to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_device_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_device_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_device_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_device_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_device_change_ntf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_path to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol down_write_trylock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol down_write to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol down_trylock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol down_read_trylock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol down_read to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol down_interruptible to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol downgrade_write to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol down to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol do_trace_netlink_extack to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol done_path_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_obtain_alias to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_move to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dmi_get_system_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dmi_find_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_unmap_page_attrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_set_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_set_coherent_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_pool_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_pool_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_pool_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_pool_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dmam_free_coherent to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_map_page_attrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dmam_alloc_attrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_make_root to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_free_attrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_alloc_attrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol disable_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_invalidate to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_instantiate to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_hash_and_lookup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dget_parent to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_find_alias to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _dev_warn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_uc_del to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_uc_add_excl to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_uc_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_set_promiscuity to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_set_name to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_set_mtu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_set_mac_address to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_remove_pack to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __dev_queue_xmit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_printk_emit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devm_request_threaded_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devm_kmemdup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devm_kmalloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devm_kfree to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devm_kasprintf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devm_hwmon_device_register_with_groups to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devm_free_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_mc_del_global to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_mc_del to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_mc_add_global to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_mc_add_excl to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_mc_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devmap_managed_key to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __devm_add_action to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_traps_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_traps_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_trap_groups_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_trap_groups_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_resources_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_resource_size_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_resource_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_rate_nodes_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_rate_node_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_rate_leaf_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_rate_leaf_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_port_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_port_health_reporter_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_params_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_params_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_param_driverinit_value_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_param_driverinit_value_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_trap_report to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_to_dev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_resources_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_resource_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_resource_occ_get_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_resource_occ_get_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_remote_reload_actions_performed to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_region_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_region_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_priv to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_port_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_port_type_clear to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_port_register_with_ops to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_port_health_reporter_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_port_attrs_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_port_attrs_pci_vf_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_port_attrs_pci_sf_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_port_attrs_pci_pf_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_params_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_params_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_net to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_info_version_stored_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_info_version_running_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_info_version_fixed_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_info_serial_number_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_health_reporter_state_update to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_health_reporter_priv to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_health_reporter_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_health_reporter_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_health_report to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_u8_pair_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_u64_pair_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_u32_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_u32_pair_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_string_pair_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_pair_nest_start to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_pair_nest_end to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_obj_nest_start to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_obj_nest_end to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_bool_pair_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_binary_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_binary_pair_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_binary_pair_nest_start to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_binary_pair_nest_end to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_arr_pair_nest_start to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_arr_pair_nest_end to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_flash_update_timeout_notify to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_flash_update_status_notify to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_alloc_ns to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_health_reporter_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_health_reporter_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_assert_locked to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_kfree_skb_irq_reason to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_kfree_skb_any_reason to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _dev_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol device_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol device_set_wakeup_enable to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol device_remove_file to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol device_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol device_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol device_del to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol device_create_file to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol device_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol device_add_disk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_get_stats to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_get_iflink to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_get_by_name to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_get_by_index_rcu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_get_by_index to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _dev_err to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_driver_string to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _dev_crit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_close to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_change_flags to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_base_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_addr_del to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_addr_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_add_pack to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol destroy_workqueue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __destroy_inode to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dentry_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol del_gendisk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol delayed_work_timer_fn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __delay to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol default_wake_function to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol default_llseek to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dec_zone_page_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_remove to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_lookup_and_remove to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_lookup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_x32 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_u8 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_u64 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_u32 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_size_t to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_file_unsafe to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_file to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_dir to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_blob to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_atomic_t to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_attr_write to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_attr_read to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol deactivate_super to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_drop to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __d_drop to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dcb_setapp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dcbnl_ieee_notify to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dcb_ieee_setapp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dcb_ieee_delapp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dcb_getapp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dca_unregister_notify to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dca_remove_requester to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dca_register_notify to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dca_add_requester to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dca3_get_tag to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_alloc_anon to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol current_umask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol current_time to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _ctype to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol csum_partial to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol csum_ipv6_magic to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol crypto_shash_update to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol crypto_shash_final to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol crypto_destroy_tfm to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol crypto_alloc_shash to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol create_empty_buffers to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol crc32_le to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cpu_sibling_map to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __cpu_present_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __cpu_possible_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __cpu_online_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cpu_number to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cpumask_local_spread to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cpu_khz to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cpu_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __cpuhp_setup_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __cpuhp_remove_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cpufreq_quick_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cpu_bit_bitmap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol copy_user_generic_unrolled to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol copy_user_generic_string to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol copy_user_enhanced_fast_string to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _copy_to_user to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _copy_to_iter to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __copy_overflow to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _copy_from_user to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _copy_from_iter to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol convert_art_ns_to_tsc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol consume_skb to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __const_udelay to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol config_group_init_type_name to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol config_group_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol configfs_unregister_subsystem to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol configfs_register_subsystem to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __cond_resched to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol complete_all to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol complete to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol commit_creds to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol clock_t_to_jiffies to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol clear_page_dirty_for_io to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol clear_nlink to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol clear_inode to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol class_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol class_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol class_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __check_object_size to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cdev_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cdev_del to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cdev_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cdev_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cc_mkdec to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol capable to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cancel_work_sync to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cancel_work to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cancel_delayed_work_sync to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cancel_delayed_work to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol call_usermodehelper to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol call_switchdev_notifiers to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol call_srcu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol call_rcu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol call_netdevice_notifiers to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cachemode2protval to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bus_unregister_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bus_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bus_register_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bus_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bus_for_each_dev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bus_find_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol build_skb to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __break_lease to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_warn_invalid_xdp_action to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_trace_run7 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_trace_run5 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_trace_run4 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_trace_run3 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_trace_run2 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_trace_run1 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_stats_enabled_key to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_prog_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_prog_inc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_prog_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_master_redirect_enabled_key to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_dispatcher_xdp_func to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol boot_cpu_data to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol block_write_full_page to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol block_write_begin to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blocking_notifier_chain_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blocking_notifier_chain_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blocking_notifier_call_chain to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blockdev_superblock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_status_to_errno to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_start_plug to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_stack_limits to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_set_queue_depth to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_rq_map_user_iov to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_rq_map_user to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __blk_rq_map_sg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_rq_map_kern to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_segment_boundary to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_physical_block_size to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_max_segments to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_max_hw_sectors to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_max_discard_sectors to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_logical_block_size to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_io_opt to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_io_min to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_flag_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_flag_clear to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_dma_alignment to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_bounce_limit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_put_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_unfreeze_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_stop_hw_queues to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_start_request to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_run_hw_queues to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_run_hw_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_map_queues to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_init_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_init_allocated_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_freeze_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_free_tag_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_free_request to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_end_request to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __blk_mq_end_request to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_destroy_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_complete_request to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_alloc_tag_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_alloc_request to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_integrity_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_finish_plug to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_execute_rq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blkdev_issue_flush to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __blk_alloc_disk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bitmap_zalloc_node to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bitmap_zalloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_xor to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_weight to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_subset to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bitmap_release_region to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bitmap_print_to_pagebuf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bitmap_parselist to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_or to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_intersects to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bitmap_from_arr32 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bitmap_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bitmap_find_next_zero_area_off to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bitmap_find_free_region to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_equal to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_clear to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_andnot to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_and to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bioset_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bioset_exit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_kmalloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_integrity_prep to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_endio to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_clone_blkg_association to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_associate_blkg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_alloc_clone to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_alloc_bioset to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_add_page to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bin2hex to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bdev_file_open_by_path to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bdev_file_open_by_dev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol balance_dirty_pages_ratelimited to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol avenrun to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol auxiliary_driver_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __auxiliary_driver_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol auxiliary_device_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __auxiliary_device_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol autoremove_wake_function to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol atomic_notifier_chain_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol atomic_notifier_chain_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol atomic_notifier_call_chain to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _atomic_dec_and_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol async_synchronize_full_domain to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol async_synchronize_full to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol async_schedule_node to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol arp_tbl to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol argv_split to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol argv_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol arch_touch_nmi_watchdog to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol alloc_workqueue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __alloc_skb to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __alloc_percpu_gfp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __alloc_percpu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol alloc_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __alloc_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol alloc_netdev_mqs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol alloc_etherdev_mqs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol alloc_cpu_rmap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol alloc_chrdev_region to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol add_wait_queue_exclusive to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol add_wait_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol add_timer to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol acpi_get_table to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol acpi_disabled to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol abort_creds to stablelist (Čestmír Kalina) [RHEL-56065]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.6.1.el9_5]
changelog:
  - scsi: smartpqi: Bump driver version to 2.1.26-030 (Don Brace) [RHEL-21268]
  - scsi: smartpqi: Fix logical volume rescan race condition (Don Brace) [RHEL-21268]
  - scsi: smartpqi: Add new controller PCI IDs (Don Brace) [RHEL-21268]
  - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51559] {CVE-2024-42079}
  - x86/mm: Fix pti_clone_pgtable() alignment assumption (Rafael Aquini) [RHEL-57170] {CVE-2024-44965}
  - bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (CKI Backport Bot) [RHEL-47822] {CVE-2024-40919}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.7.1.el9_5]
changelog:
  - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (Jose Ignacio Tornos Martinez) [RHEL-55579] {CVE-2024-43879}
  - wifi: mac80211: fix NULL dereference at band check in starting tx ba session (Jose Ignacio Tornos Martinez) [RHEL-56191] {CVE-2024-43911}
  - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (Jose Ignacio Tornos Martinez) [RHEL-54805] {CVE-2024-43842}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.8.1.el9_5]
changelog:
  - ionic: fix kernel panic in XDP_TX action (CKI Backport Bot) [RHEL-47730] {CVE-2024-40907}
  - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (Izabela Bakollari) [RHEL-44037] {CVE-2024-38586}
  - ata: libata-core: Fix double free on error (Tomas Henzl) [RHEL-53777]
  - ata: libata: Fix memory leak for error path in ata_host_alloc() (Tomas Henzl) [RHEL-53777]
  - ata: ahci: Clean up sysfs file on error (Tomas Henzl) [RHEL-53777]
  - ata: libata-core: Fix null pointer dereference on error (Tomas Henzl) [RHEL-53777]
  - ata: libata-core: Add ATA_HORKAGE_NOLPM for all Crucial BX SSD1 models (Tomas Henzl) [RHEL-53777]
  - ata: ahci: Do not enable LPM if no LPM states are supported by the HBA (Tomas Henzl) [RHEL-53777]
  - ata: libata-scsi: Set the RMB bit only for removable media devices (Tomas Henzl) [RHEL-53777]
  - ata: libata-core: Do not try to set sleeping devices to standby (Tomas Henzl) [RHEL-53777]
  - KVM: s390: fix validity interception issue when gisa is switched off (CKI Backport Bot) [RHEL-57197] {CVE-2024-45005}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.9.1.el9_5]
changelog:
  - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55074] {CVE-2024-42284}
  - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57119] {CVE-2024-44970}
  - net/mlx5e: Fix CT entry update leaks of modify header context (Michal Schmidt) [RHEL-55628] {CVE-2024-43864}
  - net/mlx5: Always drain health in shutdown callback (Michal Schmidt) [RHEL-55616] {CVE-2024-43866}
  - net/mlx5: SF, Stop waiting for FW as teardown was called (Michal Schmidt) [RHEL-55616]
  - net/mlx5: Fix missing lock on sync reset reload (Michal Schmidt) [RHEL-55121] {CVE-2024-42268}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.10.1.el9_5]
changelog:
  - intel_th: pci: Add Granite Rapids SOC support (Michael Petlan) [RHEL-15664]
  - dma: fix call order in dmam_free_coherent (Eder Zulian) [RHEL-54751] {CVE-2024-43856}
  - dmaengine: idxd: Avoid unnecessary destruction of file_ida (Jerry Snitselaar) [RHEL-44508] {CVE-2024-38629}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.11.1.el9_5]
changelog:
  - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56254] {CVE-2024-43892}
  - bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (Michal Schmidt) [RHEL-57259] {CVE-2024-44984}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.12.1.el9_5]
changelog:
  - net: nexthop: Initialize all fields in dumped nexthops (Antoine Tenart) [RHEL-55080] {CVE-2024-42283}
  - tracing/osnoise: Fix build when timerlat is not enabled (Tomas Glozar) [RHEL-61870 RHEL-39968]
  - tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread() (Tomas Glozar) [RHEL-61870 RHEL-39968]
  - tracing/timerlat: Only clear timer if a kthread exists (Tomas Glozar) [RHEL-61870 RHEL-39968]
  - tracing/osnoise: Use a cpumask to know what threads are kthreads (Tomas Glozar) [RHEL-61870 RHEL-39968]
  - iommufd: Require drivers to supply the cache_invalidate_user ops (CKI Backport Bot) [RHEL-60681 RHEL-60761] {CVE-2024-46824}
  - Revert "fw loader: Remove the now superfluous sentinel element from ctl_table array" (Eric Chanudet) [RHEL-62925 RHEL-50129]
  - smb: client: fix hang in wait_for_response() for negproto (Jay Shin) [RHEL-61607 RHEL-57983]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.13.1.el9_5]
changelog:
  - efi: libstub: Move screen_info handling to common code (Maxim Levitsky) [RHEL-65344]
  - mpls: Reduce skb re-allocations due to skb_cow() (Guillaume Nault) [RHEL-61697]
  - mptcp: pm: Fix uaf in __timer_delete_sync (CKI Backport Bot) [RHEL-64678 RHEL-60737] {CVE-2024-46858}
  - ceph: fix cap ref leak via netfs init_request (Patrick Donnelly) [RHEL-62667 RHEL-61459]
  - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann)


