# changelog

author: Brian Maly <brian.maly@oracle.com> [5.15.0-205.149.4.el8uek]
changelog:
  - Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST (Luiz Augusto von Dentz)   
  - netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate() (Ignat Korchagin)   
  - ksmbd: free aux buffer if ksmbd_iov_pin_rsp_read fails (Fedor Pchelkin)   
  - afs: Fix endless loop in directory parsing (David Howells)   
  - PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq() (Dan Carpenter)   
  - Revert "drm/bridge: lt8912b: Register and attach our DSI device at probe" (Max Krummenacher)   
  - net: usb: dm9601: fix wrong return value in dm9601_mdio_read (Javier Carrasco)   
  - usb: dwc3: gadget: Don't disconnect if not started (Thinh Nguyen)   
  - platform/x86: intel-vbtn: Stop calling "VBDL" from notify_handler (Hans de Goede)   
  - Fix null ptr in rds_tcp_recv_path (Allison Henderson)  [Orabug: 35587408]  
  - cifs: fix mid leak during reconnection after timeout threshold (Shyam Prasad N)  [Orabug: 36123597]  
  - vfio/mlx5: Activate the chunk mode functionality (Yishai Hadas)  [Orabug: 36298327]  
  - vfio/mlx5: Add support for READING in chunk mode (Yishai Hadas)  [Orabug: 36298327]  
  - vfio/mlx5: Add support for SAVING in chunk mode (Yishai Hadas)  [Orabug: 36298327]  
  - vfio/mlx5: Pre-allocate chunks for the STOP_COPY phase (Yishai Hadas)  [Orabug: 36298327]  
  - vfio/mlx5: Rename some stuff to match chunk mode (Yishai Hadas)  [Orabug: 36298327]  
  - vfio/mlx5: Enable querying state size which is > 4GB (Yishai Hadas)  [Orabug: 36298327]  
  - vfio/mlx5: Refactor the SAVE callback to activate a work only upon an error (Yishai Hadas)  [Orabug: 36298327]  
  - vfio/mlx5: Wake up the reader post of disabling the SAVING migration file (Yishai Hadas)  [Orabug: 36298327]  
  - net/mlx5: Introduce ifc bits for migration in a chunk mode (Yishai Hadas)  [Orabug: 36298327]  
  - af_unix: Drop oob_skb ref before purging queue in GC. (Kuniyuki Iwashima)  [Orabug: 36375407]  
  - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Shradha Gupta)  [Orabug: 36379479]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-205.149.5.el8uek]
changelog:
  - uek-rpm: Bluefield 3: enable lockdown mode for secure boot (Dave Kleikamp)  [Orabug: 36318788]  
  - Documentation/x86: Update split lock documentation (Tony Luck)  [Orabug: 36298291]  
  - x86/split_lock: Add sysctl to control the misery mode (Guilherme G. Piccoli)  [Orabug: 36298291]  
  - x86/split-lock: Remove unused TIF_SLD bit (Tony Luck)  [Orabug: 36298291]  
  - x86/split_lock: Make life miserable for split lockers (Tony Luck)  [Orabug: 36298291]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-206.149.1.el8uek]
changelog:
  - rds: ib: Use fastreg QP if conn is down and handle FRWR CQE timeout (Håkon Bugge)  [Orabug: 36236371]  
  - rds: ib: Tear down QP when FRWR WRs fails (Håkon Bugge)  [Orabug: 36236371]  
  - rds: ib: Poll fastreg CQ before destroying (Håkon Bugge)  [Orabug: 36236371]  
  - rds: Fix WARN_ON in rds_ib_destroy_mr_pool() (Hans Westgaard Ry)  [Orabug: 36332964]  
  - ext4: fix corruption during on-line resize (Maximilian Heyne)  [Orabug: 36342901]  
  - Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped." (Sherry Yang)  [Orabug: 36442401]  
  - dmapool: create/destroy cleanup (Keith Busch)  [Orabug: 36095510]  
  - dmapool: link blocks across pages (Keith Busch)  [Orabug: 36095510]  
  - dmapool: don't memset on free twice (Keith Busch)  [Orabug: 36095510]  
  - dmapool: simplify freeing (Keith Busch)  [Orabug: 36095510]  
  - dmapool: consolidate page initialization (Keith Busch)  [Orabug: 36095510]  
  - dmapool: rearrange page alloc failure handling (Keith Busch)  [Orabug: 36095510]  
  - dmapool: move debug code to own functions (Keith Busch)  [Orabug: 36095510]  
  - dmapool: speedup DMAPOOL_DEBUG with init_on_alloc (Tony Battersby)  [Orabug: 36095510]  
  - dmapool: cleanup integer types (Tony Battersby)  [Orabug: 36095510]  
  - dmapool: use sysfs_emit() instead of scnprintf() (Tony Battersby)  [Orabug: 36095510]  
  - dmapool: remove checks for dev == NULL (Tony Battersby)  [Orabug: 36095510]  
  - mm/dmapool.c: revert "make dma pool to use kmalloc_node" (Christian König)  [Orabug: 36095510]  
  - ice: Don't dereference NULL in ice_gnss_read error path (Simon Horman)  [Orabug: 36390519]  
  - ice: make writes to /dev/gnssX synchronous (Michal Schmidt)  [Orabug: 36390519]  
  - ice: do not busy-wait to read GNSS data (Michal Schmidt)  [Orabug: 36390519]  
  - ice: use GNSS subsystem instead of TTY (Arkadiusz Kubalewski)  [Orabug: 36390519]  
  - ice: Add check for kzalloc (Jiasheng Jiang)  [Orabug: 36390519]  
  - ice: Fix potential memory leak in ice_gnss_tty_write() (Yuan Can)  [Orabug: 36390519]  
  - uek-rpm: Bluefield 3: Enable KASAN runtime memory debugger in the debug config (Thomas Tai)  [Orabug: 36441787]  
  - Revert "mmc: core: Use mrq.sbc in close-ended ffu" (Thomas Tai)  [Orabug: 36441787]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-206.149.2.el8uek]