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.14.1.el9_5]
changelog:
  - ext4: fix off by one issue in alloc_flex_gd() (Pavel Reichl) [RHEL-65318]
  - ping: fix address binding wrt vrf (Antoine Tenart) [RHEL-57564 RHEL-50920]
  - smb: client: stop flooding dmesg in smb2_calc_signature() (Paulo Alcantara) [RHEL-36346 RHEL-61193]
  - smb: client: print failed session logoffs with FYI (Paulo Alcantara) [RHEL-36346 RHEL-61193]
  - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-36346 RHEL-61193]
  - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-36346 RHEL-61193]
  - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-36346 RHEL-61193]
  - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-36346 RHEL-61193]
  - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-36346 RHEL-61193]
  - smb: client: handle lack of FSCTL_GET_REPARSE_POINT support (Paulo Alcantara) [RHEL-36346 RHEL-57983]
  - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-36346 RHEL-57983]
  - cifs: Fix reacquisition of volume cookie on still-live connection (Paulo Alcantara) [RHEL-36346 RHEL-57983]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.15.1.el9_5]
changelog:
  - USB: serial: mos7840: fix crash on resume (Desnes Nunes) [RHEL-65484 RHEL-59050] {CVE-2024-42244}
  - attr: block mode changes of symlinks (CKI Backport Bot) [RHEL-61231 RHEL-60822]
  - ice: Adjust PTP init for 2x50G E825C devices (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Add NAC Topology device capability parser (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Add support for E825-C TS PLL handling (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Change CGU regs struct to anonymous (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Introduce ETH56G PHY model for E825C products (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Introduce ice_get_base_incval() helper (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Move CGU block (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Add PHY OFFSET_READY register clearing (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Implement Tx interrupt enablement functions (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Introduce helper to get tmr_cmd_reg values (Petr Oros) [RHEL-64017 RHEL-29210]
  - ice: Introduce ice_ptp_hw struct (Petr Oros) [RHEL-64017 RHEL-29210]
  - wifi: rtw89: limit the PPDU length for VHT rate to 0x40000 (Narpat Mali) [RHEL-61753 RHEL-35542]
  - wifi: rtw89: 885xbx: apply common settings to 8851B, 8852B and 8852BT (Narpat Mali) [RHEL-61753 RHEL-35542]
  - wifi: rtw89: 8852b: fix definition of KIP register number (Narpat Mali) [RHEL-61753 RHEL-35542]
  - wifi: rtw89: 8852b: set AMSDU limit to 5000 (Narpat Mali) [RHEL-61753 RHEL-35542]
  - bpf: Fix overrunning reservations in ringbuf (CKI Backport Bot) [RHEL-62940] {CVE-2024-41009}
  - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-61424 RHEL-60572]
  - cxl/port: Fix use-after-free, permit out-of-order decoder shutdown (CKI Backport Bot) [RHEL-66837] {CVE-2024-50226}
  - ethtool: check device is present when getting link settings (Michal Schmidt) [RHEL-60581 RHEL-57750]
  - iommu/amd: Fix argument order in amd_iommu_dev_flush_pasid_all() (CKI Backport Bot) [RHEL-59982 RHEL-59981]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.16.1.el9_5]
changelog:
  - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-64902 RHEL-55873]
  - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Steve Best) [RHEL-65436 RHEL-27748] {CVE-2024-26615}
  - gitlab-ci: use zstream builder container image (Michael Hofmann)
  - netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (CKI Backport Bot) [RHEL-66856] {CVE-2024-50251}
  - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (CKI Backport Bot) [RHEL-65401] {CVE-2024-49949}
  - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-58761 RHEL-54768] {CVE-2024-43854}
  - proc: fix dentry/inode overinstantiating under /proc/${pid}/net (Joel Savitz) [RHEL-62824 RHEL-57703]
  - iommu: Restore lost return in iommu_report_device_fault() (CKI Backport Bot) [RHEL-67364] {CVE-2024-44994}
  - net: ena: Extend customer metrics reporting support (Kamal Heib) [RHEL-66933 RHEL-59968]
  - net: ena: Add ENA Express metrics support (Kamal Heib) [RHEL-66933 RHEL-59968]
  - xsk: fix batch alloc API on non-coherent systems (Felix Maurer) [RHEL-59884 RHEL-58954]
  - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66106] {CVE-2024-46695}
  - PCI/AER: Disable AER service on suspend (Lenny Szubowicz) [RHEL-67037 RHEL-22265]
  - ACPI: PM: s2idle: Evaluate all Low-Power S0 Idle _DSM functions (Mark Langsdorf) [RHEL-67037 RHEL-54149]
  - mptcp: fallback when MPTCP opts are dropped after 1st data (CKI Backport Bot) [RHEL-62216 RHEL-62218]
  - cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value (David Arcari) [RHEL-61469 RHEL-45016]
  - cpufreq/amd-pstate: Add the missing cpufreq_cpu_put() (David Arcari) [RHEL-61469 RHEL-45016]
  - cpufreq/amd-pstate: Fix the scaling_max_freq setting on shared memory CPPC systems (David Arcari) [RHEL-61469 RHEL-45016]
  - cpufreq/amd-pstate-ut: Convert nominal_freq to khz during comparisons (David Arcari) [RHEL-61469 RHEL-45016]
  - cpufreq/amd-pstate: fix setting policy current frequency value (David Arcari) [RHEL-61469 RHEL-45016]
  - netfilter: flowtable: initialise extack before use (CKI Backport Bot) [RHEL-58545] {CVE-2024-45018}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.17.1.el9_5]
changelog:
  - arm64: probes: Remove broken LDR (literal) uprobe support (CKI Backport Bot) [RHEL-66046] {CVE-2024-50099}
  - qed: put cond_resched() in qed_dmae_operation_wait() (Michal Schmidt) [RHEL-61705 RHEL-6372]
  - qed: allow the callee of qed_mcp_nvm_read() to sleep (Michal Schmidt) [RHEL-61705 RHEL-6372]
  - qed: put cond_resched() in qed_grc_dump_ctx_data() (Michal Schmidt) [RHEL-61705 RHEL-6372]
  - qed: make 'ethtool -d' 10 times faster (Michal Schmidt) [RHEL-61705 RHEL-6372]
  - qed: allow sleep in qed_mcp_trace_dump() (Michal Schmidt) [RHEL-61705 RHEL-6372]
  - sched/numa: Fix the potential null pointer dereference in task_numa_work() (CKI Backport Bot) [RHEL-66810] {CVE-2024-50223}
  - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66969] {CVE-2024-50192}
  - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66969] {CVE-2024-50192}
  - perf/x86/intel/uncore: Support HBM and CXL PMON counters (Michael Petlan) [RHEL-65856]
  - perf/x86/uncore: Cleanup unused unit structure (Michael Petlan) [RHEL-65856]
  - perf/x86/uncore: Apply the unit control RB tree to PCI uncore units (Michael Petlan) [RHEL-65856]
  - perf/x86/uncore: Apply the unit control RB tree to MSR uncore units (Michael Petlan) [RHEL-65856]
  - perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units (Michael Petlan) [RHEL-65856]
  - perf/x86/uncore: Retrieve the unit ID from the unit control RB tree (Michael Petlan) [RHEL-65856]
  - perf/x86/uncore: Support per PMU cpumask (Michael Petlan) [RHEL-65856]
  - perf/x86/uncore: Save the unit control address of all units (Michael Petlan) [RHEL-65856]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.18.1.el9_5]
changelog:
  - bpf: Fix a kernel verifier crash in stacksafe() (CKI Backport Bot) [RHEL-66097 RHEL-66098] {CVE-2024-45020}
  - bpf: Fix a sdiv overflow issue (CKI Backport Bot) [RHEL-64598 RHEL-64597] {CVE-2024-49888}
  - bpf: Fix out-of-bounds write in trie_get_next_key() (CKI Backport Bot) [RHEL-66877] {CVE-2024-50262}
  - bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() (CKI Backport Bot) [RHEL-63331] {CVE-2024-47675}
  - nfsd: ensure that nfsd4_fattr_args.context is zeroed out (Jay Shin) [RHEL-58884 RHEL-58883] {CVE-2024-46697}
  - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (Jon Maloy) [RHEL-65872] {CVE-2024-50115}
  - net: tighten bad gso csum offset check in virtio_net_hdr (Guillaume Nault) [RHEL-67683]
  - udp: fix receiving fraglist GSO packets (Guillaume Nault) [RHEL-67683]
  - Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (CKI Backport Bot) [RHEL-66804] {CVE-2024-50255}
  - Bluetooth: ISO: Fix UAF on iso_sock_timeout (Bastien Nocera) [RHEL-66321] {CVE-2024-50124}
  - Bluetooth: SCO: Fix UAF on sco_sock_timeout (Bastien Nocera) [RHEL-65928] {CVE-2024-50125}
  - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (Bastien Nocera) [RHEL-65928] {CVE-2024-27398}
  - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (CKI Backport Bot) [RHEL-44173] {CVE-2024-38564}
  - Bluetooth: bnep: fix wild-memory-access in proto_unregister (CKI Backport Bot) [RHEL-66365] {CVE-2024-50148}
  - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (CKI Backport Bot) [RHEL-57716 RHEL-36374] {CVE-2024-27399}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.19.1.el9_5]
changelog:
  - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66462 RHEL-66461] {CVE-2024-50142}
  - xfrm: fix one more kernel-infoleak in algo dumping (CKI Backport Bot) [RHEL-65960] {CVE-2024-50110}
  - Revert "Merge: [qed] softlockup triggered by ethtool -d  [rhel-9.5.z]" (Lucas Zampieri) [RHEL-61705]
  - tracing/hwlat: Fix a race during cpuhp processing (Tomas Glozar) [RHEL-69468]
  - tracing/timerlat: Fix a race during cpuhp processing (Tomas Glozar) [RHEL-69468] {CVE-2024-49866}
  - tracing/timerlat: Drop interface_lock in stop_kthread() (Tomas Glozar) [RHEL-69468]
  - tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline (Tomas Glozar) [RHEL-69468]
  - ceph: remove the incorrect Fw reference check when dirtying pages (Xiubo Li) [RHEL-61416 RHEL-60255]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.20.1.el9_5]
changelog:
  - bnxt_en: Add support for user configured RSS key (Michal Schmidt) [RHEL-68699 RHEL-54645]
  - bnxt_en: Add function to calculate Toeplitz hash (Michal Schmidt) [RHEL-68699 RHEL-54645]
  - kvm: Note an RCU quiescent state on guest exit (Leonardo Bras) [RHEL-65734 RHEL-20288]
  - rcu: Add rcutree.nohz_full_patience_delay to reduce nohz_full OS jitter (Leonardo Bras) [RHEL-65734 RHEL-20288]
  - context_tracking: Fix KCSAN noinstr violation (Leonardo Bras) [RHEL-65734 RHEL-20288]
  - perf/aux: Fix AUX buffer serialization (Michael Petlan) [RHEL-67495] {CVE-2024-46713}
  - RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (Mohammad Heib) [RHEL-66669 RHEL-52759] {CVE-2024-50208}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.21.1.el9_5]
changelog:
  - mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address (CKI Backport Bot) [RHEL-66899] {CVE-2024-50252}
  - CVE-2024-53122 mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Patrick Talbert) [RHEL-70083 RHEL-69670] {CVE-2024-53122}
  - mm: make show_free_areas() static (Aristeu Rozanski) [RHEL-66998 RHEL-27743]
  - mm: remove arguments of show_mem() (Aristeu Rozanski) [RHEL-66998 RHEL-27743]
  - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-67922 RHEL-65229]
  - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-67922 RHEL-65229]
  - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-67922 RHEL-65229]
  - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-67922 RHEL-65229]
  - KVM: s390: remove useless include (Thomas Huth) [RHEL-67922 RHEL-65229]
  - s390/mm: Re-enable the shared zeropage for !PV and !skeys KVM guests (Thomas Huth) [RHEL-67922 RHEL-65229]
  - mm/userfaultfd: Do not place zeropages when zeropages are disallowed (Thomas Huth) [RHEL-67922 RHEL-65229]
  - s390: allow pte_offset_map_lock() to fail (Thomas Huth) [RHEL-67922 RHEL-54248]
  - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-67922 RHEL-65229]
  - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-67922 RHEL-65229]
  - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-68137 RHEL-68102]
  - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-68137 RHEL-68102]
  - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: Call gfs2_queue_verify_delete from gfs2_evict_inode (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: Minor delete_work_func cleanup (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: Allow immediate GLF_VERIFY_DELETE work (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-62105 RHEL-60945]
  - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-62105 RHEL-60945]
  - smb: client: fix use-after-free of signing key (Jay Shin) [RHEL-69306 RHEL-66206]
  - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-60300 RHEL-53992]
  - KVM: arm64: Ensure vgic_ready() is ordered against MMIO registration (CKI Backport Bot) [RHEL-70294]


author: Chao YE <cye@redhat.com> [5.14.0-503.22.1.el9_5]
changelog:
  - [s390] zcore: WRITE is "data source", not destination... (CKI Backport Bot) [RHEL-63078]
  - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-72218] {CVE-2024-50275}
  - bpf: Use raw_spinlock_t in ringbuf (Luis Claudio R. Goncalves) [RHEL-68992 RHEL-20608]
  - rh_messages.h: un-unmaintain hfi1 (CKI Backport Bot) [RHEL-71322]
  - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-66055 RHEL-53595]
  - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-66055 RHEL-53595]
  - ASoC: SOF: ipc4-topology: Preserve the DMA Link ID for ChainDMA on unprepare (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: ipc4-topology: Only handle dai_config with HW_PARAMS for ChainDMA (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: ipc4-topology: Use single token list for the copiers (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: ipc4-topology: Use correct queue_id for requesting input pin format (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: ipc4-topology: Adjust the params based on DAI formats (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: ipc4-topology: Improve readability of sof_ipc4_prepare_dai_copier() (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: ipc4-topology/pcm: Rename sof_ipc4_copier_is_single_format() (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: ipc4-topology: Print out the channel count in sof_ipc4_dbg_audio_format (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: ipc4-topology: support tdm slot number query (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: ipc3-topology: support tdm slot number query (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: sof-audio: add sof_dai_get_tdm_slots function (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: sof-audio: rename dai clock setting query function (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: ipc4-topology: Add support for NHLT with 16-bit only DMIC blob (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: ipc4-topology: Correct DAI copier config and NHLT blob request (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: ipc4-topology: Allow selective update in sof_ipc4_update_hw_params (Jaroslav Kysela) [RHEL-62030]
  - ASoC: SOF: ipc4-topology: remove shadowed variable (Jaroslav Kysela) [RHEL-62030]
  - Revert "ixgbe: Manual AN-37 for troublesome link partners for X550 SFI" (Ivan Vecera) [RHEL-65624]
  - KVM: SVM: Propagate error from snp_guest_req_init() to userspace (Bandan Das) [RHEL-68361 RHEL-65840]
  - KVM: SEV: Provide support for SNP_EXTENDED_GUEST_REQUEST NAE event (Bandan Das) [RHEL-68361 RHEL-65840]
  - x86/sev: Move sev_guest.h into common SEV header (Bandan Das) [RHEL-68361 RHEL-65840]
  - KVM: SEV: Provide support for SNP_GUEST_REQUEST NAE event (Bandan Das) [RHEL-68361 RHEL-65840]
  - i40e: fix race condition by adding filter's intermediate sync state (CKI Backport Bot) [RHEL-69809] {CVE-2024-53088}
  - ice: fix truesize operations for PAGE_SIZE >= 8192 (CKI Backport Bot) [RHEL-70660 RHEL-37905]
  - ice: fix ICE_LAST_OFFSET formula (CKI Backport Bot) [RHEL-70660 RHEL-37905]
  - ice: fix page reuse when PAGE_SIZE is over 8k (CKI Backport Bot) [RHEL-70660 RHEL-37905]
  - nvme-fabrics: handle zero MAXCMD without closing the connection (Maurizio Lombardi) [RHEL-72970]
  - selftests: netfilter: add test case for recent mismatch bug (Florian Westphal) [RHEL-71357 RHEL-60554]
  - netfilter: nf_tables: unconditionally flush pending work before notifier (Florian Westphal) [RHEL-71357 RHEL-60554]
  - netfilter: nft_set_pipapo_avx2: disable softinterrupts (Florian Westphal) [RHEL-71357 RHEL-60554]
  - netfilter: nf_set_pipapo: fix initial map fill (Florian Westphal) [RHEL-71357 RHEL-60554]
  - netfilter: nf_tables: store new sets in dedicated list (Florian Westphal) [RHEL-71357 RHEL-60554]
  - netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level() (Florian Westphal) [RHEL-71357 RHEL-60554]
  - netfilter: nft_socket: make cgroupsv2 matching work with namespaces (Florian Westphal) [RHEL-71357 RHEL-60554]
  - netfilter: nft_socket: fix sk refcount leaks (Florian Westphal) [RHEL-71357 RHEL-60554]
  - tcp: Fix use-after-free of nreq in reqsk_timer_handler(). (Guillaume Nault) [RHEL-70541 RHEL-70449]
  - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66329 RHEL-66328] {CVE-2024-50154}
  - rcu: Use system_unbound_wq to avoid disturbing isolated CPUs (Waiman Long) [RHEL-61329 RHEL-50220]
  - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71393 RHEL-9848]
  - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71393 RHEL-9848]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-503.23.2.el9_5]
changelog:
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (CKI Backport Bot) [RHEL-78075 RHEL-69574] {CVE-2024-53104}


author: Chao YE <cye@redhat.com> [5.14.0-503.24.1.el9_5]
changelog:
  - smb: client: fix potential race in cifs_put_tcon() (Jay Shin) [RHEL-73594 RHEL-70959]
  - smb: client: don't try following DFS links in cifs_tree_connect() (Jay Shin) [RHEL-73594 RHEL-70959]
  - smb: client: allow reconnect when sending ioctl (Jay Shin) [RHEL-73594 RHEL-70959]
  - smb: client: get rid of @nlsc param in cifs_tree_connect() (Jay Shin) [RHEL-73594 RHEL-70959]
  - smb: client: allow more DFS referrals to be cached (Jay Shin) [RHEL-73594 RHEL-70959]
  - smb3: fix broken reconnect when password changing on the server by allowing password rotation (Jay Shin) [RHEL-73594 RHEL-57983]
  - i40e: Fix handling changed priv flags (Kamal Heib) [RHEL-69857 RHEL-30524]
  - mm: migrate: fix getting incorrect page mapping during page migration (Rafael Aquini) [RHEL-70898 RHEL-27742 RHEL-28873] {CVE-2023-52490}
  - mm: migrate: record the mlocked page status to remove unnecessary lru drain (Rafael Aquini) [RHEL-70898 RHEL-27742]
  - mm: convert migrate_pages() to work on folios (Rafael Aquini) [RHEL-70898 RHEL-27742]
  - migrate_pages_batch: simplify retrying and failure counting of large folios (Rafael Aquini) [RHEL-70898 RHEL-27742]


author: Chao YE <cye@redhat.com> [5.14.0-503.26.1.el9_5]
changelog:
  - redhat: drop Y issues from changelog (Jan Stancek)
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (CKI Backport Bot) [RHEL-78075] {CVE-2024-53104}


author: Chao YE <cye@redhat.com> [5.14.0-503.27.1.el9_5]
changelog:
  - NFS: enable nconnect for RDMA (Benjamin Coddington) [RHEL-77179]
  - Revert "scsi: lpfc: Early return after marking final NLP_DROPPED flag in dev_loss_tmo" (Dick Kennedy) [RHEL-70933]
  - idpf: fix idpf_vc_core_init error path (CKI Backport Bot) [RHEL-70191]
  - idpf: avoid vport access in idpf_get_link_ksettings (CKI Backport Bot) [RHEL-70191]
  - ip6mr: fix tables suspicious RCU usage (Andrea Claudi) [RHEL-71730]
  - ipmr: tune the ipmr_can_free_table() checks. (Andrea Claudi) [RHEL-71730]
  - ipmr: add debug check for mr table cleanup (Andrea Claudi) [RHEL-71730]
  - net: ip6mr: add RTM_GETROUTE netlink op (Andrea Claudi) [RHEL-71730]
  - i40e: add ability to reset VF for Tx and Rx MDD events (Michal Schmidt) [RHEL-75972]
  - tcp: fix mptcp DSS corruption due to large pmtu xmit (Paolo Abeni) [RHEL-62215]
  - mptcp: handle consistently DSS corruption (Paolo Abeni) [RHEL-62215]


author: Chao YE <cye@redhat.com> [5.14.0-503.28.1.el9_5]
changelog:
  - bnxt_en: Fix GSO type for HW GRO packets on 5750X chips (CKI Backport Bot) [RHEL-73726]
  - intel_idle: Disable promotion to C1E on Jasper Lake and Elkhart Lake (David Arcari) [RHEL-62985]
  - intel_idle: add Granite Rapids Xeon support (David Arcari) [RHEL-62985]
  - intel_idle: Switch to new Intel CPU model defines (David Arcari) [RHEL-62985]
  - x86/resctrl: Remove redundant variable in mbm_config_write_domain() (David Arcari) [RHEL-59001]
  - x86/resctrl: Read supported bandwidth sources from CPUID (David Arcari) [RHEL-59001]
  - x86/resctrl: Remove hard-coded memory bandwidth limit (David Arcari) [RHEL-59001]
  - mei: me: disable RPL-S on SPS and IGN firmwares (CKI Backport Bot) [RHEL-60895]
  - smb: client: change return value in open_cached_dir_by_dentry() if !cfids (Jay Shin) [RHEL-75935]
  - smb: client: disable directory caching when dir_cache_timeout is zero (Jay Shin) [RHEL-75935]
  - smb: client: remove unnecessary checks in open_cached_dir() (Jay Shin) [RHEL-75935]
  - smb: prevent use-after-free due to open_cached_dir error paths (Jay Shin) [RHEL-75935] {CVE-2024-53177}
  - smb: Don't leak cfid when reconnect races with open_cached_dir (Jay Shin) [RHEL-75935] {CVE-2024-53178}
  - smb3: request handle caching when caching directories (Jay Shin) [RHEL-75935]
  - bnxt_en: Unregister PTP during PCI shutdown and suspend (Michal Schmidt) [RHEL-69514]
  - bnxt_en: Refactor bnxt_ptp_init() (Michal Schmidt) [RHEL-69514]
  - smb: client: ignore unhandled reparse tags (Jay Shin) [RHEL-77743]
  - smb: client: fix oops due to unset link speed (Jay Shin) [RHEL-77359]