changelog:
  - tracing/kprobes: Remove CONFIG_LIVEPATCH for module symbol counting logic (Vijayendra Suman)  [Orabug: 36395538]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-206.149.3.el8uek]
changelog:
  - RDMA/cm: add timeout to cm_destroy_id wait (Manjunath Patil)  [Orabug: 36280585]  
  - net/mlx5: Query hca_cap_2 only when supported (Maher Sanalla)  [Orabug: 36466318]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-206.153.4.el8uek]
changelog:
  - LTS version: v5.15.153 (Vijayendra Suman)   
  - remoteproc: stm32: fix incorrect optional pointers (Arnd Bergmann)   
  - regmap: Add missing map->bus check (Marek Vasut)   
  - spi: spi-mt65xx: Fix NULL pointer access in interrupt handler (Fei Shao)   
  - net: dsa: mt7530: fix handling of all link-local frames (Arınç ÜNAL)   
  - net: dsa: mt7530: fix link-local frames that ingress vlan filtering ports (Arınç ÜNAL)   
  - net: dsa: mt7530: fix handling of 802.1X PAE frames (Arınç ÜNAL)   
  - net: dsa: mt7530: fix handling of LLDP frames (Arınç ÜNAL)   
  - bpf: report RCU QS in cpumap kthread (Yan Zhai)   
  - net: report RCU QS on threaded NAPI repolling (Yan Zhai)   
  - rcu: add a helper to report consolidated flavor QS (Yan Zhai)   
  - netfilter: nf_tables: do not compare internal table flags on updates (Pablo Neira Ayuso)   
  - netfilter: nft_set_pipapo: release elements in clone only from destroy path (Pablo Neira Ayuso)   
  - octeontx2-af: Use separate handlers for interrupts (Subbaraya Sundeep)   
  - net/bnx2x: Prevent access to a freed page in page_pool (Thinh Tran)   
  - net: phy: fix phy_read_poll_timeout argument type in genphy_loopback (Nikita Kiryushin)   
  - hsr: Handle failures in module init (Felix Maurer)   
  - wireguard: receive: annotate data-race around receiving_counter.counter (Nikita Zhandarovich)   
  - vdpa/mlx5: Allow CVQ size changes (Jonah Palmer)   
  - net: dsa: mt7530: prevent possible incorrect XTAL frequency selection (Arınç ÜNAL)   
  - net: veth: do not manipulate GRO when using XDP (Ignat Korchagin)   
  - packet: annotate data-races around ignore_outgoing (Eric Dumazet)   
  - net: ethernet: mtk_eth_soc: fix PPE hanging issue (Daniel Golle)   
  - net: mediatek: mtk_eth_soc: clear MAC_MCR_FORCE_LINK only when MAC is up (Daniel Golle)   
  - net: mtk_eth_soc: move MAC_MCR setting to mac_finish() (Russell King (Oracle))   
  - hsr: Fix uninit-value access in hsr_get_node() (Shigeru Yoshida)   
  - soc: fsl: dpio: fix kcalloc() argument order (Arnd Bergmann)   
  - s390/vtime: fix average steal time calculation (Mete Durlu)   
  - octeontx2-af: Use matching wake_up API variant in CGX command interface (Linu Cherian)   
  - nouveau: reset the bo resource bus info after an eviction (Dave Airlie)   
  - usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin (Colin Ian King)   
  - staging: greybus: fix get_channel_from_mode() failure path (Dan Carpenter)   
  - serial: 8250_exar: Don't remove GPIO device on suspend (Andy Shevchenko)   
  - rtc: mt6397: select IRQ_DOMAIN instead of depending on it (Randy Dunlap)   
  - kconfig: fix infinite loop when expanding a macro at the end of file (Masahiro Yamada)   
  - arm64: dts: broadcom: bcmbca: bcm4908: drop invalid switch cells (Rafał Miłecki)   
  - tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT (Tudor Ambarus)   
  - serial: max310x: fix syntax error in IRQ error message (Hugo Villeneuve)   
  - tty: vt: fix 20 vs 0x20 typo in EScsiignore (Jiri Slaby (SUSE))   
  - remoteproc: stm32: Fix incorrect type assignment returned by stm32_rproc_get_loaded_rsc_tablef (Arnaud Pouliquen)   
  - remoteproc: stm32: Fix incorrect type in assignment for va (Arnaud Pouliquen)   
  - remoteproc: stm32: use correct format strings on 64-bit (Arnd Bergmann)   
  - comedi: comedi_test: Prevent timers rescheduling during deletion (Ian Abbott)   
  - afs: Revert "afs: Hide silly-rename files from userspace" (David Howells)   
  - f2fs: compress: fix reserve_cblocks counting error when out of space (Xiuhong Wang)   
  - NFS: Fix an off by one in root_nfs_cat() (Christophe JAILLET)   
  - watchdog: stm32_iwdg: initialize default timeout (Ben Wolsieffer)   
  - NFSv4.2: fix listxattr maximum XDR buffer size (Jorge Mora)   
  - NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102 (Jorge Mora)   
  - net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr() (Christophe JAILLET)   
  - scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn (Arnd Bergmann)   
  - RDMA/rtrs-clt: Check strnlen return len in sysfs mpath_policy_store() (Alexey Kodanev)   
  - RDMA/device: Fix a race between mad_client and cm_client init (Shifeng Li)   
  - scsi: csiostor: Avoid function pointer casts (Arnd Bergmann)   
  - f2fs: compress: fix to check unreleased compressed cluster (Sheng Yong)   
  - f2fs: compress: fix to cover normal cluster write with cp_rwsem (Chao Yu)   
  - f2fs: reduce stack memory cost by using bitfield in struct f2fs_io_info (Chao Yu)   
  - f2fs: invalidate meta pages only for post_read required inode (Chao Yu)   