author: Chao YE <cye@redhat.com> [5.14.0-503.29.1.el9_5]
changelog:
  - rhel-9.5: gate on kernel-qe tests results not cki ones (Bruno Goncalves)
  - ice: implement low latency PHY timer updates (Petr Oros) [RHEL-75466]
  - ice: check low latency PHY timer update firmware capability (Petr Oros) [RHEL-75466]
  - ice: add lock to protect low latency interface (Petr Oros) [RHEL-75466]
  - ice: rename TS_LL_READ* macros to REG_LL_PROXY_H_* (Petr Oros) [RHEL-75466]
  - ice: use read_poll_timeout_atomic in ice_read_phy_tstamp_ll_e810 (Petr Oros) [RHEL-75466]
  - smb: client: get rid of kstrdup() in get_ses_refpath() (Paulo Alcantara) [RHEL-72875]
  - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara) [RHEL-72875]
  - smb: client: don't trust DFSREF_STORAGE_SERVER bit (Paulo Alcantara) [RHEL-72875]
  - smb: client: don't check for @leaf_fullpath in match_server() (Paulo Alcantara) [RHEL-72875]
  - smb: client: get rid of TCP_Server_Info::refpath_lock (Paulo Alcantara) [RHEL-72875]
  - smb: client: don't retry DFS targets on server shutdown (Paulo Alcantara) [RHEL-72875]
  - smb: client: fix return value of parse_dfs_referrals() (Paulo Alcantara) [RHEL-72875]
  - smb: client: optimize referral walk on failed link targets (Paulo Alcantara) [RHEL-72875]
  - smb: client: provide dns_resolve_{unc,name} helpers (Paulo Alcantara) [RHEL-72875]
  - smb: client: parse DNS domain name from domain= option (Paulo Alcantara) [RHEL-72875]
  - smb: client: fix DFS mount against old servers with NTLMSSP (Paulo Alcantara) [RHEL-72875]
  - smb: client: parse av pair type 4 in CHALLENGE_MESSAGE (Paulo Alcantara) [RHEL-72875]
  - smb: client: introduce av_for_each_entry() helper (Paulo Alcantara) [RHEL-72875]
  - smb: client: fix double free of TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-72875]
  - cifs: support mounting with alternate password to allow password rotation (Paulo Alcantara) [RHEL-72875]
  - cifs: support reconnect with alternate password for SMB1 (Paulo Alcantara) [RHEL-72875]
  - smb: client: sync the root session and superblock context passwords before automounting (Paulo Alcantara) [RHEL-72875]
  - cifs: unlock on error in smb3_reconfigure() (Paulo Alcantara) [RHEL-72875]
  - cifs: during remount, make sure passwords are in sync (Paulo Alcantara) [RHEL-72875]
  - smb: client: Handle kstrdup failures for passwords (Paulo Alcantara) [RHEL-72875] {CVE-2024-50120}
  - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-72875] {CVE-2024-54680}
  - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-72875] {CVE-2024-53095}
  - Fix spelling errors in Server Message Block (Paulo Alcantara) [RHEL-72875]
  - af_packet: do not call packet_read_pending() from tpacket_destruct_skb() (CKI Backport Bot) [RHEL-78423]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-503.30.1.el9_5]
changelog:
  - can: bcm: Fix UAF in bcm_proc_show() (CKI KWF BOT) [RHEL-80746] {CVE-2023-52922}
  - smb: client: fix chmod(2) regression with ATTR_READONLY (Jay Shin) [RHEL-80526]
  - hugetlb: prioritize surplus allocation from current node (Aristeu Rozanski) [RHEL-77488]
  - dev: Acquire netdev_rename_lock before restoring dev->name in dev_change_name(). (Antoine Tenart) [RHEL-77338]
  - net: add softirq safety to netdev_rename_lock (Antoine Tenart) [RHEL-77343]
  - arp: Convert ioctl(SIOCGARP) to RCU. (Antoine Tenart) [RHEL-77343]
  - net: Protect dev->name by seqlock. (Antoine Tenart) [RHEL-77343]
  - net: Remove unused declaration dev_restart() (Antoine Tenart) [RHEL-77343]
  - arp: Get dev after calling arp_req_(delete|set|get)(). (Antoine Tenart) [RHEL-77343]
  - arp: Remove a nest in arp_req_get(). (Antoine Tenart) [RHEL-77343]
  - arp: Factorise ip_route_output() call in arp_req_set() and arp_req_delete(). (Antoine Tenart) [RHEL-77343]
  - arp: Validate netmask earlier for SIOCDARP and SIOCSARP in arp_ioctl(). (Antoine Tenart) [RHEL-77343]
  - arp: Move ATF_COM setting in arp_req_set(). (Antoine Tenart) [RHEL-77343]
  - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-75250] {CVE-2023-52605}
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-75461] {CVE-2024-50264}
  - x86/pci: Skip early E820 check for ECAM region (CKI Backport Bot) [RHEL-67065]
  - cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids (Steve Best) [RHEL-64291]


author: Chao YE <cye@redhat.com> [5.14.0-503.31.1.el9_5]
changelog:
  - HID: core: zero-initialize the report buffer (Benjamin Tissoires) [RHEL-81838] {CVE-2024-50302}
  - x86/kaslr: Expose and use the end of the physical memory address space (Waiman Long) [RHEL-70002]
  - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81799]
  - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81799]
  - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81799] {CVE-2024-53197}
  - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81799]
  - x86/kexec: Add EFI config table identity mapping for kexec kernel (Jay Shin) [RHEL-74170]
  - mm: fix NULL pointer dereference in alloc_pages_bulk_noprof (Jay Shin) [RHEL-73210] {CVE-2024-53113}
  - can: bcm: Fix UAF in bcm_proc_show() (CKI KWF BOT) [RHEL-80746] {CVE-2023-52922}
  - smb: client: fix chmod(2) regression with ATTR_READONLY (Jay Shin) [RHEL-80526]
  - hugetlb: prioritize surplus allocation from current node (Aristeu Rozanski) [RHEL-77488]
  - dev: Acquire netdev_rename_lock before restoring dev->name in dev_change_name(). (Antoine Tenart) [RHEL-77338]
  - net: add softirq safety to netdev_rename_lock (Antoine Tenart) [RHEL-77343]
  - arp: Convert ioctl(SIOCGARP) to RCU. (Antoine Tenart) [RHEL-77343]
  - net: Protect dev->name by seqlock. (Antoine Tenart) [RHEL-77343]
  - net: Remove unused declaration dev_restart() (Antoine Tenart) [RHEL-77343]
  - arp: Get dev after calling arp_req_(delete|set|get)(). (Antoine Tenart) [RHEL-77343]
  - arp: Remove a nest in arp_req_get(). (Antoine Tenart) [RHEL-77343]
  - arp: Factorise ip_route_output() call in arp_req_set() and arp_req_delete(). (Antoine Tenart) [RHEL-77343]
  - arp: Validate netmask earlier for SIOCDARP and SIOCSARP in arp_ioctl(). (Antoine Tenart) [RHEL-77343]
  - arp: Move ATF_COM setting in arp_req_set(). (Antoine Tenart) [RHEL-77343]
  - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-75250] {CVE-2023-52605}
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-75461] {CVE-2024-50264}
  - x86/pci: Skip early E820 check for ECAM region (CKI Backport Bot) [RHEL-67065]
  - cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids (Steve Best) [RHEL-64291]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-503.32.1.el9_5]
changelog:
  - SUNRPC: Handle -ETIMEDOUT return from tlshd (Benjamin Coddington) [RHEL-79870]
  - SUNRPC: timeout and cancel TLS handshake with -ETIMEDOUT (Benjamin Coddington) [RHEL-79870]
  - tls: Fix tls_sw_sendmsg error handling (Benjamin Coddington) [RHEL-79870]
  - SUNRPC: Fix a hang in TLS sock_close if sk_write_pending (Benjamin Coddington) [RHEL-79870]


author: Chao YE <cye@redhat.com> [5.14.0-503.33.1.el9_5]
changelog:
  - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-62266]
  - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-62266]
  - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-62266]
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Chris von Recklinghausen) [RHEL-62210]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-503.34.1.el9_5]
changelog:
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82734] {CVE-2025-21785}
  - crypto: rng - Fix extrng EFAULT handling (Herbert Xu) [RHEL-70643]


author: Chao YE <cye@redhat.com> [5.14.0-503.33.1.el9_5]
changelog:
  - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-62266]
  - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-62266]
  - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-62266]
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Chris von Recklinghausen) [RHEL-62210]
  - SUNRPC: Handle -ETIMEDOUT return from tlshd (Benjamin Coddington) [RHEL-79870]
  - SUNRPC: timeout and cancel TLS handshake with -ETIMEDOUT (Benjamin Coddington) [RHEL-79870]
  - tls: Fix tls_sw_sendmsg error handling (Benjamin Coddington) [RHEL-79870]
  - SUNRPC: Fix a hang in TLS sock_close if sk_write_pending (Benjamin Coddington) [RHEL-79870]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-503.35.1.el9_5]
changelog:
  - cppc_cpufreq: Use desired perf if feedback ctrs are 0 or unchanged (Mark Langsdorf) [RHEL-78643]
  - coresight: etm4x: Add ACPI support in platform driver (Mark Salter) [RHEL-80223]
  - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-73024]
  - md: fix deadlock between mddev_suspend and flush bio (Nigel Croxon) [RHEL-76058] {CVE-2024-43855}
  - redhat/configs: replace IOMMU_DEFAULT_DMA_STRICT with IOMMU_DEFAULT_DMA_LAZY (Jerry Snitselaar) [RHEL-76412]
  - ibmvnic: Only record tx completed bytes once per handler (Mamatha Inamdar) [RHEL-71289]
  - ibmvnic: Only replenish rx pool when resources are getting low (Mamatha Inamdar) [RHEL-71289]
  - ibmvnic: Return error code on TX scrq flush fail (Mamatha Inamdar) [RHEL-71289]
  - intel_idle: fix ACPI _CST matching for newer Xeon platforms (David Arcari) [RHEL-62987]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-503.36.1.el9_5]
changelog:
  - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (Steve Best) [RHEL-67636]
  - cxgb4: use port number to set mac addr (Michal Schmidt) [RHEL-79672]
  - ice: stop storing XDP verdict within ice_rx_buf (Petr Oros) [RHEL-76141]
  - ice: gather page_count()'s of each frag right before XDP prog call (Petr Oros) [RHEL-76141]
  - ice: put Rx buffers after being done with current frame (Petr Oros) [RHEL-76141]
  - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-74413]
  - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-74413]
  - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-74413] {CVE-2024-57933}
  - gve: guard XDP xmit NDO on existence of xdp queues (Joshua Washington) [RHEL-74413] {CVE-2024-57932}
  - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-74413]
  - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-74413]
  - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-74413] {CVE-2024-40937}
  - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-74413]


author: Chao YE <cye@redhat.com> [5.14.0-503.38.1.el9_5]
changelog:
  - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (CKI Backport Bot) [RHEL-86726] {CVE-2024-53150}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-503.39.1.el9_5]
changelog:
  - igb: cope with large MAX_SKB_FRAGS (Corinna Vinschen) [RHEL-75552]
  - x86/sev: Ensure that RMP table fixups are reserved (Bandan Das) [RHEL-84716]
  - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-75456] {CVE-2024-46826}
  - smb: client: fix double put of @cfile in smb2_set_path_size() (Paulo Alcantara) [RHEL-79342] {CVE-2024-46796}
  - smb: client: fix double put of @cfile in smb2_rename_path() (Paulo Alcantara) [RHEL-79342] {CVE-2024-46736}
  - smb: client: fix FSCTL_GET_REPARSE_POINT against NetApp (Paulo Alcantara) [RHEL-79342]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-503.40.1.el9_5]
changelog:
  - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (Chris Leech) [RHEL-87479] {CVE-2025-21927}
  - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-75438] {CVE-2024-42322}
  - bonding: fix null pointer deref in bond_ipsec_offload_ok (CKI Backport Bot) [RHEL-75453] {CVE-2024-44990}
  - smb: client: don't retry IO on failed negprotos with soft mounts (Jay Shin) [RHEL-85523]
  - bonding: Correctly support GSO ESP offload (CKI Backport Bot) [RHEL-73403]
  - team: prevent adding a device which is already a team device lower (Hangbin Liu) [RHEL-73403]
  - team: Fix feature exposure when no ports are present (Hangbin Liu) [RHEL-73403]
  - team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Hangbin Liu) [RHEL-73403]
  - team: Fix initial vlan_feature set in __team_compute_features (Hangbin Liu) [RHEL-73403]
  - bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (Hangbin Liu) [RHEL-73403]
  - bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features (Hangbin Liu) [RHEL-73403]
  - net, team, bonding: Add netdev_base_features helper (Hangbin Liu) [RHEL-73403]
  - bonding: add ESP offload features when slaves support (Hangbin Liu) [RHEL-73403]
  - net: team: rename team to team_core for linking (Hangbin Liu) [RHEL-73403]
  - netfilter: br_netfilter: fix panic with metadata_dst skb (Ivan Vecera) [RHEL-71956]
  - bridge: mcast: Fail MDB get request on empty entry (Ivan Vecera) [RHEL-71956]
  - net: stmmac: dwmac-tegra: Fix link bring-up sequence (Jose Ignacio Tornos Martinez) [RHEL-73478]
  - kobject_uevent: Fix OOB access within zap_modalias_env() (CKI KWF BOT) [RHEL-75435] {CVE-2024-42292}


author: Anand Jain <anand.jain@oracle.com> - 5.15.1-1.el9
changelog:
  - Release: 5.15.1-1: Fix for missing by-uuid link after mkfs (Anand Jain)  
  - btrfs-progs: fix stray fd close in open_ctree_fs_info() (Qu Wenruo)  [Orabug: 36214038] 
  - btrfs-progs: rename struct open_ctree_flags to open_ctree_args (Anand Jain)  [Orabug: 36214038] 
  - btrfs-progs: mkfs: keep file descriptors open during whole time (Qu Wenruo)  [Orabug: 36214038] 
  - btrfs-progs: mkfs: run device preparation in parallel (Li Zhang)  [Orabug: 36214038]


author: Anand Jain <anand.jain@oracle.com> - 6.12.0-1.el9
changelog:
  - btrfs-progs: release 6.12.0-1 (Anand Jain)  
  - btrfs-progs: resize: remove the misleading warning for the 'max' option (Anand Jain)  
  - btrfs-progs: btrfstune: add ability to remove squotas (Boris Burkov)  
  - btrfs-progs: add a helper for clearing all the items in a tree (Boris Burkov)  
  - btrfs-progs: btrfstune: fix documentation for --enable-simple-quota (Boris Burkov)


author: Joseph Marrero <jmarrero@redhat.com> - 0.6.3-1
changelog:
  - Rebase to 0.6.3 which is supported upstream
    This release also includes the fix for CVE-2024-42472
    Fixes: #RHEL-56797


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-5
changelog:
  - Resolves: rhbz#2014523 - c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-5.1
changelog:
  - Resolves: rhbz#2209519 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.2.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-6
changelog:
  - Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.19.1-1
changelog:
  - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
  - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
  - Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
  - Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
  - Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-6
changelog:
  - remove unnecessarily divisive terms, take 1.
  -   in ca-certificates there are 3 cases:
  -   1) master refering to the fedora master branch in the fetch.sh script.
  -      This can only be changed once fedora changes the master branch name.
  -   2) a reference to the 'master bundle' in this file: this has been changed
  -      to 'primary bundle'.
  -   3) a couple of blacklist directories owned by this package, but used to
  -      p11-kit. New 'blocklist' directories have been created, but p11-kit
  -      needs to be updated before the old blacklist directories can be removed
  -      and the man pages corrected.