  - f2fs: fix to invalidate META_MAPPING before DIO write (Chao Yu)   
  - f2fs: replace congestion_wait() calls with io_schedule_timeout() (NeilBrown)   
  - f2fs: invalidate META_MAPPING before IPU/DIO write (Hyeong-Jun Kim)   
  - f2fs: multidevice: support direct IO (Chao Yu)   
  - RDMA/srpt: Do not register event handler until srpt device is fully setup (William Kucharski)   
  - ALSA: usb-audio: Stop parsing channels bits when all channels are found. (Johan Carlsson)   
  - ALSA: hda/realtek: fix ALC285 issues on HP Envy x360 laptops (Athaariq Ardhiansyah)   
  - clk: zynq: Prevent null pointer dereference caused by kmalloc failure (Duoming Zhou)   
  - clk: Fix clk_core_get NULL dereference (Bryan O'Donoghue)   
  - sparc32: Fix section mismatch in leon_pci_grpci (Sam Ravnborg)   
  - backlight: lp8788: Fully initialize backlight_properties during probe (Daniel Thompson)   
  - backlight: lm3639: Fully initialize backlight_properties during probe (Daniel Thompson)   
  - backlight: da9052: Fully initialize backlight_properties during probe (Daniel Thompson)   
  - backlight: lm3630a: Don't set bl->props.brightness in get_brightness (Luca Weiss)   
  - backlight: lm3630a: Initialize backlight_properties on init (Luca Weiss)   
  - leds: sgm3140: Add missing timer cleanup and flash gpio control (Ondrej Jirman)   
  - leds: aw2013: Unlock mutex before destroying it (George Stark)   
  - powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc. (Michael Ellerman)   
  - modules: wait do_free_init correctly (Changbin Du)   
  - module: Add support for default value for module async_probe (Saravana Kannan)   
  - drm/msm/dpu: add division of drm_display_mode's hskew parameter (Paloma Arellano)   
  - powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks (Kajol Jain)   
  - drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip (Hsin-Yi Wang)   
  - media: mediatek: vcodec: avoid -Wcast-function-type-strict warning (Arnd Bergmann)   
  - media: ttpci: fix two memleaks in budget_av_attach (Zhipeng Lu)   
  - media: go7007: fix a memleak in go7007_load_encoder (Zhipeng Lu)   
  - media: dvb-frontends: avoid stack overflow warnings with clang (Arnd Bergmann)   
  - media: pvrusb2: fix uaf in pvr2_context_set_notify (Edward Adam Davis)   
  - drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int() (Srinivasan Shanmugam)   
  - HID: amd_sfh: Update HPD sensor structure elements (Basavaraj Natikar)   
  - ASoC: meson: axg-tdm-interface: add frame rate constraint (Jerome Brunet)   
  - ASoC: meson: axg-tdm-interface: fix mclk setup without mclk-fs (Jerome Brunet)   
  - mtd: rawnand: lpc32xx_mlc: fix irq handler prototype (Arnd Bergmann)   
  - mtd: maps: physmap-core: fix flash size larger than 32-bit (Baruch Siach)   
  - drm/tidss: Fix initial plane zpos values (Tomi Valkeinen)   
  - crypto: arm/sha - fix function cast warnings (Arnd Bergmann)   
  - mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a ref (Peter Griffin)   
  - mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref (Peter Griffin)   
  - drm/tegra: put drm_gem_object ref on error in tegra_fb_create (Fedor Pchelkin)   
  - clk: hisilicon: hi3559a: Fix an erroneous devm_kfree() (Christophe JAILLET)   
  - clk: hisilicon: hi3519: Release the correct number of gates in hi3519_clk_unregister() (Christophe JAILLET)   
  - PCI: Mark 3ware-9650SE Root Port Extended Tags as broken (Jörg Wedekind)   
  - drm/mediatek: dsi: Fix DSI RGB666 formats and definitions (AngeloGioacchino Del Regno)   
  - clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times (Konrad Dybcio)   
  - media: pvrusb2: fix pvr2_stream_callback casts (Arnd Bergmann)   
  - media: pvrusb2: remove redundant NULL check (Daniil Dulov)   
  - media: go7007: add check of return value of go7007_read_addr() (Daniil Dulov)   
  - media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak (Lucas Stach)   
  - media: sun8i-di: Fix chroma difference threshold (Jernej Skrabec)   
  - media: sun8i-di: Fix power on/off sequences (Jernej Skrabec)   
  - media: sun8i-di: Fix coefficient writes (Jernej Skrabec)   
  - NTB: fix possible name leak in ntb_register_device() (Yang Yingliang)   
  - NTB: EPF: fix possible memory leak in pci_vntb_probe() (ruanjinjie)   
  - PCI: endpoint: Support NTB transfer between RC and EP (Frank Li)   
  - powerpc: Force inlining of arch_vmap_p{u/m}d_supported() (Christophe Leroy)   
  - ASoC: meson: t9015: fix function pointer type mismatch (Jerome Brunet)   
  - ASoC: meson: aiu: fix function pointer type mismatch (Jerome Brunet)   
  - ASoC: meson: Use dev_err_probe() helper (Kuninori Morimoto)   
  - perf stat: Avoid metric-only segv (Ian Rogers)   
  - ALSA: seq: fix function cast warnings (Takashi Iwai)   
  - drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode() (Nikita Zhandarovich)   
  - perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str() (Yang Jihong)   
  - crypto: xilinx - call finalize with bh disabled (Quanyang Wang)   
  - PCI: switchtec: Fix an error handling path in switchtec_pci_probe() (Christophe JAILLET)   
  - PCI/P2PDMA: Fix a sleeping issue in a RCU read section (Christophe JAILLET)   
  - quota: Fix rcu annotations of inode dquot pointers (Jan Kara)   
  - quota: Fix potential NULL pointer dereference (Wang Jianjian)   
  - quota: simplify drop_dquot_ref() (Baokun Li)   
  - clk: qcom: reset: Ensure write completion on reset de/assertion (Konrad Dybcio)   
  - clk: qcom: reset: Commonize the de/assert functions (Konrad Dybcio)   
  - pinctrl: mediatek: Drop bogus slew rate register range for MT8192 (Chen-Yu Tsai)   
  - media: edia: dvbdev: fix a use-after-free (Zhipeng Lu)   
  - media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity (Zhipeng Lu)   
  - media: v4l2-tpg: fix some memleaks in tpg_alloc (Zhipeng Lu)   
  - media: em28xx: annotate unchecked call to media_device_register() (Nikita Zhandarovich)   
  - clk: meson: Add missing clocks to axg_clk_regmaps (Igor Prusov)   
  - perf evsel: Fix duplicate initialization of data->id in evsel__parse_sample() (Yang Jihong)   
  - drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' (Srinivasan Shanmugam)   
  - drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()' (Srinivasan Shanmugam)   
  - HID: lenovo: Add middleclick_workaround sysfs knob for cptkbd (Mikhail Khvainitski)   
  - perf record: Fix possible incorrect free in record__switch_output() (Yang Jihong)   
  - PCI/DPC: Print all TLP Prefixes, not just the first (Ilpo Järvinen)   
  - media: tc358743: register v4l2 async device only after successful setup (Alexander Stein)   
  - dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA (Peter Robinson)   
  - drm/lima: fix a memleak in lima_heap_alloc (Zhipeng Lu)   
  - drm/rockchip: lvds: do not print scary message when probing defer (Quentin Schulz)   
  - drm/rockchip: lvds: do not overwrite error code (Quentin Schulz)   
  - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Zhipeng Lu)   
  - drm/ttm: add ttm_resource_fini v2 (Christian König)   
  - drm: Don't treat 0 as -1 in drm_fixp2int_ceil (Harry Wentland)   
  - drm/rockchip: inno_hdmi: Fix video timing (Alex Bee)   
  - drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths of tegra_output_probe() (Christophe JAILLET)   
  - drm/tegra: rgb: Fix missing clk_put() in the error handling paths of tegra_dc_rgb_probe() (Christophe JAILLET)   
  - drm/tegra: rgb: Fix some error handling paths in tegra_dc_rgb_probe() (Christophe JAILLET)   
  - drm/tegra: dc: rgb: Allow changing PLLD rate on Tegra30+ (Dmitry Osipenko)   
  - drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path of tegra_dsi_probe() (Christophe JAILLET)   
  - drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe() (Christophe JAILLET)   
  - drm/tegra: dsi: Make use of the helper function dev_err_probe() (Cai Huoqing)   
  - drm/tegra: dpaux: Fix PM disable depth imbalance in tegra_dpaux_probe (Zhang Shurong)   
  - drm/tegra: dpaux: Populate AUX bus (Thierry Reding)   
  - drm/tegra: dsi: Add missing check for of_find_device_by_node (Chen Ni)   
  - dm: call the resume method on internal suspend (Mikulas Patocka)   
  - dm raid: fix false positive for requeue needed during reshape (Ming Lei)   
  - nfp: flower: handle acti_netdevs allocation failure (Duoming Zhou)   
  - net/x25: fix incorrect parameter validation in the x25_getsockopt() function (Gavrilov Ilia)   
  - net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function (Gavrilov Ilia)   
  - udp: fix incorrect parameter validation in the udp_lib_getsockopt() function (Gavrilov Ilia)   
  - l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function (Gavrilov Ilia)   
  - ipmr: fix incorrect parameter validation in the ip_mroute_getsockopt() function (Gavrilov Ilia)   
  - bpf: net: Change do_ip_getsockopt() to take the sockptr_t argument (Martin KaFai Lau)   
  - bpf: net: Change sk_getsockopt() to take the sockptr_t argument (Martin KaFai Lau)   
  - net: Change sock_getsockopt() to take the sk ptr instead of the sock ptr (Martin KaFai Lau)   
  - tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function (Gavrilov Ilia)   
  - OPP: debugfs: Fix warning around icc_get_name() (Viresh Kumar)   
  - net: phy: dp83822: Fix RGMII TX delay configuration (Tim Pambor)   
  - net: phy: DP83822: enable rgmii mode if phy_interface_is_rgmii (Tommaso Merciai)   
  - net: hns3: fix port duplex configure error in IMP reset (Jie Wang)   
  - net: hns3: fix kernel crash when 1588 is received on HIP08 devices (Yonglong Liu)   
  - net: phy: fix phy_get_internal_delay accessing an empty array (Kévin L'hôpital)   
  - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() (Eric Dumazet)   
  - ipv6: fib6_rules: flush route cache when rule is changed (Shiming Cheng)   
  - bpf: Fix stackmap overflow check on 32-bit arches (Toke Høiland-Jørgensen)   
  - bpf: Fix hashtab overflow check on 32-bit arches (Toke Høiland-Jørgensen)   
  - bpf: Fix DEVMAP_HASH overflow check on 32-bit arches (Toke Høiland-Jørgensen)   