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.50-90
changelog:
  -   Update to CKBI 2.50 from NSS 3.67
  -      Removing:
  -       # Certificate "QuoVadis Root CA"
  -       # Certificate "Sonera Class 2 Root CA"
  -       # Certificate "Trustis FPS Root CA"
  -      Adding:
  -       # Certificate "GLOBALTRUST 2020"
  -       # Certificate "ANF Secure Server Root CA"
  -       # Certificate "Certum EC-384 CA"
  -       # Certificate "Certum Trusted Root CA"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-90.0
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "GlobalSign Root CA - R2"
  -     # Certificate "DST Root CA X3"
  -     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
  -    Adding:
  -     # Certificate "TunTrust Root CA"
  -     # Certificate "HARICA TLS RSA Root CA 2021"
  -     # Certificate "HARICA TLS ECC Root CA 2021"
  -     # Certificate "HARICA Client RSA Root CA 2021"
  -     # Certificate "HARICA Client ECC Root CA 2021"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "vTrus ECC Root CA"
  -     # Certificate "vTrus Root CA"
  -     # Certificate "ISRG Root X2"
  -     # Certificate "HiPKI Root CA - G1"
  -     # Certificate "Telia Root CA v2"
  -     # Certificate "D-TRUST BR Root CA 1 2020"
  -     # Certificate "D-TRUST EV Root CA 1 2020"
  -     # Certificate "CAEDICOM Root"
  -     # Certificate "I.CA Root CA/RSA"
  -     # Certificate "MULTICERT Root Certification Authority 01"
  -     # Certificate "Certification Authority of WoSign G2"
  -     # Certificate "CA WoSign ECC Root"
  -     # Certificate "CCA India 2015 SPL"
  -     # Certificate "Swedish Government Root Authority v3"
  -     # Certificate "Swedish Government Root Authority v2"
  -     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "OpenTrust Root CA G2"
  -     # Certificate "OpenTrust Root CA G3"
  -     # Certificate "Certplus Root CA G1"
  -     # Certificate "Certplus Root CA G2"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Thailand National Root Certification Authority - G1"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Certification Authority of WoSign"
  -     # Certificate "CA 沃通根证书"
  -     # Certificate "SSC GDL CA Root B"
  -     # Certificate "SAPO Class 2 Root CA"
  -     # Certificate "SAPO Class 3 Root CA"
  -     # Certificate "SAPO Class 4 Root CA"
  -     # Certificate "CA Disig Root R1"
  -     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
  -     # Certificate "ApplicationCA2 Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Halcom Root CA"
  -     # Certificate "Swisscom Root EV CA 2"
  -     # Certificate "CFCA GT CA"
  -     # Certificate "Digidentity L3 Root CA - G2"
  -     # Certificate "SITHS Root CA v1"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "IGC/A AC racine Etat francais"
  -     # Certificate "PersonalID Trustworthy RootCA 2011"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "Swiss Government Root CA II"
  -     # Certificate "Swiss Government Root CA I"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "LuxTrust Global Root"
  -     # Certificate "AC1 RAIZ MTIN"
  -     # Certificate "Microsoft Root Certificate Authority 2011"
  -     # Certificate "CCA India 2011"
  -     # Certificate "ANCERT Certificados Notariales V2"
  -     # Certificate "ANCERT Certificados CGN V2"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "China Internet Network Information Center EV Certificates Root"
  -     # Certificate "Verizon Global Root CA"
  -     # Certificate "SwissSign Silver Root CA - G3"
  -     # Certificate "SwissSign Platinum Root CA - G3"
  -     # Certificate "SwissSign Gold Root CA - G3"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "SITHS CA v3"
  -     # Certificate "Certinomis - Autorité Racine"
  -     # Certificate "ANF Server CA"
  -     # Certificate "Thawte Premium Server CA"
  -     # Certificate "Thawte Server CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "KEYNECTIS ROOT CA"
  -     # Certificate "I.CA - Standard Certification Authority, 09/2009"
  -     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
  -     # Certificate "VI Registru Centras RCSC (RootCA)"
  -     # Certificate "CCA India 2007"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Actalis Authentication CA G1"
  -     # Certificate "A-Trust-Qual-03"
  -     # Certificate "AddTrust External CA Root"
  -     # Certificate "ECRaizEstado"
  -     # Certificate "Configuration"
  -     # Certificate "FNMT-RCM"
  -     # Certificate "StartCom Certification Authority"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "E-ME SSI (RCA)"
  -     # Certificate "ACEDICOM Root"
  -     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
  -     # Certificate "Correo Uruguayo - Root CA"
  -     # Certificate "CNNIC ROOT"
  -     # Certificate "Common Policy"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "Cisco Root CA 2048"
  -     # Certificate "CA Disig"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "UCA Global Root"
  -     # Certificate "UCA Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Starfield Services Root Certificate Authority"
  -     # Certificate "I.CA - Qualified root certificate"
  -     # Certificate "I.CA - Standard root certificate"
  -     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
  -     # Certificate "Japanese Government"
  -     # Certificate "AdminCA-CD-T01"
  -     # Certificate "Admin-Root-CA"
  -     # Certificate "Izenpe.com"
  -     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
  -     # Certificate "Halcom CA FO"
  -     # Certificate "Halcom CA PO 2"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "ACNLB"
  -     # Certificate "state-institutions"
  -     # Certificate "state-institutions"
  -     # Certificate "SECOM Trust Systems CO.,LTD."
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "D-TRUST Root Class 2 CA 2007"
  -     # Certificate "D-TRUST Root Class 3 CA 2007"
  -     # Certificate "SSC Root CA A"
  -     # Certificate "SSC Root CA B"
  -     # Certificate "SSC Root CA C"
  -     # Certificate "Autoridad de Certificacion de la Abogacia"
  -     # Certificate "Root CA Generalitat Valenciana"
  -     # Certificate "VAS Latvijas Pasts SSI(RCA)"
  -     # Certificate "ANCERT Certificados CGN"
  -     # Certificate "ANCERT Certificados Notariales"
  -     # Certificate "ANCERT Corporaciones de Derecho Publico"
  -     # Certificate "GLOBALTRUST"
  -     # Certificate "Certipost E-Trust TOP Root CA"
  -     # Certificate "Certipost E-Trust Primary Qualified CA"
  -     # Certificate "Certipost E-Trust Primary Normalised CA"
  -     # Certificate "GlobalSign"
  -     # Certificate "IGC/A"
  -     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "Swisscom Root CA 1"
  -     # Certificate "Microsec e-Szigno Root CA"
  -     # Certificate "LGPKI"
  -     # Certificate "AC RAIZ DNIE"
  -     # Certificate "Common Policy"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 1"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Staat der Nederlanden Root CA"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Global CA 2"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root Certification Authority"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Microsoft Root Authority"
  -     # Certificate "Microsoft Root Certificate Authority"
  -     # Certificate "Microsoft Root Certificate Authority 2010"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "UTN-USERFirst-Object"
  -     # Certificate "BYTE Root Certification Authority 001"
  -     # Certificate "CISRCA1"
  -     # Certificate "ePKI Root Certification Authority - G2"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "SSL.com EV Root Certification Authority RSA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "ACA ROOT"
  -     # Certificate "Security Communication ECC RootCA1"
  -     # Certificate "Security Communication RootCA3"
  -     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
  -     # Certificate "Network Solutions RSA Certificate Authority"
  -     # Certificate "Network Solutions ECC Certificate Authority"
  -     # Certificate "Australian Defence Public Root CA"
  -     # Certificate "SI-TRUST Root"
  -     # Certificate "Halcom Root Certificate Authority"
  -     # Certificate "Application CA G3 Root"
  -     # Certificate "GLOBALTRUST 2015"
  -     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
  -     # Certificate "emSign Root CA - G2"
  -     # Certificate "emSign Root CA - C2"
  -     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
  -     # Certificate "DigiCert CS ECC P384 Root G5"
  -     # Certificate "DigiCert CS RSA4096 Root G5"
  -     # Certificate "DigiCert RSA4096 Root G5"
  -     # Certificate "DigiCert ECC P384 Root G5"
  -     # Certificate "HARICA Code Signing RSA Root CA 2021"
  -     # Certificate "HARICA Code Signing ECC Root CA 2021"
  -     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-90.2
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "Izenpe.com"
  -     # Certificate "state-institutions"
  -     # Certificate "GlobalSign"
  -     # Certificate "Common Policy"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "AC Raíz Certicámara S.A."


author: Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-90.0
changelog:
  - Update to CKBI 2.60_v7.0.306 from NSS 3.91
  -    Removing:
  -     # Certificate "Camerfirma Global Chambersign Root"
  -     # Certificate "Staat der Nederlanden EV Root CA"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "CCA India 2007"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -    Adding:
  -     # Certificate "DigiCert TLS ECC P384 Root G5"
  -     # Certificate "DigiCert TLS RSA4096 Root G5"
  -     # Certificate "DigiCert SMIME ECC P384 Root G5"
  -     # Certificate "DigiCert SMIME RSA4096 Root G5"
  -     # Certificate "Certainly Root R1"
  -     # Certificate "Certainly Root E1"
  -     # Certificate "E-Tugra Global Root CA RSA v3"
  -     # Certificate "E-Tugra Global Root CA ECC v3"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
  -     # Certificate "BJCA Global Root CA1"
  -     # Certificate "BJCA Global Root CA2"
  -     # Certificate "Symantec Enterprise Mobile Root for Microsoft"
  -     # Certificate "A-Trust-Root-05"
  -     # Certificate "ADOCA02"
  -     # Certificate "StartCom Certification Authority G2"
  -     # Certificate "ATHEX Root CA"
  -     # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "America Online Root Certification Authority 1"
  -     # Certificate "Juur-SK"
  -     # Certificate "ComSign CA"
  -     # Certificate "ComSign Secured CA"
  -     # Certificate "ComSign Advanced Security CA"
  -     # Certificate "Global Chambersign Root"
  -     # Certificate "Sonera Class2 CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "VeriSign, Inc."
  -     # Certificate "GTE CyberTrust Global Root"
  -     # Certificate "Equifax Secure Global eBusiness CA-1"
  -     # Certificate "Equifax"
  -     # Certificate "Class 1 Primary CA"
  -     # Certificate "Swiss Government Root CA III"
  -     # Certificate "Application CA G4 Root"
  -     # Certificate "SSC GDL CA Root A"
  -     # Certificate "GlobalSign Code Signing Root E45"
  -     # Certificate "GlobalSign Code Signing Root R45"
  -     # Certificate "Entrust Code Signing Root Certification Authority - CSBR1"


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.68_v8.0.302-91
changelog:
  - Update to CKBI 2.68_v8.0.302 from NSS 3.101
  -    Removing:
  -     # Certificate "Verisign Class 1 Public Primary Certification Authority - G3"
  -     # Certificate "Verisign Class 2 Public Primary Certification Authority - G3"
  -     # Certificate "Security Communication Root CA"
  -     # Certificate "Camerfirma Chambers of Commerce Root"
  -     # Certificate "Hongkong Post Root CA 1"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Symantec Class 1 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 2 Public Primary Certification Authority - G6"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "FNMT-RCM"
  -    Adding:
  -     # Certificate "LAWtrust Root CA2 (4096)"
  -     # Certificate "Sectigo Public Email Protection Root E46"
  -     # Certificate "Sectigo Public Email Protection Root R46"
  -     # Certificate "Sectigo Public Server Authentication Root E46"
  -     # Certificate "Sectigo Public Server Authentication Root R46"
  -     # Certificate "SSL.com TLS RSA Root CA 2022"
  -     # Certificate "SSL.com TLS ECC Root CA 2022"
  -     # Certificate "SSL.com Client ECC Root CA 2022"
  -     # Certificate "SSL.com Client RSA Root CA 2022"
  -     # Certificate "Atos TrustedRoot Root CA ECC G2 2020"
  -     # Certificate "Atos TrustedRoot Root CA RSA G2 2020"
  -     # Certificate "Atos TrustedRoot Root CA ECC TLS 2021"
  -     # Certificate "Atos TrustedRoot Root CA RSA TLS 2021"
  -     # Certificate "TrustAsia Global Root CA G3"
  -     # Certificate "TrustAsia Global Root CA G4"
  -     # Certificate "CommScope Public Trust ECC Root-01"
  -     # Certificate "CommScope Public Trust ECC Root-02"
  -     # Certificate "CommScope Public Trust RSA Root-01"
  -     # Certificate "CommScope Public Trust RSA Root-02"
  -     # Certificate "D-Trust SBR Root CA 1 2022"
  -     # Certificate "D-Trust SBR Root CA 2 2022"
  -     # Certificate "Telekom Security SMIME ECC Root 2021"
  -     # Certificate "Telekom Security TLS ECC Root 2020"
  -     # Certificate "Telekom Security SMIME RSA Root 2023"
  -     # Certificate "Telekom Security TLS RSA Root 2023"
  -     # Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
  -     # Certificate "SECOM Trust.net"
  -     # Certificate "Chambers of Commerce Root"
  -     # Certificate "VeriSign Class 2 Public Primary Certification Authority - G3"
  -     # Certificate "SSL.com Code Signing RSA Root CA 2022"
  -     # Certificate "SSL.com Code Signing ECC Root CA 2022"


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.303-91
changelog:
  - Update to CKBI 2.69_v8.0.303 from NSS 3.101.1
  -    GLOBALTRUST 2020 root CA certificate set CKA_NSS_{SERVER|EMAIL}_DISTRUST_AFTER


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.303-91.3
changelog:
  - Temporarily generate the directory-hash files in %install ...(next item)
  - Add list of ghost files from directory-hash to %files


author: rhel-developer-toolbox <krenzelok.frantisek@gmail.com> - 2025.2.80_v9.0.305-91
changelog:
  - Update to CKBI 2.80_v9.0.305 from NSS 3.114
  -    Adding:
  -     # Certificate "TWCA CYBER Root CA"
  -     # Certificate "TWCA Global Root CA G2"
  -     # Certificate "SecureSign Root CA12"
  -     # Certificate "SecureSign Root CA14"
  -     # Certificate "SecureSign Root CA15"
  -     # Certificate "D-TRUST BR Root CA 2 2023"
  -     # Certificate "TrustAsia SMIME ECC Root CA"
  -     # Certificate "TrustAsia SMIME RSA Root CA"
  -     # Certificate "TrustAsia TLS ECC Root CA"
  -     # Certificate "TrustAsia TLS RSA Root CA"
  -     # Certificate "D-TRUST EV Root CA 2 2023"
  -     # Certificate "SwissSign RSA SMIME Root CA 2022 - 1"
  -     # Certificate "SwissSign RSA TLS Root CA 2022 - 1"
  -     # Certificate "Sectigo Public Code Signing Root R46"
  -     # Certificate "Sectigo Public Code Signing Root E46"


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.0-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Add BuildRequires: make
  - drop dnssrv service and timer


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (#2051441)
  - fully switch from nettle to gnutls (#1953463 #1954483)
  - use NTP servers from DHCPv6 NTP server option (#2047415)
  - drop obsolete workaround in scriptlet


author: Miroslav Lichvar <mlichvar@redhat.com> 4.5-1
changelog:
  - update to 4.5 (RHEL-6522 RHEL-6520 RHEL-9969 RHEL-9971 RHEL-9973 RHEL-9975
    RHEL-12411)
  - add chronyd-restricted service (RHEL-9972)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.5-3
changelog:
  - don't repeat error log messages when reloading sourcedir (RHEL-51786)
  - add support for leap-seconds.list file (RHEL-53484)


author: EL Errata <el-errata_ww@oracle.com> - 4.5-3.0.1
changelog:
  - Fixed chrony starting before network-online service [Orabug: 36813717]
  - Change chrony.conf to use pool.ntp.org [Orabug: 28627760]


author: Miroslav Lichvar <mlichvar@redhat.com> 4.6.1-1
changelog:
  - update to 4.6.1 (RHEL-61877)
  - keep PHC refclock reachable when dropping samples due to high delay
    (RHEL-65421)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.6.1-2
changelog:
  - improve description of refresh directive (RHEL-82096)
  - improve logging of selection failures (RHEL-80388 RHEL-80413 RHEL-80415)
  - fix sourcedir reloading to not multiply sources (RHEL-95016)
  - switch from patchX to patch -P X


author: Alexander Bokovoy <abokovoy@redhat.com> - 6.11-1
changelog:
  - Update to v6.11 release
  - Resolves: rhbz#1876400 - CVE-2020-14342 - cifs-utils: shell command injection


author: Jonathan Lebon <jonathan@jlebon.com> - 6.11-2
changelog:
  - Split out -info subpackage for smb2-quota and smbinfo
    https://bugzilla.redhat.com/show_bug.cgi?id=1909288


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: Martin Pitt <mpitt@redhat.com> - 260-1
changelog:
  - Certificate login validation: Action required on updates
  - Client: Show previously used hosts
  - Client: Support port specification
  - bridge: Warning on missing cockpit-system package


author: EL Errata <el-errata_ww@oracle.com> - 264.1-1.0.1
changelog:
  - Remove duplicate reference to server in cockpit [Orabug: 34030494]
  - Replace Oracle URLs
  - Update documentation links [Orabug: 32795691]
  - Make documentation links point to Oracle Linux information [Orabug: 30271413] [Orabug: 32013095]
  - Fix rendering of hwinfo page on systems with some empty memory slots [Orabug: 32826970]


author: EL Errata <el-errata_ww@oracle.com> - 264.2-1.0.1
changelog:
  - Replace upstream references [Orabug: 34398512]
  - Fix "virtual" network device detection code [Orabug: 33865214]
  - Remove duplicate reference to server in cockpit [Orabug: 34030494]
  - Replace Oracle URLs
  - Update documentation links [Orabug: 32795691]
  - Make documentation links point to Oracle Linux information [Orabug: 30271413] [Orabug: 32013095]
  - Fix rendering of hwinfo page on systems with some empty memory slots [Orabug: 32826970]


author: Packit <hello@packit.dev> - 272-1
changelog:
  - Firewall: Edit custom services
  - Services: Pin services as favorites
  - Login: Dark mode
  - Unprivileged cockpit/ws container mode


author: Packit <hello@packit.dev> - 273-1
changelog:
  - Metrics: Display CPU temperature
  - Networking: Suggest netmask and gateway addresses
  - Software Updates: Optionally reboot after updating
  - cockpit/ws container: Support modern SSH keys


author: Packit <hello@packit.dev> - 274-1
changelog:
  - ws: Fix segfault with channel closing (#17492)
  - Services: Fix time picker behaviour in Timer creation dialog
  - Metrics: Improve CPU temperature sensors detection


author: EL Errata <el-errata_ww@oracle.com> - 276.1-1.0.1
changelog:
  - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
  - Remove duplicate reference to server in cockpit [Orabug: 34030494]
  - Update documentation links [Orabug: 30271413], [Orabug: 32013095],
    [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876]


author: Packit <hello@packit.dev> - 286.1-1
changelog:
  - Users: Fix broken alignment of the first column in groups table
  - Translation updates (rhbz#2139644)


author: Teo Gonzalez <teo.g.gonzalez@oracle.com> - 286.2-1.0.1
changelog:
  - NBDE on block devices without a filesystem is broken. (BZ#2207498)
  - node_modules: update chrome-remote-interface for chromium 111.


author: Packit <hello@packit.dev> - 299-1
changelog:
  - Kdump: Show location of kdump to verify the successful configuration test
  - Storage: Support for no-overprovisioning with Stratis
  - Storage: Cockpit can now add caches to encrypted Stratis pools


author: Packit <hello@packit.dev> - 300-1
changelog:
  - Celebrating the Nürnberg life release!
  - Storage: Support for growing block devices of a Stratis pool


author: Alex Burmashev <alexander.burmashev@oracle.com> - 300.1-1.0.1
changelog:
  - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
  - Remove duplicate reference to server in cockpit [Orabug: 34030494]
  - Update documentation links [Orabug: 30271413], [Orabug: 32013095],
    [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876]
  - Update spec file for new release