  - sr9800: Add check for usbnet_get_endpoints (Chen Ni)   
  - Bluetooth: hci_core: Fix possible buffer overflow (Luiz Augusto von Dentz)   
  - Bluetooth: hci_qca: don't use IS_ERR_OR_NULL() with gpiod_get_optional() (Bartosz Golaszewski)   
  - Bluetooth: hci_qca: Add support for QTI Bluetooth chip wcn6855 (Steev Klimaszewski)   
  - Bluetooth: Remove superfluous call to hci_conn_check_pending() (Jonas Dreßler)   
  - igb: Fix missing time sync events (Vinicius Costa Gomes)   
  - igb: move PEROUT and EXTTS isr logic to separate functions (Ruud Bos)   
  - iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected (Ethan Zhao)   
  - PCI: Make pci_dev_is_disconnected() helper public for other drivers (Ethan Zhao)   
  - wifi: rtw88: 8821c: Fix false alarm count (Bitterblue Smith)   
  - mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove function (Christophe JAILLET)   
  - SUNRPC: fix some memleaks in gssx_dec_option_array (Zhipeng Lu)   
  - x86, relocs: Ignore relocations in .notes section (Kees Cook)   
  - ACPI: scan: Fix device check notification handling (Rafael J. Wysocki)   
  - ACPI: resource: Add MAIBENBEN X577 to irq1_edge_low_force_override (Maxim Kudinov)   
  - ACPI: resource: Do IRQ override on Lunnen Ground laptops (Alexey I. Froloff)   
  - ACPI: resource: Add Infinity laptops to irq1_edge_low_force_override (David McFarland)   
  - arm64: dts: marvell: reorder crypto interrupts on Armada SoCs (Rafał Miłecki)   
  - ARM: dts: imx6dl-yapp4: Move the internal switch PHYs under the switch node (Michal Vokáč)   
  - ARM: dts: imx6dl-yapp4: Fix typo in the QCA switch register address (Michal Vokáč)   
  - ARM: dts: imx6dl-yapp4: Move phy reset into switch node (Michal Vokáč)   
  - arm64: dts: renesas: r8a779a0: Correct avb[01] reg sizes (Geert Uytterhoeven)   
  - arm64: dts: renesas: r8a779a0: Update to R-Car Gen4 compatible values (Geert Uytterhoeven)   
  - ARM: dts: arm: realview: Fix development chip ROM compatible value (Geert Uytterhoeven)   
  - net: ena: Remove ena_select_queue (Kamal Heib)   
  - wifi: brcmsmac: avoid function pointer casts (Arnd Bergmann)   
  - iommu/amd: Mark interrupt as managed (Mario Limonciello)   
  - bus: tegra-aconnect: Update dependency to ARCH_TEGRA (Peter Robinson)   
  - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Armin Wolf)   
  - wifi: wilc1000: prevent use-after-free on vif when cleaning up all interfaces (Alexis Lothoré)   
  - wireless: Remove redundant 'flush_workqueue()' calls (Christophe JAILLET)   
  - bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly (Yonghong Song)   
  - arm64: dts: mediatek: mt7622: add missing "device_type" to memory nodes (Rafał Miłecki)   
  - arm64: dts: mt8183: Move CrosEC base detection node to kukui-based DTs (Nícolas F. R. A. Prado)   
  - arm64: dts: mt8183: kukui: Split out keyboard node and describe detachables (Hsin-Yi Wang)   
  - arm64: dts: mt8183: kukui: Add Type C node (Prashant Malani)   
  - ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down() (Eric Dumazet)   
  - s390/vdso: drop '-fPIC' from LDFLAGS (Nathan Chancellor)   
  - wifi: iwlwifi: mvm: don't set replay counters to 0xff (Johannes Berg)   
  - pwm: sti: Fix capture for st,pwm-num-chan < st,capture-num-chan (Uwe Kleine-König)   
  - pwm: sti: Implement .apply() callback (Uwe Kleine-König)   
  - wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() (Zhipeng Lu)   
  - net: blackhole_dev: fix build warning for ethh set but not used (Breno Leitao)   
  - pwm: atmel-hlcdc: Fix clock imbalance related to suspend support (Uwe Kleine-König)   
  - pwm: atmel-hlcdc: Use consistent variable naming (Uwe Kleine-König)   
  - pwm: atmel-hlcdc: Convert to platform remove callback returning void (Uwe Kleine-König)   
  - arm64: dts: imx8mm-venice-gw71xx: fix USB OTG VBUS (Tim Harvey)   
  - wifi: iwlwifi: fix EWRD table validity check (Miri Korenblit)   
  - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Johannes Berg)   
  - wifi: iwlwifi: mvm: report beacon protection failures (Johannes Berg)   
  - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Toke Høiland-Jørgensen)   
  - arm64: dts: imx8mm-kontron: Disable pull resistors for SD card signals on BL board (Frieder Schrempf)   
  - arm64: dts: imx8mm-kontron: Use the VSELECT signal to switch SD card IO voltage (Frieder Schrempf)   
  - arm64: dts: imx8mm-kontron: Add support for ultra high speed modes on SD card (Frieder Schrempf)   
  - arm64: dts: imx8mm-kontron: Disable pullups for onboard UART signals on BL board (Frieder Schrempf)   
  - arm64: dts: imx8mm-kontron: Disable pullups for I2C signals on SL/BL i.MX8MM (Frieder Schrempf)   
  - cpufreq: mediatek-hw: Don't error out if supply is not found (Nícolas F. R. A. Prado)   
  - af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc(). (Kuniyuki Iwashima)   
  - bpftool: Silence build warning about calloc() (Tiezhu Yang)   
  - inet_diag: annotate data-races around inet_diag_table[] (Eric Dumazet)   