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 300.3-1.0.1
changelog:
  - Update to 300.3
  - Resolves: RHEL-3537 - cockpit.peer: don't explode on authorize messages
  - Resolves: RHEL-5341 - Fix large file uploads through cockpit.spawn()
  - Resolves: RHEL-5765 - cockpit.superuser: prevent 'any' from being set


author: Mark Will <mark.will@oracle.com> - 300.4-1.0.1
changelog:
  - client: Provide fallback for GLib.get_user_state_dir() (RHEL-18989)
  - bridge: Add back menu/tool names to cockpit-bridge --packages (RHEL-19004)
  - bridge: Add back support for x.min.js files (RHEL-19005)


author: EL Errata <el-errata_ww@oracle.com> - 311.2-1.0.1
changelog:
  - Replaced upstream urls in documentation with oracle links [Orabug: 36528753]
  - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
  - Remove duplicate reference to server in cockpit [Orabug: 34030494]
  - Update documentation links [Orabug: 30271413], [Orabug: 32013095],
    [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876]
  - Update spec file for new release


author: Packit <hello@packit.dev> - 318-1
changelog:
  - Storage: Extra confirmation before deleting non-empty partitions in Anaconda's Web UI
  - Discontinue Intel 32-bit support in Fedora, CentOS, and RHEL
  - cockpit.js: Get user primary group ID


author: Packit <hello@packit.dev> - 320-1
changelog:
  - pam-ssh-add: Fix insecure killing of session ssh-agent [CVE-2024-6126]
  - sosreport: Read report directory from sos config (fix page on Debian/Ubuntu)


author: Packit <hello@packit.dev> - 323-1
changelog:
  - metrics: Install valkey instead of redis on RHEL/CentOS 10
  - login: Prevent multiple logins in a single browser session
  - Update documentation links


author: Lukáš Lipinský <lukas.lipinsky@oracle.com> - 323.1-1.0.1
changelog:
  - Replaced upstream urls in documentation with oracle links [Orabug: 36528753]
  - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
  - Remove duplicate reference to server in cockpit [Orabug: 34030494]
  - Update documentation links [Orabug: 30271413], [Orabug: 32013095],
    [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876], [Orabug: 37253273]
  - Update spec file for new release


author: Packit <hello@packit.dev> - 330-1
changelog:
  - Web server: Increased sandboxing, setuid removal, bootc support
  - Development: New install mode using systemd-sysext
  - ws container: Move to Fedora 41


author: Packit <hello@packit.dev> - 331-1
changelog:
  - ws: Prevent search engine indexing with robots.txt
  - container/ws: Support using an external SSH agent


author: Packit <hello@packit.dev> - 332-1
changelog:
  - containers/ws: Include cockpit-files
  - login: Beibooting to all supported OSes
  - metrics: Show system boots in metrics


author: EL Errata <el-errata_ww@oracle.com> - 334.1-1.0.1
changelog:
  - Storage: Enable btrfs support [Orabug: 37464632]
  - Replaced upstream urls in documentation with oracle links [Orabug: 36528753]
  - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
  - Remove duplicate reference to server in cockpit [Orabug: 34030494]
  - Update documentation links [Orabug: 30271413], [Orabug: 32013095],
    [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876], [Orabug: 37253273]
  - Update spec file for new release


author: Packit <hello@packit.dev> - 350-1
changelog:
  - networking: fix renaming of bridges and other groups (RHEL-117883)
  - bridge: fix OpenSSH_10.2p1 host key detection


author: Tomas Matus <tmatus@redhat.com> - 356.1-1
changelog:
  - ws: Prevent remote code execution with SSH argument injection (RHEL-158310)
  - node: update lodash dependency (RHEL-164196)


author: EL Errata <el-errata_ww@oracle.com> - 356.2-1.0.1
changelog:
  - Apply the patch for duplicate reference [Orabug: 39250109]
  - Storage: Enable btrfs support [Orabug: 37464632]
  - Replaced upstream urls in documentation with oracle links [Orabug: 36528753]
  - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
  - Remove duplicate reference to server in cockpit [Orabug: 34030494]
  - Update documentation links [Orabug: 30271413], [Orabug: 32013095],
    [Orabug: 32795691], [Orabug: 34398512], [Orabug: 34742876], [Orabug: 37253273]
  - Update spec file for new release


author: Ondřej Pohořelský <opohorel@redhat.com> - 1.5.7-14
changelog:
  - Rename variables in get_range()
  - Step size out fo bound handling 
  - Fix range parsing
  - Resolves: RHEL-82795


author: Ondřej Pohořelský <opohorel@redhat.com> - 1.5.7-16
changelog:
  - Forward XDG_SESSION_CLASS to PAM for session classification
  - Also use systemd_tmpfiles to create files in /var, to ensure Cronie
  - works properly in Image mode
  - Resolves: RHEL-131190, RHEL-136491, RHEL-136492


author: Alexander Sosedkin <asosedkin@redhat.com> - 20210628-1.gitdd7d273
changelog:
  - implement scoped policies, e.g., cipher@SSH = ...
  - implement algorithm globbing, e.g., cipher@SSH = -*-CBC
  - deprecate derived properties:
    tls_cipher, ssh_cipher, ssh_group, ike_protocol, sha1_in_dnssec
  - deprecate unscoped form of protocol property
  - openssl: set MinProtocol / MaxProtocol separately for TLS and DTLS
  - openssh: use PubkeyAcceptedAlgorithms instead of PubkeyAcceptedKeyTypes
  - libssh: respect ssh_certs
  - restrict FIPS:OSPP further
  - improve Python 3.10 compatibility
  - update documentation
  - expand upstream test coverage
  - FUTURE: disable CBC ciphers for all backends but krb5
  - openssl: LEGACY must have SECLEVEL=1, enabling SHA1
  - disable DHE-DSS in LEGACY
  - bump LEGACY key size requirements from 1023 to 1024
  - add javasystem backend
  - *ssh: condition ecdh-sha2-nistp384 on SECP384R1
  - set %verify(not mode) for backend sometimes-symlinks-sometimes-not
  - gnutls: use allowlisting


author: Alexander Sosedkin <asosedkin@redhat.com> - 20210707-1.git29f6c0b
changelog:
  - gnutls: explicitly enable ECDSA-SECPNNNR1-SHANNN
  - packaging: adapt to the RHEL-9 %check-time testing tools availability


author: Alexander Sosedkin <asosedkin@redhat.com> - 20210914-1.git97d08ef
changelog:
  - gnutls: reorder ECDSA-SECPMMMR1-SHANNN together with ECDSA-SHANNN
  - fix several issues with update-crypto-policies --check


author: Alexander Sosedkin <asosedkin@redhat.com> - 20211115-1.git70de135
changelog:
  - OSPP: relax -ECDSA-SHA2-512, -FFDHE-*
  - fips-mode-setup, fips-finish-install: call zipl more often (s390x-specific)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20220203-1.gitf03e75e
changelog:
  - gnutls: enable SHAKE, needed for Ed448
  - fips-mode-setup: improve handling FIPS plus subpolicies
  - FIPS: disable SHA-1 HMAC
  - FIPS: disable CBC ciphers except in Kerberos


author: Alexander Sosedkin <asosedkin@redhat.com> - 20220223-1.git5203b41
changelog:
  - openssl: allow SHA-1 signatures with rh-allow-sha1-signatures in LEGACY
  - update AD-SUPPORT, move RC4 enctype enabling to AD-SUPPORT-LEGACY
  - fips-mode-setup: catch more inconsistencies, clarify --check


author: Alexander Sosedkin <asosedkin@redhat.com> - 20220404-1.git845c0c1
changelog:
  - DEFAULT: drop DNSSEC SHA-1 exception
  - openssh: add support for sntrup761x25519-sha512@openssh.com


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 20221215-1.git9a18988.1
changelog:
  - openssl: implement relaxing EMS in FIPS (NO-ENFORCE-EMS)
  - gnutls: use tls-session-hash option
  - nss: use TLS-REQUIRE-EMS
  - NO-ENFORCE-EMS: add subpolicy
  - FIPS: set __ems = ENFORCE
  - cryptopolicies: add enums and __ems tri-state
  - docs: replace `FIPS 140-2` with just `FIPS 140`
  - codespell: ignore aNULL
  - nss: retire NSS_OLD and replace with NSS_LAX 3.80 check


author: Alexander Sosedkin <asosedkin@redhat.com> - 20230731-1.git94f0e2c
changelog:
  - krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones
  - FIPS: enforce EMS in FIPS mode
  - NO-ENFORCE-EMS: add subpolicy to undo the EMS enforcement in FIPS mode
  - nss: implement EMS enforcement in FIPS mode (disabled in ELN)
  - openssl: implement EMS enforcement in FIPS mode
  - gnutls: implement EMS enforcement in FIPS mode (disabled in ELN)
  - docs: replace `FIPS 140-2` with just `FIPS 140`


author: Alexander Sosedkin <asosedkin@redhat.com> - 20230920-1.git8dcf74d
changelog:
  - OSPP subpolicy: tighten beyond reason for OSPP 4.3
  - fips-mode-setup: more thorough --disable, still unsupported


author: Alexander Sosedkin <asosedkin@redhat.com> - 20231016-1.git77ceb0b
changelog:
  - openssl: fix SHA1 and NO-ENFORCE-EMS interaction
  - bind: fix a typo that led to duplication of ECDSAPxxxSHAxxx


author: Clemens Lang <cllang@redhat.com> - 20231108-1.git994ae09
changelog:
  - turn ssh_etm into an etm@SSH tri-state (RHEL-15925)
  - fips-mode-setup: increase chroot-friendliness (RHEL-11350)
  - fips-mode-setup: Fix usage with --no-bootcfg (RHEL-11350)


author: Clemens Lang <cllang@redhat.com> - 20231109-1.git0ceff7f
changelog:
  - Restore support for scoped ssh_etm directives (RHEL-15925)
  - Print matches in syntax deprecation warnings (RHEL-15925)


author: Clemens Lang <cllang@redhat.com> - 20231113-1.gite9247c2
changelog:
  - fips-mode-setup: Fix test for empty /boot (RHEL-11350)
  - fips-mode-setup: Avoid 'boot=UUID=' if /boot == / (RHEL-11350)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240202-1.git283706d
changelog:
  - fips-finish-install: make sure ostree is detected in chroot
  - fips-mode-setup: make sure ostree is detected in chroot
  - fips-finish-install: Create/remove /etc/system-fips on ostree systems
  - java: disable ChaCha20-Poly1305 where applicable


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240304-1.gitb1c706d
changelog:
  - packaging: remove perl build-dependency, it's not needed anymore
  - packaging: use newly introduced SKIP_LINTING=1
  - packaging: drop stale workarounds


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240815-1.gite217f03
changelog:
  - java: start controlling / disable DTLSv1.0
  - java: disable anon ciphersuites, tying them to NULL
  - java: respect more key size restrictions
  - java: specify jdk.tls.namedGroups system property
  - java: make hash, mac and sign more orthogonal
  - fips-mode-setup: add another scary "unsupported"
  - fips-mode-setup: flashy ticking warning upon use
  - java: use and include jdk.disabled.namedCurves
  - ec_min_size: introduce and use in java, default to 256
  - java: stop specifying jdk.tls.namedGroups in javasystem
  - fips-setup-helper: add a libexec helper for anaconda
  - fips-mode-setup: force --no-bootcfg when UKI is detected


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250602-1.gita839241
changelog:
  - openssl: fix mistakes in integrity-only cipher definitions
  - PQ: add a subpolicy with some post-quantum algorithms


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250721-1.git162e4cb
changelog:
  - rpm-sequoia: add back-end
  - openssl: send one PQ and one classic key_share; prioritize PQ groups
  - policies: alias X25519-MLKEM768 to MLKEM768-X25519
  - nss: enable ED25519


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250905-1.git377cc42
changelog:
  - rpm-sequoia: enable MLDSA65-ED25519 and MLDSA87-ED448 in all policies
  - rpm-sequoia: enable SHA-1 in all policies
  - rpm-sequoia: force enable all PQ algorithms for now


author: Ilya Okomin <ilya.okomin@oracle.com> - 20260224-1.0.1.gitea0f072
changelog:
  - openssl: enable pure ML-KEM groups [Orabug: 39423111]
  - openssh: backport mlkem-nist implementation [Orabug: 39423111]


author: Ondrej Kozina <okozina@redhat.com> - 2.4.3-1
changelog:
  - Update to cryptsetup 2.4.3.
  - patch: Fix typo in repair command prompt.
    Resolves: #2022309 #2023316 #2032782


author: Daniel Zatovic <dzatovic@redhat.com> - 2.4.3-5.1
changelog:
  - patch: Run PBKDF benchmark with 8 bytes long well-known passphrase.
  - patch: Change tests to use passphrases with minimal 8 chars length.
  - patch: Add FIPS related error message in keyslot add code.
  - Resolves: #2151576


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-2
changelog:
  - Fix FIPS related bugs.
  - Abort encryption when header and data devices are same.
  - Resolves: #2150251 #2148841


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-3
changelog:
  - patch: Disallow use of internal kenrel crypto driver names in "capi"
  - patch: Also disallow active devices with internal kernel names
  - patch: Fix init_by_name to allow unknown cipher format in dm-crypt
  - patch: Fix reencryption to fail properly for unknown cipher
  - patch: Fix activation of LUKS2 with capi format cipher and kernel
  - Resolves: #2212771


author: Daniel Zatovic <dzatovic@redhat.com> - 2.7.2-1
changelog:
  - Update to cryptsetup 2.7.2
  - Use OpenSLL Argon implementation instead of the built-in one
  - Resolves: RHEL-32377


author: Ondrej Kozina <okozina@redhat.com> - 2.7.2-2
changelog:
  - patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
  - patch: Enable Argon2 in FIPS with openssl backend.
  - patch: Abort online reencryption for misconfigured devices.
  - patch: Harden online reencryption checks in initialization phase.
  - patch: Fix detection of direct-io with suspended devices.
  - patch: Return suspended status also for unknow target types.
  - patch: Do not handle device as suspended on error.
  - Resolves: RHEL-39003 RHEL-41238


author: Kristina Hanicova <khanicov@redhat.com> - 2.8.1-3
changelog:
  - patch: Read integrity profile info from top level device.
  - patch: Fix possible use of uninitialized variable.
  - patch: Reinstate pbkdf serialization flag in device activation.
  - patch: Fix LUKS2 device status in inline HW mode and detached header.
  - patch: Set inline integrity flag if no underlying dm-integrity device.
  - patch: Fix wrong device size status reports in cryptsetup and integritysetup.
  - Resolves: RHEL-122297 RHEL-125152 RHEL-125167 RHEL-132585 RHEL-140106


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-9
changelog:
  - 2018948 - Unauthenticated users can't move print jobs in Web UI
  - 1999955 - Printing of banner before PCL file only prints banner
  - 2006713 - Trying to restart and hold a job doesn't work


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-19
changelog:
  - 2217177 - Delays printing to lpd when reserved ports are exhausted
  - 2217284 - The command "cancel -x <job>" does not remove job files
  - 2217954 - Enlarge backlog queue for listen() in cupsd


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-19
changelog:
  - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c
  - CVE-2023-32324 cups: heap buffer overflow may lead to DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-22
changelog:
  - RHEL-14931 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off"
  - RHEL-15308 cupsd fails to open cups-files.conf and the resulting error message is lost


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-23
changelog:
  - RHEL-19205 Recommend new cups-filters subpackages with weak dep for better upgrade exp
  - RHEL-19495 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents


author: Pavol Zacik <pzacik@redhat.com> - 1:2.3.3op2-26
changelog:
  - RHEL-40388 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Pavol Zacik <pzacik@redhat.com> - 1:2.3.3op2-28
changelog:
  - RHEL-39940 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.2.3.3op2-33.1
changelog:
  - RHEL-113077 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-34
changelog:
  - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
  - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-34.1
changelog:
  - RHEL-129746 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
  - RHEL-129738 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-35
changelog:
  - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-37
changelog:
  - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
  - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-8
changelog:
  - fix TELNET stack contents disclosure again (CVE-2021-22925)
  - fix bad connection reuse due to flawed path name checks (CVE-2021-22924)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-12
changelog:
  - fix STARTTLS protocol injection via MITM (CVE-2021-22947)
  - fix protocol downgrade required TLS bypass (CVE-2021-22946)
  - fix use-after-free and double-free in MQTT sending (CVE-2021-22945)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-14.el9_0.1
changelog:
  - fix credential leak on redirect (CVE-2022-27774)
  - fix auth/cookie leak on redirect (CVE-2022-27776)
  - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-14.el9_0.5
changelog:
  - fix unpreserved file permissions (CVE-2022-32207)
  - fix HTTP compression denial of service (CVE-2022-32206)
  - fix FTP-KRB bad message verification (CVE-2022-32208)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-15
changelog:
  - fix credential leak on redirect (CVE-2022-27774)
  - fix auth/cookie leak on redirect (CVE-2022-27776)
  - fix bad local IPv6 connection reuse (CVE-2022-27775)
  - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)


author: Alan Steinberg <alan.steinberg@oracle.com> - 7.76.1-23.el9_2.2
changelog:
  - unify the upload/method handling (CVE-2023-28322)
  - fix host name wildcard checking (CVE-2023-28321)


author: Teo Gonzalez <teo.g.gonzalez@oracle.com> - 7.76.1-23.el9_2.4
changelog:
  - curl: a heap-based buffer overflow in the SOCKS5 proxy handshake (CVE-2023-38545)
  - curl: cookie injection with none file (CVE-2023-38546)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-24
changelog:
  - fix SSH connection too eager reuse still (CVE-2023-27538)
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)
  - fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
  - fix TELNET option IAC injection (CVE-2023-27533)


author: Alan Steinberg <alan.steinberg@oracle.com> - 7.76.1-26.el9_3.3
changelog:
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-28
changelog:
  - return error if hostname too long for remote resolve (CVE-2023-38545)
  - fix cookie injection with none file (CVE-2023-38546)
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-31.el9_6.1
changelog:
  - make up incomplete patch for host name wildcard checking (RHEL-5675)
  - eliminate use of obsolete patch syntax (RHEL-65791)
  - http2: make sure pause is done on HTTP (RHEL-86805)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-32
changelog:
  - make up incomplete patch for host name wildcard checking (RHEL-5675)
  - eliminate use of obsolete patch syntax (RHEL-65791)
  - http2: make sure pause is done on HTTP (RHEL-85847)


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Jeff Moyer <jmoyer@redhat.com> - 78-1
changelog:
  - Rebase to v78
  - Add support for legacy monitor.conf file location
  - Fix a test failure.
  - Resolves: RHEL-10382
  - Resolves: RHEL-8204
  - Resolves: RHEL-29151


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-11
changelog:
  - Set default sasldb database to GDBM instead of BerkeleyDB
  - Add the migration tool from BerkeleyDB
  - Add some PLAIN auth tests
  - Resolves rhbz#1947971


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Bryan Gurney <bgurney@redhat.com> - 71.1-7
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
  - Fix enable-namespace all reporting errors incorrectly
  - Add support for inject-smart on papr scm
  - Related: rhbz#2040075
  - Related: rhbz#1873851
  - Related: rhbz#1880578
  - Related: rhbz#1922538
  - Related: rhbz#2087707


author: Jakub Martisko <jamartis@redhat.com> - 28-5.1
changelog:
  - Fix a stack buffer over-read in the c-shquote library
  - Fix null pointer reference when supplying a malformed XML config file
  - Add gating.yaml
  Resolves: CVE-2022-31212
  Resolves: CVE-2022-31213


author: Jakub Martisko <jamartis@redhat.com> - 28-6
changelog:
  - Fix a stack buffer over-read in the c-shquote library
  - Fix null pointer reference when supplying a malformed XML config file
  Resolves: CVE-2022-31212
  Resolves: CVE-2022-31213