  - sock_diag: annotate data-races around sock_diag_handlers[family] (Eric Dumazet)   
  - cpufreq: mediatek-hw: Wait for CPU supplies before probing (Nícolas F. R. A. Prado)   
  - cpufreq: Explicitly include correct DT includes (Rob Herring)   
  - wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir() (Jinjie Ruan)   
  - wifi: wilc1000: fix multi-vif management when deleting a vif (Ajay Singh)   
  - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Martin Kaistra)   
  - wifi: wilc1000: fix RCU usage in connect path (Alexis Lothoré)   
  - wifi: wilc1000: fix declarations ordering (Alexis Lothoré)   
  - wifi: b43: Disable QoS for bcm4331 (Rahul Rameshbabu)   
  - wifi: b43: Stop correct queue in DMA worker when QoS is disabled (Rahul Rameshbabu)   
  - wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled (Rahul Rameshbabu)   
  - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled (Rahul Rameshbabu)   
  - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (Xingyuan Mo)   
  - sched/fair: Take the scheduling domain into account in select_idle_core() (Keisuke Nishimura)   
  - timekeeping: Fix cross-timestamp interpolation for non-x86 (Peter Hilber)   
  - timekeeping: Fix cross-timestamp interpolation corner case decision (Peter Hilber)   
  - timekeeping: Fix cross-timestamp interpolation on counter wrap (Peter Hilber)   
  - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts (Chun-Yi Lee)   
  - rtc: test: Fix invalid format specifier. (David Gow)   
  - time: test: Fix incorrect format specifier (David Gow)   
  - lib/cmdline: Fix an invalid format specifier in an assertion msg (David Gow)   
  - md: Don't clear MD_CLOSING when the raid is about to stop (Li Nan)   
  - fs/select: rework stack allocation hack for clang (Arnd Bergmann)   
  - s390/dasd: fix double module refcount decrement (Miroslav Franc)   
  - s390/dasd: Use dev_*() for device log messages (Jan Höppner)   
  - s390/dasd: add autoquiesce feature (Stefan Haberland)   
  - s390/dasd: add copy pair setup (Stefan Haberland)   
  - s390/dasd: add query PPRC function (Stefan Haberland)   
  - s390/dasd: put block allocation in separate function (Stefan Haberland)   
  - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Nikita Zhandarovich)   
  - ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll (Stuart Henderson)   
  - ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode (Stuart Henderson)   
  - ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC (Stuart Henderson)   
  - Input: gpio_keys_polled - suppress deferred probe error for gpio (Uwe Kleine-König)   
  - ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet (Alban Boyé)   
  - firewire: core: use long bus reset on gap count error (Takashi Sakamoto)   
  - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security (Yuxuan Hu)   
  - drm/amdgpu: Enable gpu reset for S3 abort cases on Raven series (Prike Liang)   
  - ALSA: hda/realtek - ALC285 reduce pop noise from Headphone port (Kailang Yang)   
  - scsi: mpt3sas: Prevent sending diag_reset when the controller is ready (Ranjan Kumar)   
  - dm-verity, dm-crypt: align "struct bvec_iter" correctly (Mikulas Patocka)   
  - block: sed-opal: handle empty atoms when parsing response (Greg Joyce)   
  - parisc/ftrace: add missing CONFIG_DYNAMIC_FTRACE check (Max Kellermann)   
  - net/iucv: fix the allocation size of iucv_path_table array (Alexander Gordeev)   
  - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Hou Tao)   
  - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h (Hou Tao)   
  - riscv: dts: sifive: add missing #interrupt-cells to pmic (Conor Dooley)   
  - RDMA/mlx5: Relax DEVX access upon modify commands (Yishai Hadas)   
  - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Leon Romanovsky)   
  - gen_compile_commands: fix invalid escape sequence warning (Andrew Ballance)   
  - HID: multitouch: Add required quirk for Synaptics 0xcddc device (Manuel Fombuena)   
  - MIPS: Clear Cause.BD in instruction_pointer_set (Jiaxun Yang)   
  - x86/xen: Add some null pointer checking to smp.c (Kunwu Chan)   
  - ASoC: rt5645: Make LattePanda board DMI match more precise (Hans de Goede)   
  - selftests: tls: use exact comparison in recv_partial (Jakub Kicinski)   
  - rcu-tasks: Provide rcu_trace_implies_rcu_gp() (Paul E. McKenney)   
  - LTS version: v5.15.152 (Vijayendra Suman)   
  - serial: max310x: fix IO data corruption in batched operations (Jan Kundrát)   
  - serial: max310x: make accessing revision id interface-agnostic (Cosmin Tanislav)   
  - regmap: Add bulk read/write callbacks into regmap_config (Marek Vasut)   
  - regmap: allow to define reg_update_bits for no bus configuration (Ansuel Smith)   
  - ALSA: usb-audio: Sort quirk table entries (Takashi Iwai)   
  - ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum610 Wireless (Takashi Iwai)   
  - ALSA: usb-audio: Always initialize fixed_rate in snd_usb_find_implicit_fb_sync_format() (Jaroslav Kysela)   
  - ALSA: usb-audio: Fix wrong kfree issue in snd_usb_endpoint_free_all (Wan Jiabing)   
  - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Oleg Nesterov)   
  - proc: Use task_is_running() for wchan in /proc/$pid/stat (Kees Cook)   
  - getrusage: use sig->stats_lock rather than lock_task_sighand() (Oleg Nesterov)   
  - getrusage: use __for_each_thread() (Oleg Nesterov)   
  - getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Oleg Nesterov)   
  - getrusage: add the "signal_struct *sig" local variable (Oleg Nesterov)   
  - drm/amd/display: Increase frame-larger-than for all display_mode_vba files (Nathan Chancellor)   
  - drm/amd/display: remove DML Makefile duplicate lines (Magali Lemes)   
  - drm/amd/display: move calcs folder into DML (Isabella Basso)   
  - drm/amd/display: Re-arrange FPU code structure for dcn2x (Qingqing Zhuo)   
  - selftests: mptcp: decrease BW in simult flows (Matthieu Baerts (NGI0))   
  - drm/amdgpu: Reset IH OVERFLOW_CLEAR bit (Friedrich Vock)   
  - drm/amd/pm: do not expose the API used internally only in kv_dpm.c (Evan Quan)   
  - serial: max310x: prevent infinite while() loop in port startup (Hugo Villeneuve)   
  - serial: max310x: use a separate regmap for each port (Cosmin Tanislav)   
  - serial: max310x: use regmap methods for SPI batch operations (Cosmin Tanislav)   
  - xhci: handle isoc Babble and Buffer Overrun events properly (Michal Pecio)   
  - xhci: process isoc TD properly when there was a transaction error mid TD. (Mathias Nyman)   
  - selftests: mm: fix map_hugetlb failure on 64K page size systems (Nico Pache)   
  - selftests/mm: switch to bash from sh (Muhammad Usama Anjum)   
  - nfp: flower: add hardware offload check for post ct entry (Hui Zhou)   
  - nfp: flower: add goto_chain_index for ct entry (Wentao Jia)   
  - drm/amd/display: Fix uninitialized variable usage in core_link_ 'read_dpcd() & write_dpcd()' functions (Srinivasan Shanmugam)   
  - ALSA: usb-audio: add quirk for RODE NT-USB+ (Sean Young)   
  - ALSA: usb-audio: Fix microphone sound on Nexigo webcam. (Christos Skevis)   
  - ALSA: usb-audio: Add new quirk FIXED_RATE for JBL Quantum810 Wireless (Jaroslav Kysela)   
  - ALSA: usb-audio: Add quirk for Tascam Model 12 (John Keeping)   
  - ALSA: usb-audio: Avoid superfluous endpoint setup (Takashi Iwai)   
  - ALSA: usb-audio: Correct the return code from snd_usb_endpoint_set_params() (Takashi Iwai)   
  - ALSA: usb-audio: Apply mutex around snd_usb_endpoint_set_params() (Takashi Iwai)   
  - ALSA: usb-audio: Properly refcounting clock rate (Takashi Iwai)   
  - ALSA: usb-audio: Split endpoint setups for hw_params and prepare (take#2) (Takashi Iwai)   
  - ALSA: usb-audio: Clear fixed clock rate at closing EP (Takashi Iwai)   
  - ALSA: usb-audio: Refcount multiple accesses on the single clock (Takashi Iwai)   
  - netrom: Fix data-races around sysctl_net_busy_read (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_link_fails_count (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_routing_control (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_busy_delay (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_timeout (Jason Xing)   
  - netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_default_path_quality (Jason Xing)   
  - erofs: apply proper VMA alignment for memory mapped files on THP (Gao Xiang)   
  - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Lena Wang)   
  - netfilter: nft_ct: fix l3num expectations with inet pseudo family (Florian Westphal)   
  - cpumap: Zero-initialise xdp_rxq_info struct before running XDP program (Toke Høiland-Jørgensen)   
  - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Eric Dumazet)   
  - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (Rand Deeb)   
  - net: sparx5: Fix use after free inside sparx5_del_mact_entry (Horatiu Vultur)   
  - geneve: make sure to pull inner header in geneve_rx() (Eric Dumazet)   
  - tracing/net_sched: Fix tracepoints that save qdisc_dev() as a string (Steven Rostedt (Google))   
  - i40e: disable NAPI right after disabling irqs when handling xsk_pool (Maciej Fijalkowski)   
  - ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able (Maciej Fijalkowski)   
  - net: lan78xx: fix runtime PM count underflow on link stop (Oleksij Rempel)   
  - mmc: mmci: stm32: fix DMA API overlapping mappings warning (Christophe Kerello)   
  - mmc: mmci: stm32: use a buffer for unaligned DMA requests (Yann Gautier)   
  - LTS version: v5.15.151 (Vijayendra Suman)   
  - mptcp: fix double-free on socket dismantle (Davide Caratti)   
  - Revert "tls: rx: move counting TlsDecryptErrors for sync" (Gal Pressman)   
  - net: tls: fix async vs NIC crypto offload (Jakub Kicinski)   
  - bpf: Derive source IP addr via bpf_*_fib_lookup() (Martynas Pumputis)   
  - bpf: Add table ID to bpf_fib_lookup BPF helper (Louis DeLosSantos)   
  - bpf: Add BPF_FIB_LOOKUP_SKIP_NEIGH for bpf_fib_lookup (Martin KaFai Lau)   
  - Revert "interconnect: Teach lockdep about icc_bw_lock order" (Greg Kroah-Hartman)   
  - Revert "interconnect: Fix locking for runpm vs reclaim" (Greg Kroah-Hartman)   