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.8-9
changelog:
  - Subpackage python2-dbus has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Marian Csontos <mcsontos@redhat.com> - 2.03.11-1
changelog:
  - Fix mpath filtering of NVMe devices.
  - Check if lvcreate passes read_only_volume_list with tags and skips zeroing.
  - Limit pool metadata spare to 16GiB.
  - Improves conversion and allocation of pool metadata.
  - Fix different limits used for metadata by lvm2 and thin-tools.
  - Fix interrupting lvconvert --splitcache command with striped origin volumes.
  - Fix problem with wiping of converted LVs.
  - Fix memleak in scanning.
  - Fix corner case allocation for thin-pools.
  - Fix pvck handling MDA at offset different from 4096.
  - Partial or degraded activation of writecache is not allowed.
  - Enhance error handling in fsadm and handle correct fsck result.
  - Dmeventd lvm plugin ignores higher reserved_stack lvm.conf values.
  - Support using BLKZEROOUT for clearing devices.
  - Fixed interrup handling.
  - Fix block cache when device has too many failing writes.
  - Fix block cache waiting for IO completion with failing disks.
  - Add configure --enable-editline support as an alternative to readline.
  - Enhance reporting and error handling when creating thin volumes.
  - Enable vgsplit for VDO volumes.
  - Lvextend of vdo pool volumes ensure at least 1 new VDO slab is added.
  - Restore lost signal blocking while VG lock is held.
  - Improve estimation of needed extents when creating thin-pool.
  - Use extra 1% when resizing thin-pool metadata LV with --use-policy.
  - Enhance --use-policy percentage rounding.
  - Allow pvmove of writecache origin.
  - Report integrity fields.
  - Integrity volumes defaults to journal mode.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.13-1
changelog:
  - Update to upstream version 2.03.13.
  - Change in obtain_devices_list_from_udev default.
  - See WHATS_NEW and WHATS_NEW_DM for more information.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.14-4
changelog:
  - Remove service based autoactivation.
  - New lvmautoactivation(7) man page.
  - Fix missing PVIDs for multipath devices in system.devices file.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.16-2
changelog:
  - Exit with error when --devicesfile used does not exist.
  - Restore --reportformat option in pvdisplay.
  - Improve multipath backlist option handling.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.16-3
changelog:
  - Fix effect of setting multipath_component_detection to 0.
  - Fix lvmdbusd using lvm shell with editline.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-4
changelog:
  - Fix missing warning on thin pool over provisioning.
  - Fix infinite recursion in lvresize_fs_helper when resizing LUKS device.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-5
changelog:
  - Fix vgimportclone fail if PV has no metadata.
  - Fix lvmdbusd missing stderr for commands not returning JSON.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-6
changelog:
  - Fix lvresize resizing LUKS device only when resizing FS is enabled.
  - Improve lvresize handling of renamed volumes.
  - Fix random unmount when resizing volume backed by thin pool.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.21-3
changelog:
  - Fix lvresize fail in case of multiple mountpoints.
  - Fix allocator for RAID LVs allocating multiple legs on single device.
  - Fix device id handling of WWIDs with trailing spaces.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.23-2
changelog:
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-2
changelog:
  - Fix SPDX License identifiers.
  - Fix input units for VDO LV's minimim_io_size.
  - Fix stripe count and validation for RAID LVs.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-5
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-3
changelog:
  - Add 0024-libmultipath-use-typedef-for-keyword-handler-functio.patch
  - Add 0025-libmultipath-print-the-correct-file-when-parsing-fai.patch
  - Add 0026-libmultipath-pass-file-and-line-number-to-keyword-ha.patch
  - Add 0027-libmultipath-make-set_int-take-a-range-for-valid-val.patch
  - Add 0028-libmultipath-improve-checks-for-set_str.patch
  - Add 0029-libmultipath-deprecate-file-and-directory-config-opt.patch
  - Add 0030-libmultipath-split-set_int-to-enable-reuse.patch
  - Add 0031-libmultipath-cleanup-invalid-config-handling.patch
  - Add 0032-libmultipath-don-t-return-error-on-invalid-values.patch
    * The above 9 patches fix bz #2017969
  - Add 0033-multipathd-avoid-unnecessary-path-read-only-reloads.patch
    * Fixes bz #2017979
  - Add 0034-multipath-fix-exit-status-of-multipath-T.patch
  - Resolves: bz #2017969, #2017979


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-4
changelog:
  - Add 0035-RH-mpathconf-fix-setting-property_blacklist.patch
  - Add 0036-libmultipath-fix-disassemble-status-for-historical-s.patch
    * Fixes bz #2042032
  - Add 0037-libmultipath-make-helper-function-to-trigger-path-ue.patch
  - Add 0038-multipathd-trigger-udev-change-on-path-addition.patch
    * Fixes bz #2028835
  - Resolves: bz #2028835, #2042032


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-5
changelog:
  - Add 0039-RH-add-support-to-mpathconf-for-setting-arbitrary-de.patch
    * Fixes bz #2050421
  - Add 0040-RH-add-support-to-mpathconf-for-setting-recheck_wwid.patch
    * Fixes bz #2039749
  - Resolves: bz #2039749, #2050421


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-6
changelog:
  - Add 0041-multipathd-handle-fpin-events.patch
  - Add 0042-multipathd-disallow-changing-to-from-fpin-marginal-p.patch
    * Add "marginal_pathgroups fpin" for responding to PFIN-Li events
    * Fixes bz #2053642
  - Modify tests/restate_module
    * Always offline the path with the lowest priority
    * Fixes bz #2052633
  - Resolves: bz #2052633, #2053642


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-9
changelog:
  - Add 0045-multipath-tools-update-mpp-force_readonly-in-ev_add_.patch
    * Fixes bz #2084356
  - Add 0046-multipath-return-failure-on-an-invalid-remove-comman.patch
    * Fixes bz #2084358
  - Add 0047-libmultipath-steal-the-src-string-pointer-in-merge_s.patch
  - Add 0048-libmultipath-enable-linear-ordering-of-bus-proto-tup.patch
  - Add 0049-libmultipath-use-bus_protocol_id-in-snprint_path_pro.patch
  - Add 0050-libmultipath-make-protocol_name-global.patch
  - Add 0051-libmultipath-add-a-protocol-subsection-to-multipath..patch
  - Add 0052-libmultipath-Set-the-scsi-timeout-parameters-by-path.patch
  - Add 0053-libmultipath-check-the-overrides-pctable-for-path-va.patch
  - Add 0054-libmultipath-fix-eh_deadline-documentation.patch
  - Add 0055-libmultipath-Add-documentation-for-the-protocol-subs.patch
  - Add 0056-libmultipath-use-symbolic-value-for-invalid-pcentry.patch
    * The above 10 patches implement the feature from bz #2084365
  - Add 0057-updated-HPE-MSA-builtin-config.patch
    * Fixes bz #2084357
  Resolves: bz #2084365, #2084357, #2084358, #2084365


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-11
changelog:
  - Add 0059-multipathd-Add-missing-ctype-include.patch
  - Add 0060-multipathd-replace-libreadline-with-libedit.patch
    * replace readline with libedit, to avoid license conflicts
  - Resolves: bz #2119896


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-13
changelog:
  - Add 0062-multipathd-factor-out-the-code-to-flush-a-map-with-n.patch
  - Add 0063-libmultipath-return-success-if-we-raced-to-remove-a-.patch
  - Add 0064-multipathd-Handle-losing-all-path-in-update_map.patch
  - Resolves: bz #2125357


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-14
changelog:
  - Add 0065-multipathd-ignore-duplicated-multipathd-command-keys.patch
    * Fixes bz #2133999
  - Add 0066-multipath-tools-use-run-instead-of-dev-shm.patch
    * Fixes bz #2133989
  - Resolves: bz #2133989, #2133999


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-15
changelog:
  - Add 0067-kpartx-hold-device-open-until-partitions-have-been-c.patch
    * Fixes bz #2141860
  - Add 0068-libmultipath-cleanup-remove_feature.patch
  - Add 0069-libmultipath-cleanup-add_feature.patch
  - Add 0070-multipath-tests-tests-for-adding-and-removing-featur.patch
  - Add 0071-libmultipath-fix-queue_mode-feature-handling.patch
  - Add 0072-multipath-tests-tests-for-reconcile_features_with_qu.patch
  - Add 0073-libmultipath-prepare-proto_id-for-use-by-non-scsi-de.patch
  - Add 0074-libmultipath-get-nvme-path-transport-protocol.patch
  - Add 0075-libmultipath-enforce-queue_mode-bio-for-nmve-tcp-pat.patch
    * Fixes bz #2033080
  - Resolves: bz #2033080, #2141860


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-17
changelog:
  - Add 0077-libmultipath-don-t-leak-memory-on-invalid-strings.patch
  - Add 0078-libmutipath-validate-the-argument-count-of-config-st.patch
  - Resolves: bz #2145225


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-18
changelog:
  - Add 0079-libmultipath-use-select_reload_action-in-select_acti.patch
  - Add 0080-libmultipath-select-resize-action-even-if-reload-is-.patch
  - Add 0081-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch
  - Add 0082-libmultipath-keep-renames-from-stopping-other-multip.patch
  - Resolves: bz #2166467


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-19
changelog:
  - Fix bugzilla linked to the changes (was previously linked to
    the wrong bug, 2162536)
  - Resolves: bz #2166467


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-20
changelog:
  - Add 0083-multipath.rules-fix-smart-bug-with-failed-valid-path.patch
  - Add 0084-libmultipath-limit-paths-that-can-get-wwid-from-envi.patch
  - Change how the installation dir for kpartx_id is specified
  - Resolves: bz #1926147


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-21
changelog:
  - Add 0085-multipathd-make-pr-registration-consistent.patch
  - Add 0086-libmultipath-make-prflag-an-enum.patch
  - Add 0087-multipathd-handle-no-active-paths-in-update_map_pr.patch
  - Add 0088-libmpathpersist-fix-resource-leak-in-update_map_pr.patch
  - Resolves: bz #2164869


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-22
changelog:
  - Add 0089-RH-Add-mpathcleanup.patch
    * Fixes RHEL-782
  - Add 0090-RH-make-listing-return-an-error-if-the-config-file-i.patch
  - Install mpathcleanup
    * Fixes RHEL-781
  - Resolves: #781, #782


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-23
changelog:
  - Add 0091-multipathd-Added-support-to-handle-FPIN-Li-events-fo.patch
    * Fixes RHEL-6678 (Add support in multipathd for NVMe to listen for FPIN-Li
      events and mark effected paths as marginal)
  - Add 0092-multipath-tools-add-HPE-Alletra-9000-NVMe-to-hardwar.patch
    * Fixes RHEL-1830 (Changes to Arcus NVMeoFC multipath.conf settings for RHEL
      9.x to be included in kernel by default)
  - Resolves: RHEL-6678
  - Resolves: RHEL-1830


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-24
changelog:
  - Add 0093-RH-multipath-add-mpathcleanup-man-page.patch
    * Fixes RHEL-1266 ("There is no man page for mpathcleanup")
  - Resolves: RHEL-1266


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-25
changelog:
  - Add 0094-libmultipath-Add-max_retries-config-option.patch
    * Fixes RHEL-1729 ("Allow multipathd to set the max_retries of the
      scsi_device for paths")
  - Add 0095-libmutipath-Retain-device-size-if-sysfs_get_size-fai.patch
  - Add 0096-multipathd-check-and-update-all-paths-when-in-cli_re.patch
  - Add 0097-multipathd-move-post-reloading-commands-into-resize_.patch
  - Add 0098-multipathd-move-resize_map-to-multipathd-main.c.patch
  - Add 0099-multipathd-Add-auto_resize-config-option.patch
    * Fixes RHEL-986 ("Add option to allow multipathd to detect device
      resizes and autoresize.")
  - Resolves: RHEL-986
  - Resolves: RHEL-1729


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-26
changelog:
  - Add 0100-libmultipath-avoid-temporarily-enabling-queueing-on-.patch
  - Add 0101-multipathd-Make-sure-to-disable-queueing-if-recovery.patch
    * Fixes RHEL-17234 ("RHEL9 dm-multipath no_path_retry [retry number] is
      undone if paths are later lost for an open map.")
  - Add 0102-multipathd-remove-nopath-flushing-code-from-flush_ma.patch
  - Add 0103-multipathd-make-flush_map-delete-maps-like-the-multi.patch
  - Add 0104-multipathd-disable-queueing-when-removing-unknown-ma.patch
    * Fixes RHEL-4998 ("When remove external lun from host, rescan lun status
      will cause the OS hang and no response")
  - Resolves: RHEL-4998
  - Resolves: RHEL-17234


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-27
changelog:
  - Add 0105-multipathd-fix-null-pointer-dereference-in-uev_updat.patch
  - Add 0106-multipathd-fix-auto-resize-configuration.patch
  - Add 0107-libmultipath-fix-displaying-auto_resize-config-setti.patch
    * Fixes RHEL-986 ("Add option to allow multipathd to detect device
      resizes and autoresize.")
  - Resolves: RHEL-986


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-28
changelog:
  - Add 0108-libmultipath-actually-truncate-too-large-vpd-page.patch
  - Add 0109-kpartx-fix-theoretical-overflow-in-loop-device-name.patch
    * Fixes RHEL-31793 ("RHEL SAST Automation: address (selected) true positives")
  - Resolves: RHEL-31793


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-29
changelog:
  - Add 0110-libmultipath-keep-track-of-queueing-state-in-feature.patch
  - Add 0111-libmultipath-export-partmap_in_use.patch
  - Add 0112-libmultipath-change-flush_on_last_del-to-fix-a-multi.patch
  - Add 0113-libmultipath-pad-dev_loss_tmo-to-avoid-race-with-no_.patch
    * Fixes RHEL-30272
  - Add 0114-libmultipath-remove-pathgroup-wildcard-options.patch
  - Add 0115-libmultipath-print-all-values-in-snprint_failback.patch
  - Add 0116-multipathd-Stop-double-counting-map-failures-for-no_.patch
  - Add 0117-multipath-tools-man-pages-add-missing-multipathd-com.patch
  - Add 0118-libmultipath-change-the-vend-prod-rev-printing.patch
  - Add 0119-multipath-tools-man-pages-Add-format-wildcard-descri.patch
    * Fixes RHEL-8304
  - Resolves: RHEL-8304
  - Resolves: RHEL-30272


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-30
changelog:
  - Add 0120-multipath-tools-fix-multipath-ll-bug-for-Native-NVME.patch
    * Fixes RHEL-28068
  - Add 0121-multipathd-set-reply-length-to-zero-for-NULL-replies.patch
    * Fixes RHEL-44569
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-31
changelog:
  - Modify multiple tests especially medium_error_scsi_debug and squelch_scsi_id
    * Fixes RHEL-28068 & RHEL-4459
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-32
changelog:
  - Modify bindings, find_multipaths, and user_friendly_names tests
    * Fixes RHEL-28068 & RHEL-4459
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-35
changelog:
  - Add 0124-libmultipath-add-missing-assert-to-checkers.c.patch
  - Add 0125-libmultipath-foreign-fix-memory-leak-in-nvme-foreign.patch
    * Fixes RHEL-73413
  - Add 0126-libmultipath-export-udev-pthread-cleanup-functions.patch
  - Add 0127-multipathd-set-rport-port_state-to-marginal-for-NVMe.patch
    * Fixes RHEL-67472
  - Resolves: RHEL-73413
  - Resolves: RHEL-67472


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-35.1
changelog:
  - Add 0128-multipath-tools-move-DEFAULT_SOCKET-definition-into-.patch
  - Add 0129-multipath-tools-add-helper-mpath_fill_sockaddr__.patch
  - Add 0130-libmpathutil-add-support-for-Unix-pathname-sockets.patch
  - Add 0131-libmpathutil-move-systemd_listen_fds-support-into-mu.patch
  - Add 0132-multipathd-move-uxsock_trigger-to-uxlsnr.c.patch
  - Add 0133-multipathd-uxlsnr-use-symbolic-values-for-pollfd-ind.patch
  - Add 0134-multipathd-make-uxsock_listen-take-a-pointer-to-fd.patch
  - Add 0135-multipathd-allow-receiving-two-socket-fds-from-syste.patch
  - Add 0136-multipathd-listen-on-pathname-and-abstract-socket-by.patch
  - Add 0137-libmpathcmd-try-both-abstract-and-pathname-sockets.patch
  - Add 0138-libmpathcmd-honor-MULTIPATH_SOCKET_NAME-environment-.patch
  - Add 0139-multipathd-honor-MULTIPATH_SOCKET_NAME-environment-v.patch
    * Fixes RHEL-80352 ("RFE: Enable multipathd to communicate with a
      process in another network namespace")
  - Resolves: RHEL-80352


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-36
changelog:
  - Add 0128-multipath-tools-move-DEFAULT_SOCKET-definition-into-.patch
  - Add 0129-multipath-tools-add-helper-mpath_fill_sockaddr__.patch
  - Add 0130-libmpathutil-add-support-for-Unix-pathname-sockets.patch
  - Add 0131-libmpathutil-move-systemd_listen_fds-support-into-mu.patch
  - Add 0132-multipathd-move-uxsock_trigger-to-uxlsnr.c.patch
  - Add 0133-multipathd-uxlsnr-use-symbolic-values-for-pollfd-ind.patch
  - Add 0134-multipathd-make-uxsock_listen-take-a-pointer-to-fd.patch
  - Add 0135-multipathd-allow-receiving-two-socket-fds-from-syste.patch
  - Add 0136-multipathd-listen-on-pathname-and-abstract-socket-by.patch
  - Add 0137-libmpathcmd-try-both-abstract-and-pathname-sockets.patch
  - Add 0138-libmpathcmd-honor-MULTIPATH_SOCKET_NAME-environment-.patch
  - Add 0139-multipathd-honor-MULTIPATH_SOCKET_NAME-environment-v.patch
    * Fixes RHEL-78758 ("RFE: Enable multipathd to communicate with a
      process in another network namespace")
  - Resolves: RHEL-78758


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-37
changelog:
  - Add 0140-multipath-clean-up-find_multipaths-value-names.patch
  - Add 0141-multipathd-Add-multipathd-man-page-section-about-soc.patch
    * Fixes RHEL-82307 ("There is no man page for RFE: Enable multipathd
      to communicate with a process in another network namespace")
  - Fix multipath_conf_syntax OSCI test.
  - Resolves: RHEL-82307


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-38
changelog:
  - Add 0142-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
  - Add 0143-libmultipath-add-helper-function-check_path_wwid_cha.patch
  - Add 0144-multipathd-re-add-paths-skipped-because-they-were-of.patch
    * Fixes RHEL-82534 ("multipathd does not monitor multipath devices
      created externally while there are offline paths.")
  - Resolves: RHEL-82534


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-39
changelog:
  - Add 0145-multipath-tools-add-DellEMC-ME4-PowerVault-ME4-to-ha.patch
  - Add 0146-multipath-tools-add-HPE-as-vendor-for-OPEN-XP8-array.patch
  - Add 0147-multipath-tools-add-HP-HSVX740-to-hwtable.patch
  - Add 0148-multipath-tools-add-DellEMC-ME5-PowerVault-ME5-to-ha.patch
  - Add 0149-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
    * Fixes RHEL-103109 ("Update multipath builtin config to add new
      device defaults")
  - Resolves: RHEL-103109


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-39.1
changelog:
  - Add 0150-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch
  - Add 0151-libmpathpersist-check-released-key-against-the-reser.patch
  - Add 0152-multipathd-remove-thread-from-mpath_pr_event_handle.patch
  - Add 0153-libmpathpersist-remove-uneeded-wrapper-function.patch
  - Add 0154-libmpathpersist-reduce-log-level-for-persistent-rese.patch
  - Add 0155-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch
  - Add 0156-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch
  - Add 0157-libmpathpersist-limit-changing-prflag-in-update_map_.patch
  - Add 0158-multipathd-Don-t-call-update_map_pr-unnecessarily.patch
  - Add 0159-libmpathpersist-remove-useless-function-send_prout_a.patch
  - Add 0160-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch
  - Add 0161-limpathpersist-redesign-failed-release-workaround.patch
  - Add 0162-libmpathpersist-fail-the-release-if-all-threads-fail.patch
  - Add 0163-limpathpersist-Handle-changing-key-corner-case.patch
  - Add 0164-libmpathpersist-fix-command-keyword-ordering.patch
  - Add 0165-libmpathpersist-use-conf-timeout-for-updating-persis.patch
  - Add 0166-libmapthpersist-Handle-REGISTER-AND-IGNORE-changing-.patch
  - Add 0167-libmultipath-rename-prflag_value-enums.patch
  - Add 0168-libmpathpersist-use-a-switch-statement-for-prout-com.patch
  - Add 0169-libmpathpersist-Add-safety-check-for-preempting-on-k.patch
  - Add 0170-limpathpersist-remove-update_map_pr-code-for-NULL-pp.patch
  - Add 0171-libmpathpersist-move-update_map_pr-to-multipathd.patch
  - Add 0172-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch
  - Add 0173-libmpathpersist-clean-up-duplicate-function-declarat.patch
  - Add 0174-multipathd-wrap-setting-and-unsetting-prflag.patch
  - Add 0175-multipathd-unregister-PR-key-when-path-is-restored-i.patch
  - Add 0176-libmpathpersist-Fix-up-reservation_key-checking.patch
  - Add 0177-libmpathpersist-change-how-reservation-conflicts-are.patch
  - Add 0178-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch
  - Add 0179-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch
  - Add 0180-libmpathpersist-Restore-old-reservation-key-on-failu.patch
  - Add 0181-libmpatpersist-update-reservation-key-before-checkin.patch
  - Add 0182-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch
  - Add 0183-libmpathpersist-Don-t-always-fail-registrations-for-.patch
  - Add 0184-libmpathpersist-Don-t-try-release-workaround-for-inv.patch
  - Add 0185-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch
  - Add 0186-libmpathpersist-reregister-keys-when-self-preempting.patch
  - Add 0187-libmpathpersist-handle-updating-key-race-condition.patch
  - Add 0188-libmpathpersist-handle-preempting-all-registrants-re.patch
  - Add 0189-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch
  - Add 0190-libmpathpersist-Handle-RESERVE-with-reservation-held.patch
  - Add 0191-libmpathpersist-use-check_holding_reservation-in-mpa.patch
  - Add 0192-libmpathpersist-Fix-unregistering-while-holding-the-.patch
  - Add 0193-libmpathpersist-Fix-race-between-restoring-a-path-an.patch
  - Add 0194-multipathd-Fix-tracking-of-old-PR-key.patch
  - Add 0195-multipathd-Fix-race-while-registering-PR-key.patch
  - Add 0196-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch
    * Fixes RHEL-118723 ("There are many bugs in multipath's persistent
      reservation handling [rhel-9.7.z]")
  - Resolves: RHEL-118723


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-40
changelog:
  - Add 0150-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch
  - Add 0151-libmpathpersist-check-released-key-against-the-reser.patch
  - Add 0152-multipathd-remove-thread-from-mpath_pr_event_handle.patch
  - Add 0153-libmpathpersist-remove-uneeded-wrapper-function.patch
  - Add 0154-libmpathpersist-reduce-log-level-for-persistent-rese.patch
  - Add 0155-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch
  - Add 0156-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch
  - Add 0157-libmpathpersist-limit-changing-prflag-in-update_map_.patch
  - Add 0158-multipathd-Don-t-call-update_map_pr-unnecessarily.patch
  - Add 0159-libmpathpersist-remove-useless-function-send_prout_a.patch
  - Add 0160-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch
  - Add 0161-limpathpersist-redesign-failed-release-workaround.patch
  - Add 0162-libmpathpersist-fail-the-release-if-all-threads-fail.patch
  - Add 0163-limpathpersist-Handle-changing-key-corner-case.patch
  - Add 0164-libmpathpersist-fix-command-keyword-ordering.patch
  - Add 0165-libmpathpersist-use-conf-timeout-for-updating-persis.patch
  - Add 0166-libmapthpersist-Handle-REGISTER-AND-IGNORE-changing-.patch
  - Add 0167-libmultipath-rename-prflag_value-enums.patch
  - Add 0168-libmpathpersist-use-a-switch-statement-for-prout-com.patch
  - Add 0169-libmpathpersist-Add-safety-check-for-preempting-on-k.patch
  - Add 0170-limpathpersist-remove-update_map_pr-code-for-NULL-pp.patch
  - Add 0171-libmpathpersist-move-update_map_pr-to-multipathd.patch
  - Add 0172-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch
  - Add 0173-libmpathpersist-clean-up-duplicate-function-declarat.patch
  - Add 0174-multipathd-wrap-setting-and-unsetting-prflag.patch
  - Add 0175-multipathd-unregister-PR-key-when-path-is-restored-i.patch
  - Add 0176-libmpathpersist-Fix-up-reservation_key-checking.patch
  - Add 0177-libmpathpersist-change-how-reservation-conflicts-are.patch
  - Add 0178-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch
  - Add 0179-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch
  - Add 0180-libmpathpersist-Restore-old-reservation-key-on-failu.patch
  - Add 0181-libmpatpersist-update-reservation-key-before-checkin.patch
  - Add 0182-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch
  - Add 0183-libmpathpersist-Don-t-always-fail-registrations-for-.patch
  - Add 0184-libmpathpersist-Don-t-try-release-workaround-for-inv.patch
  - Add 0185-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch
  - Add 0186-libmpathpersist-reregister-keys-when-self-preempting.patch
  - Add 0187-libmpathpersist-handle-updating-key-race-condition.patch
  - Add 0188-libmpathpersist-handle-preempting-all-registrants-re.patch
  - Add 0189-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch
  - Add 0190-libmpathpersist-Handle-RESERVE-with-reservation-held.patch
  - Add 0191-libmpathpersist-use-check_holding_reservation-in-mpa.patch
  - Add 0192-libmpathpersist-Fix-unregistering-while-holding-the-.patch
  - Add 0193-libmpathpersist-Fix-race-between-restoring-a-path-an.patch
  - Add 0194-multipathd-Fix-tracking-of-old-PR-key.patch
    * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
      reservation handling")
  - Resolves: RHEL-118515


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-41
changelog:
  - Add 0195-multipathd-Fix-race-while-registering-PR-key.patch
  - Add 0196-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch
    * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
      reservation handling")
  - Resolves: RHEL-118515


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-42
changelog:
  - Add 0197-multipath-tools-update-NFINIDAT-InfiniBox-config-in-.patch
    * Fixes RHEL-128396 ("Update the multipath.conf stanza for Infinidat
      storage [rhel-9]")
  - Resolves: RHEL-128396


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-43
changelog:
  - Add 0198-multipathd-print-path-offline-message-even-without-a.patch
    * Fixes RHEL-133814 ("log_checker_err is not printing messages
      repeatedly for failed path [rhel-9]")
  - Add 0199-libmultipath-improve-cleanup-of-uevent-queues-on-exi.patch
  - Add 0200-uevent_dispatch-use-while-in-wait-loop.patch
  - Add 0201-libmultipath-uevent_dispatch-process-uevents-one-by-.patch
  - Add 0202-libmultipath-uevent_listen-don-t-delay-uevents.patch
  - Add 0203-libmultipath-uevent-use-struct-to-pass-parameters-ar.patch
  - Add 0204-libmultipath-is_uevent_busy-check-servicing_uev-unde.patch
  - Add 0205-multipathd-make-multipathd-show-status-busy-checker-.patch
    * Fixes RHEL-135904 (VM reboot in RHOSP environment fails with error
      "Could not open '/dev/dm-95': No such file or directory")
  - Resolves: RHEL-133814
  - Resolves: RHEL-135904


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-44
changelog:
  - Add 0206-libmultipath-add-purge_disconnected-configuration-op.patch
  - Add 0207-multipathd-implement-purge-functionality-for-disconn.patch
    * Fixes RHEL-141291 ("Add purge_disconnected support to multipathd
      [rhel-9]")
  - Resolves: RHEL-141291


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-45
changelog:
  - Add 0208-libmpathpersist-fix-register-retry-status-checking.patch
  - Add 0209-multipathd-remember-number-of-registered-keys-when-i.patch
  - Add 0210-libmpathpersist-fix-code-for-skipping-multipathd-pat.patch
    * Fixes RHEL-148462 ("Improve multipathd's handling of updating
      persistent reservations on restored paths. [rhel-9]")
  - Resolves: RHEL-148462


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.6-5
changelog:
  - Add 0018-multipath.conf-fix-typo-in-ghost_delay-description.patch
  - Add 0019-mpathpersist-fail-commands-when-no-usable-paths-exis.patch
    * Fixes bz #1982613
  - Add 0020-multipath-print-warning-if-multipathd-is-not-running.patch
    * Fixes bz #1982615
  - Add 0021-libmultipath-deal-with-dynamic-PTHREAD_STACK_MIN.patch
    * Fixes bz #1984921
  - Resolves: bz #1982613, #1982615, #1984921


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.6-6
changelog:
  - Add 0022-multipathd-cli_handlers-cleanup-setting-reply-length.patch
    * Found by corosync
  - Related: bz #1984921


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-1
changelog:
  - Update Source to upstream version 0.8.7 plus upstream staged commits
    * Previous patches 0011-0016 & 0018-0022 are included in the source tarball
    * Fixes bz#2017592
  - Rename files
    * Previous patches 0001-0010 are now patches 0013-0022
  - Modify 0018-RH-add-mpathconf.patch
    * merged with previous patch 0017
  - Add 0023-libmulitpath-add-section-name-to-invalid-keyword-out.patch
    * Fixes bz#1984303
  - Fix multipath_conf_syntax test to work with bz #1984303
  - Resolves: bz #1984303, #2017592


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-2
changelog:
  - Modify 0017-RH-use-rpm-optflags-if-present.patch
    * use RPM_LF_FLAGS
  - Modify 0018-RH-add-mpathconf.patch
    * update default config to match multipath changes
  - Modify 0022-RH-make-parse_vpd_pg83-match-scsi_id-output.patch
    * fix cmocka vpd tests
  - Rename 0023-libmulitpath-add-section-name-to-invalid-keyword-out.patch to
           0023-libmultipath-add-section-name-to-invalid-keyword-out.patch
  - Resolves: bz#2017592


author: Marian Csontos <mcsontos@redhat.com> - 1.0.9-2
changelog:
  - Allow non-zero values in unused index block entries.
  - Fix boundary check on the bitset for cached blocks.
  - Fix incorrect index_entry.nr_free on expansion affecting free space estimate.
  - Fix thin_repair checking keys on a node with a zero key.
  - Enhance error message in cache_check suggesting fix when applicable.


author: Marian Csontos <mcsontos@redhat.com> - 1.0.9-3
changelog:
  - Fix --version string compatibility with LVM tools.
  - Fix confusing Broken pipe warning when used in lvconvert --repair.


author: Marian Csontos <mcsontos@redhat.com> - 1.1.0-1
changelog:
  - Update to latest upstream release 1.1.0.
  - Support listing the highest mapped block in thin_ls.
  - Introduce thin_migrate for volume migration.
  - See CHANGES.


author: Martin Osvald <mosvald@redhat.com> - 12:4.4.2-18.b1
changelog:
  - Fix for CVE-2022-2928
  - Fix for CVE-2022-2929
  - Use systemd-sysusers for dhcp user and group (#2095396)


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Lichen Liu <lichliu@redhat.com> - 1:3.5-2
changelog:
  - Add processor support from SMBIOS-3.6.0
  - Consistently use read_file when reading from a dump file


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.7.0-1
changelog:
  - Update to 4.7.0
  - Improve repo config path ordering to fix a comps merging issue (RhBug:1928181)
  - Keep reason when package is removed (RhBug:1921063)
  - Improve mechanism for application of security filters (RhBug:1918475)
  - [doc] Add description for new API
  - [API] Add new method for reset of security filters
  - [doc] Improve documentation for Hotfix repositories
  - [doc] fix: "makecache" command downloads only enabled repositories
  - Use libdnf.utils.checksum_{check,value}
  - [doc] Add info that maximum parallel downloads is 20
  - Increase loglevel in case of invalid config options
  - [doc] installonly_limit documentation follows behavior
  - Prevent traceback (catch ValueError) if pkg is from cmdline
  - Add documentation for config option sslverifystatus (RhBug:1814383)
  - Check for specific key string when verifing signatures (RhBug:1915990)
  - Use rpmkeys binary to verify package signature (RhBug:1915990)
  - Bugs fixed (RhBug:1916783)
  - Preserve file mode during log rotation (RhBug:1910084)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.10.0-1
changelog:
  - Update to 4.10.0
  - Do not assume that a remote rpm is complete if present
  - Use positive percentage for "Failed delta RPMs" message
  - Remove redundant new line in Groups output
  - Format empty group names outputs to <name-unset>
  - [doc] Document default colors
  - Use rpmkeys alone to verify signature
  - Add dnf.error message to explain rpm.error traceback when package not found after resolving a transaction (RhBug:1815327,1887293,1909845)
  - [API] Add method "set_or_append_opt_value" to BaseConfig (RhBug:1967925)
  - Add aliases for commands: info, updateinfo, provides (RhBug:1938333)
  - Add report about demodularized rpms into module info (RhBug:1805260)
  - Remove DNSSEC errors on COPR group email keys
  - Add support for autodetecting packages to be excluded from being installed as weak dependencies (RhBug:1699672)
  - Add support for excluding packages to be installed as weak dependencies (RhBug:1699672)
  - Add fail_fast parameter to download_payloads methods for use in reposync
  - Acquire all relevant locks during "dnf clean"
  - API: Raise CompsError when group/env not found in install_group and install_environment (RhBug:1947958)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.10.0-2
changelog:
  - Respect cacheonly in python dnf API (RhBug:2026849)
  - [doc] Improve description of multilib_policy=all (RhBug:1996681,1995630)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.10.0-3
changelog:
  - Don't recommend python3-unbound (RhBug:1947925)
  - Recommend rpm-plugin-systemd-inhibit only if systemd (RhBug:1947924)
  - Don't recommend /usr/bin/sqlite3 for bash-completion (RhBug:1947924)


author: EL Errata <el-errata_ww@oracle.com> - 4.10.0-5.0.1
changelog:
  - Fixed python stack trace with updateinfo list cves command [Orabug: 32749660]
  - Replaced upstream bugzilla reporting reference. [Orabug: 32829849]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.12.0-1
changelog:
  - Allow destdir option with modulesync command
  - Add documentation for query api flags (RhBug:2035577)
  - Fix swap command to work with local rpm files correctly (RhBug:2036434)
  - Fix regression in verifying signatures using rpmkeys
  - Fix decompression of groups.xml (RhBug:2030255)
  - Fix history undo on a Reason Change (RhBug:2010259,2053014)
  - Remove /usr/bin from sys.path to avoid accidentally importing garbage
  - Fix python3.11 build: remove deprecated, update traceback regex
  - fix dnf mark error when history sqlite missing
  - [doc] clarify effect of --enablerepo and --disablerepo options (RhBug:2031414)
  - [doc] default values for module_obsoletes and module_stream_switch (RhBug: 2051846)
  - dnf.conf: hint users where to find more info about defaults and other options
  - Fix unittests that relied on checksum being at the end of solvfiles
  - completion: remove unnecessary echo
  - Fix remove when no repos are enabled (RhBug:2064341)
  - Add loongarch support for dnf
  - Add spaces between words to fix typos (RhBug:2077296)
  - [doc] Improve "proxy" configuration option documentation (RhBug:2072332)
  - Fix download errors handling in non-english locales (RhBug:2024527)


author: EL Errata <el-errata_ww@oracle.com> - 4.12.0-4.0.1
changelog:
  - Replaced bugzilla.oracle.com references [Orabug: 34202300]
  - Fixed python stack trace with updateinfo list cves command [Orabug: 32749660]
  - Replaced upstream bugzilla reporting reference. [Orabug: 32829849]


author: Jaroslav Rohel <jrohel@redhat.com> - 4.14.0-9
changelog:
  - Fix japanese translations (RHEL-11345)
  - Fix substitution in kay-value-pair list in add_new_repo (RHEL-6396)
  - base: Add obsoleters of only latest versions (RHEL-6304)


author: Petr Pisar <ppisar@redhat.com> - 4.14.0-11
changelog:
  - Fix handling an installation reason of install-only packages on autoremove
    (RHEL-15902)
  - Fix dnf-automatic service to apply security updates the same way as dnf tool
    (RHEL-21874)


author: Petr Pisar <ppisar@redhat.com> - 4.14.0-12
changelog:
  - Fix reporting nothing-to-do for "dnf remove --duplicates" (RHEL-6424)
  - Fix reporting nothing-to-do for "dnf remove --oldinstallonly" (RHEL-6424)


author: Petr Pisar <ppisar@redhat.com> - 4.14.0-16
changelog:
  - More specific error message on a locked OSTree system or a bootc system
    without a usr-overlay (RHEL-49670)


author: Petr Pisar <ppisar@redhat.com> - 4.14.0-17
changelog:
  - Revert more specific error message on a locked OSTree system or a bootc system
    without a usr-overlay (RHEL-49670)


author: Marek Blaha <mblaha@redhat.com> - 4.14.0-19
changelog:
  - Catch more specific OSError instead of SMTPException in dnf-automatic email
    emitter (RHEL-49743)


author: Evan Goode <egoode@redhat.com> - 4.14.0-30
changelog:
  - Mark transient transactions in DNF history (RHEL-84512)
  - Warn/disallow changes outside /usr, /etc with --transient (RHEL-84499)


author: Evan Goode <egoode@redhat.com> - 4.14.0-31
changelog:
  - Introduce $releasever_major, $releasever_minor variables, shell-style
    variable substitution (RHEL-65817)


author: Ales Matej <amatej@redhat.com> - 4.14.0-33
changelog:
  - autoremove: when a dangling protected dependency is found produce a wanrning
    and skip it (RHEL-76112)


author: Lukas Hrazky <lhrazky@redhat.com> - 4.14.0-1
changelog:
  - Update to 4.14.0
  - Add doc related to --destdir and --downloadonly options (RhBug:2100811)
  - Fix broken dependencies error reporting (RhBug:2088422)
  - Add support for group upgrade rollback (RhBug:2016070)
  - Expose plugin unload method to API (RhBug:2047251)
  - Fix upgrade from file to noarch pkg (RhBug:2006018)
  - Allow passing plugin parameters with dashes in names (RhBug:1980712)
  - Don't include resolved advisories for obsoletes with sec. filters (RhBug:2101421)
  - Add only relevant pkgs to upgrade transaction (RhBug:2097757)
  - doc: Describe how gpg keys are stored for `repo_ggpcheck` (RhBug:2020678)
  - bash-completion: use sqlite cache when available


author: Nicola Sella <nsella@redhat.com> - 4.14.0-3
changelog:
  - Move system-upgrade plugin to core (RhBug:2131288)
  - offline-upgrade: add support for security filters (RhBug:1939975,2139326)
  - Fix plugins unit tests + unload plugins upon their deletion


author: Jaroslav Rohel <jrohel@redhat.com> - 4.14.0-6
changelog:
  - Add reboot option to DNF Automatic (RhBug:2124793)
  - Omit src RPMs from check-update (RhBug:2151910,2203069)
  - automatic: Fix online detection with proxy (RhBug:2022440,2189851)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.14.0-8
changelog:
  - Return an error when transaction fails (RhBug:2170093,2212262)
  - Document symbols in `dnf history list` output (RhBug:2172067,2218113)


author: Nicola Sella <nsella@redhat.com> - 4.0.19-1
changelog:
  - Update to 4.0.19
  - copr: allow only 2 arguments with copr enable command
  - [needs-restarting] fix -r in nspawn containers (RhBug:1913962,1914251)
  - Add --gpgcheck option to reposync (RhBug:1856818) (RhBug:1856818)
  - Re-introduce yum-groups-manager functionality (RhBug:1826016)
  - [repomanage] Don't use cached metadata (RhBug:1899852)
  - [needs-restarting] add -s to list services (RhBug:1772939) (RhBug:1772939)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.21-1
changelog:
  - Update to 4.0.21
  - Removed dependency on dnf.yum.misc.Checksum class (RhBug:1935465)
  - Add missing command line option to documentation
  - doc: add packages to needs-restarting conf
  - Set blacklist subcommand as deprecated
  - Bugs fixed (RhBug:1914827,1916782)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.24-1
changelog:
  - Update to 4.0.24
  - [repomanage] Allow running only with metadata
  - [repomanage] Enhance documentation (RhBug:1898293)
  - [versionlock] Locking obsoleted package does not make the obsoleter unavailable (RhBug:1957280)
  - [versionlock] Work correctly with packages with minorbump part of release (RhBug:1961217)
  - [leaves] Show strongly connected components
  - [needs-restarting] Fix wrong boot time (RhBug:1960437)
  - [playground] Disable playground command, since it doesn't work
  - [copr] on CentOS Stream, enable centos stream chroot instead of not epel 8 (RhBug:1994154)
  - [copr] Avoid using deprecated function distro.linux_distribution() (RhBug:2011550)
  - [copr] don't traceback on empty lines in /etc/os-release


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.24-2
changelog:
  - [groups-manager] Use full NEVRA for matching packages instead of only name (RhBug:2029864)
  - [versionlock] Fix: Multiple package-name-spec arguments don't lock (RhBug:2029871)
  - [versionlock] Update documentation for adding specifi version (RhBug:2013332)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.1.0-1
changelog:
  - Add a new subpackage with modulesync command. The command downloads packages from modules and/or creates a repository with modular data. (RhBug:1868047)
  - [repoclosure] Print counts of missing dependencies
  - [reposync] Do not stop downloading packages on the first error (RhBug:2009894)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-6
changelog:
  - Fix boot time derivation for systems with no rtc (RhBug:2166444,2182157)
  - system-upgrade: Add --poweroff option to reboot subcommand (RhBug:2157844)
  - Doc update for reposync (RhBug:2132383,2182004)
  - reposync: Implement --safe-write-path option (RhBug:1898089,2203766)
  - Enable the leaves and show-leaves DNF plugins (RhBug:2134638)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-7
changelog:
  - Remove patch: "reposync: Implement --safe-write-path option (RhBug:1898089,2203766)" (RhBug:2207946)


author: EL Errata <el-errata_ww@oracle.com> - 4.3.0-11.0.1
changelog:
  - Added kernel uek and uek core into needs restart list [Orabug: 35860693]
  - Update upstream references [Orabug: 35378252]
  - Update upstream references [Orabug: 35366472]
  - repoclosure - raise exception for typos in repository name [Orabug: 33074226]


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-12
changelog:
  - Fix incorrect spanish translation file (RHEL-6394)
  - Fix for strange issue with binary garbage in smaps files (RHEL-6420, RhBug:2231923)


author: Petr Pisar <ppisar@redhat.com> - 4.3.0-14
changelog:
  - needs-restarting prefers to obtain a boot time from systemd to deal with
    RTCs running in local time (RHEL-14900)


author: Petr Pisar <ppisar@redhat.com> - 4.3.0-16
changelog:
  - Revert needs-restarting prefers to obtain a boot time from systemd to deal
    with RTCs running in local time (RHEL-39775)


author: Marek Blaha <mblaha@redhat.com> - 4.3.0-21
changelog:
  - reposync: Avoid multiple downloads of duplicate packages (RHEL-64320)
  - Fix bogus changelog entry date


author: Lukas Hrazky <lhrazky@redhat.com> - 4.3.0-1
changelog:
  - Update to 4.3.0
  - [config-manager] Update documentation (RhBug:2075366)
  - [builddep] Warning when using macros with source rpms (RhBug:2077820)
  - [repomanage] Use modules only from repo they are handling (RhBug:2072441)
  - Skip all non rpm transaction items for transaction_action plugins (rhbug:2023652)
  - feat(repomanage): Add new option --oldonly


author: Nicola Sella <nsella@redhat.com> - 4.3.0-2
changelog:
  - Move system-upgrade plugin to core (RhBug:2054235)
  - offline-upgrade: add support for security filters (RhBug:1939975)


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 4.3.0-5.0.1
changelog:
  - Update upstream references [Orabug: 35378252]
  - Update upstream references [Orabug: 35366472]
  - repoclosure - raise exception for typos in repository name [Orabug: 33074226]


author: Lukas Nykryn <lnykryn@redhat.com> - 055-6.git20210709
changelog:
  - fix(network-manager): don't pull in systemd-udev-settle
  - fix(dracut.sh): handle '-i' option to include files beginning with '.'
  - fix(dracut.sh): handle symlinks appropriately while using '-i' option
  - fix(squash): create relative symlinks
  - feat(squash): install umount util


author: Lukas Nykryn <lnykryn@redhat.com> - 055-9.git20210812
changelog:
  - fix(kernel-modules): add blk_mq_alloc_disk and
  - fix(network-manager): check for nm-initrd-generator in both
  - fix(cms): reload NetworkManager connections


author: Pavel Valena <pvalena@redhat.com> - 055-30.git20220216
changelog:
  - fix(shutdown): be robust against forced shutdown
  - 95resume: only exclude this module, when swap is netdev
  - fix(qeth_rules): check the existence of
  - fix(fips): handle s390x OSTree systems
  - fix(network): add errors and warnings when network interface
  - fix(url-lib): make pre-pivot hook separetely per
  - fix(dracut-shutdown): add cleanup handler on failure
  - fix(multipath): get config. dir from configuration
  - Do not use recommends for base packages
  - 95nfs: set correct ownership and permissions for statd


author: Pavel Valena <pvalena@redhat.com> - 055-38.git20220322
changelog:
  - revert(lvm): remove snapshot feature
  - revert(lvm): remove lvmetad config changes
  - revert(lvm): remove 69-dm-lvm-metad.rules
  - fix(lvm): replace --partial option
  - feat(lvm): update lvm command options
  - feat(lvm): use generated filter when none is set
  - feat(lvm): only run lvchange for LV that is seen on devices
  - fix(lvm): restore setting LVM_MD_PV_ACTIVATED


author: Pavel Valena <pvalena@redhat.com> - 055-40.git20220404
changelog:
  - fix(kernel-modules): detect block device's hardware driver
  - fix(dracut-initramfs-restore.sh): check if SELINUXTYPE is set


author: Pavel Valena <pvalena@redhat.com> - 055-45.git20220404
changelog:
  - fix(bluetooth): nullglob should not be needed
  - fix(dracut-install): do not fail when SOURCE is optional and
  - fix(test): nullglob should not be needed
  - fix(10i18n): stop leaking shell options
  - docs: do not mention nullglob in cases where it's not needed


author: EL Errata <el-errata_ww@oracle.com> - 055-45.git20220404.0.1
changelog:
  - network-legacy: Revert some shellcheck that breaks parse_option_121 in dhclient [Orabug: 33778173]
  - Change installation dir in network legacy module-setup so that file is never missing [Orabug: 33516170]
  - Fix paths in squash module, so that correct modprobe is installed [Orabug: 33514517]
  - Install missing 68-del-part-node.rules [Orabug: 32827579]
  - Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: Pavel Valena <pvalena@redhat.com> - 057-67.git20240812
changelog:
  - feat(systemd): install systemd-executor
  - test: use -device instead of -watchdog to remove qemu
  - fix(fips): remove /dev/{random,urandom} pre-creation
  - fix(systemd): always include sg module
  - fix(fips): do not blindly remove /boot
  - fix(github): update format of labeler
  - fix(network-manager): add "After" dependency on dbus.service
  - fix(url-lib.sh): nfs_already_mounted() with trailing slash in
  - feat(systemd-pcrphase): introducing the systemd-pcrphase
  - fix(systemd-pcrphase): only include
  - fix(nfs): include also entries from /usr/lib/{passwd,group}


author: Pavel Valena <pvalena@redhat.com> - 057-70.git20240819
changelog:
  - fix(systemd): set right permissions for the machine-id file
  - feat(lsinitrd.sh): look for initrd in /usr/lib/modules/
  - feat(dracut-init.sh): give --force-add precedence over --omit


author: Pavel Valena <pvalena@redhat.com> - 057-79.git20241127
changelog:
  - fix(35network-manager): install nftables kernel modules
  - fix(35network-manager): install nft binary during module
  - fix(dracut-install): copy xattr when use clone ioctl
  - feat(dracut.sh): add --add-confdir option
  - fix: typo in variable name
  - feat(fips): add support for UKIs
  - fix(kernel-modules): use modalias info in get_dev_module()
  - fix(dracut-functions.sh): convert mmcblk to the real kernel


author: Pavel Valena <pvalena@redhat.com> - 057-86.git20250217
changelog:
  - fix(35network-manager): remove duplicate installkernel
  - feat(fips): include fips module unconditionally
  - fix(dracut.sh): make omit-drivers option do exact match for
  - feat: add openssl module


author: Pavel Valena <pvalena@redhat.com> - 057-101.git20250808
changelog:
  - fix(systemd): add missing modprobe@.service
  - fix: let check_vol_slaves_all return 1 when checks on all
  - improvement(74nvmf): lookup required NIC kernel modules for
  - fix(74nvmf): set root=nvmf
  - chore(multipath): remove `rd_NO_MULTIPATH` kernel command
  - refactor(multipath): remove custom multipathd.service
  - fix(systemd): systemd.volatile needs overlayfs kernel module
  - refactor(dracut): introduce clamp_mtimes helper function
  - fix(dracut): ensure hardlink deduplication is reproducible


author: Craig Guiller <craig.guiller@oracle.com> - 057-102.git20250818.0.1
changelog:
  - Ship Oracle IMA certificate [Orabug: 35992862]
  - Ship 98-integrity.conf, populating initramfs with Oracle IMA certificate [Orabug: 35992862]
  - Include sys-fs-fuse-connections.mount if needed [Orabug: 35267570]
  - network-legacy: Revert some shellcheck that breaks parse_option_121 in dhclient [Orabug: 33778173]
  - Change installation dir in network legacy module-setup so that file is never missing [Orabug: 33516170]
  - Fix paths in squash module, so that correct modprobe is installed [Orabug: 33514517]
  - Install missing 68-del-part-node.rules [Orabug: 32827579]
  - Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: Pavel Valena <pvalena@redhat.com> - 057-110.git20260130
changelog:
  - fix(systemd-repart): allow partition format
  - feat(install.d):according to the changes of
  - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded
  - fix(pcsc): add opensc load module file
  - fix(pcsc): add --disable-polkit to pcscd.service
  - fix(pkcs11): delete trailing dot on
  - fix(multipath): disable user_friendly_names with mpathconf
    Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322


author: Alex Burmashev <alexander.burmashev@oracle.com> - 057-110.git20260130.0.1
changelog:
  - Skip the default FIPS logic on special UEK kernels where the FIPS module is linked directly into the kernel. [Orabug: 38705580]
  - Ship Oracle IMA certificate [Orabug: 35992862]
  - Ship 98-integrity.conf, populating initramfs with Oracle IMA certificate [Orabug: 35992862]
  - Include sys-fs-fuse-connections.mount if needed [Orabug: 35267570]
  - network-legacy: Revert some shellcheck that breaks parse_option_121 in dhclient [Orabug: 33778173]
  - Change installation dir in network legacy module-setup so that file is never missing [Orabug: 33516170]
  - Fix paths in squash module, so that correct modprobe is installed [Orabug: 33514517]
  - Install missing 68-del-part-node.rules [Orabug: 32827579]
  - Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: Pavel Valena <pvalena@redhat.com> - 057-113.git20260502
changelog:
  - fix(network-legacy): replace `echo` writes with `printf` to
  - fix(iscsi): replace `echo` writes with `printf` to prevent
  - fix(base): replace eval with safe variable indirection in
    Resolves: RHEL-170857


author: Pavel Valena <pvalena@redhat.com> - 057-115.git20260514
changelog:
  - fix(network): warn on suspicious shell metacharacters in
  - fix(base): escape arguments in initqueue hook script
    Related: RHEL-170857


author: Pavel Valena <pvalena@redhat.com> - 057-10.git20220721
changelog:
  - fix(dracut.sh): do not fail on irregular files
  - fix(98dracut-systemd): partly revert "emergency mode: use


author: Pavel Valena <pvalena@redhat.com> - 057-13.git20220816
changelog:
  - fix(kernel-modules): always include nvmem driver on
  - fix(drm): add video drivers needed on hyper-v and similar
  - fix(skipcpio): ignore broken pipe


author: Pavel Valena <pvalena@redhat.com> - 057-20.git20221213
changelog:
  - refactor(url-lib): write curl output directly to file
  - fix(dracut-initramfs-restore.sh): initramfs detection not
  - fix(90kernel-modules): install blk modules using symbol
  - fix(squash): build ld cache for squash loader
  - test(16-DMSQUASH): make it pass on arch
  - feat(dmsquash-live): add new dmsquash-live-autooverlay module


author: Alex Burmashev <alexander.burmashev@oracle.com> - 057-21.git20230214.0.2
changelog:
  - fix(systemd): add missing modprobe@.service [Orabug: 35267570]
  - Include sys-fs-fuse-connections.mount if needed [Orabug: 35267570]


author: Pavel Valena <pvalena@redhat.com> - 057-38.git20230725
changelog:
  - fix(dracut.sh): use dynamically uefi's sections offset
  - fix(dracut.sh): handle imagebase for uefi
  - fix(dracut.sh): use gawk for strtonum
  - fix(rngd): install system service file
  - fix(nvmf): nvme list-subsys prints the address using commas
  - fix(nvmf): don't try to validate network connections in
  - fix(nvmf): no need to load the nvme module
  - fix(nvmf): don't create did-setup file
  - fix(nvmf): don't use "finished" queue for autoconnect
  - fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes
  - fix(nvmf): avoid calling "exit" in a cmdline hook
  - fix(nvmf): run cmdline hook before parse-ip-opts.sh
  - feat(nvmf): set rd.neednet=1 if tcp records encountered
  - fix(nvmf): install 8021q module unconditionally
  - fix(nvmf): support /etc/nvme/config.json
  - feat(nvmf): add code for parsing the NBFT


author: Pavel Valena <pvalena@redhat.com> - 057-43.git20230816
changelog:
  - feat(spec): include modules for IMA
  - fix(dracut): there can be \ at the end on line in awk script
  - fix(rngd): spacing
  - fix(integrity): do not enable EVM if there is no key
  - fix(fips): include openssl's fips.so and openssl.cnf


author: EL Errata <el-errata_ww@oracle.com> - 057-44.git20230822.0.1
changelog:
  - fix(systemd): add missing modprobe@.service [Orabug: 35267570]
  - Include sys-fs-fuse-connections.mount if needed [Orabug: 35267570]
  - network-legacy: Revert some shellcheck that breaks parse_option_121 in dhclient [Orabug: 33778173]
  - Change installation dir in network legacy module-setup so that file is never missing [Orabug: 33516170]
  - Fix paths in squash module, so that correct modprobe is installed [Orabug: 33514517]
  - Install missing 68-del-part-node.rules [Orabug: 32827579]
  - Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: Alex Burmashev <alexander.burmashev@oracle.com> - 057-44.git20230822.0.2
changelog:
  - Ship Oracle IMA certificate [Orabug: 35992862]
  - Ship 98-integrity.conf, populating initramfs with Oracle IMA certificate [Orabug: 35992862]


author: Pavel Valena <pvalena@redhat.com> - 057-51.git20231114
changelog:
  - fix(dracut.sh): correct wrong systemd variable paths
  - fix(hwdb): follow shfmt-recommended format
  - feat(dracut): add --sbat option to add sbat policy to UKI
  - feat(systemd): install systemd-sysroot-fstab-check
  - fix(dracut.spec): add jq dependency to network subpackage
  - fix(fcoe-uefi): exit early on empty vlan