  - gpio: fix resource unwinding order in error path (Bartosz Golaszewski)   
  - gpiolib: Fix the error path order in gpiochip_add_data_with_key() (Andy Shevchenko)   
  - gpio: 74x164: Enable output pins after registers are reset (Arturas Moskvinas)   
  - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Oscar Salvador)   
  - cachefiles: fix memory leak in cachefiles_add_cache() (Baokun Li)   
  - mptcp: fix possible deadlock in subflow diag (Paolo Abeni)   
  - mptcp: push at DSS boundaries (Paolo Abeni)   
  - mptcp: add needs_id for netlink appending addr (Geliang Tang)   
  - mptcp: clean up harmless false expressions (Jean Sacren)   
  - selftests: mptcp: add missing kconfig for NF Filter in v6 (Matthieu Baerts (NGI0))   
  - selftests: mptcp: add missing kconfig for NF Filter (Matthieu Baerts (NGI0))   
  - mptcp: rename timer related helper to less confusing names (Paolo Abeni)   
  - mptcp: process pending subflow error on close (Paolo Abeni)   
  - mptcp: move __mptcp_error_report in protocol.c (Paolo Abeni)   
  - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Paolo Bonzini)   
  - pmdomain: qcom: rpmhpd: Fix enabled_corner aggregation (Bjorn Andersson)   
  - mmc: sdhci-xenon: fix PHY init clock stability (Elad Nachman)   
  - mmc: sdhci-xenon: add timeout for PHY init complete (Elad Nachman)   
  - mmc: core: Fix eMMC initialization with 1-bit bus connection (Ivan Semenov)   
  - dmaengine: fsl-qdma: init irq after reg initialization (Curtis Klein)   
  - dmaengine: ptdma: use consistent DMA masks (Tadeusz Struk)   
  - dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read (Peng Ma)   
  - btrfs: dev-replace: properly validate device names (David Sterba)   
  - wifi: nl80211: reject iftype change with mesh ID change (Johannes Berg)   
  - gtp: fix use-after-free and null-ptr-deref in gtp_newlink() (Alexander Ofitserov)   
  - ALSA: firewire-lib: fix to check cycle continuity (Takashi Sakamoto)   
  - tomoyo: fix UAF write bug in tomoyo_write_control() (Tetsuo Handa)   
  - riscv: Sparse-Memory/vmemmap out-of-bounds fix (Dimitris Vlachos)   
  - fbcon: always restore the old font data in fbcon_do_set_font() (Jiri Slaby (SUSE))   
  - ALSA: Drop leftover snd-rtctimer stuff from Makefile (Takashi Iwai)   
  - power: supply: bq27xxx-i2c: Do not free non existing IRQ (Hans de Goede)   
  - efi/capsule-loader: fix incorrect allocation size (Arnd Bergmann)   
  - tls: decrement decrypt_pending if no async completion will be called (Sabrina Dubroca)   
  - tls: rx: use async as an in-out argument (Jakub Kicinski)   
  - tls: rx: assume crypto always calls our callback (Jakub Kicinski)   
  - tls: rx: move counting TlsDecryptErrors for sync (Jakub Kicinski)   
  - tls: rx: don't track the async count (Jakub Kicinski)   
  - tls: rx: factor out writing ContentType to cmsg (Jakub Kicinski)   
  - tls: rx: wrap decryption arguments in a structure (Jakub Kicinski)   
  - tls: rx: don't report text length from the bowels of decrypt (Jakub Kicinski)   
  - tls: rx: drop unnecessary arguments from tls_setup_from_iter() (Jakub Kicinski)   
  - tls: hw: rx: use return value of tls_device_decrypted() to carry status (Jakub Kicinski)   
  - tls: rx: refactor decrypt_skb_update() (Jakub Kicinski)   
  - tls: rx: don't issue wake ups when data is decrypted (Jakub Kicinski)   
  - tls: rx: don't store the decryption status in socket context (Jakub Kicinski)   
  - tls: rx: don't store the record type in socket context (Jakub Kicinski)   
  - igb: extend PTP timestamp adjustments to i211 (Oleksij Rempel)   
  - rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back (Lin Ma)   
  - netfilter: bridge: confirm multicast packets before passing them up the stack (Florian Westphal)   
  - netfilter: let reset rules clean out conntrack entries (Florian Westphal)   
  - netfilter: make function op structures const (Florian Westphal)   
  - netfilter: core: move ip_ct_attach indirection to struct nf_ct_hook (Florian Westphal)   
  - netfilter: nfnetlink_queue: silence bogus compiler warning (Florian Westphal)   
  - Bluetooth: Enforce validation on max value of connection interval (Kai-Heng Feng)   
  - Bluetooth: hci_event: Fix wrongly recorded wakeup BD_ADDR (Zijun Hu)   
  - Bluetooth: Avoid potential use-after-free in hci_error_reset (Ying Hsu)   
  - stmmac: Clear variable when destroying workqueue (Jakub Raczynski)   
  - uapi: in6: replace temporary label with rfc9486 (Justin Iurman)   
  - veth: try harder when allocating queue memory (Jakub Kicinski)   
  - net: enable memcg accounting for veth queues (Vasily Averin)   
  - lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected (Oleksij Rempel)   
  - ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() (Eric Dumazet)   
  - net: veth: clear GRO when clearing XDP even when down (Jakub Kicinski)   
  - cpufreq: intel_pstate: fix pstate limits enforcement for adjust_perf call back (Doug Smythies)   
  - tun: Fix xdp_rxq_info's queue_index when detaching (Yunjian Wang)   
  - net: ip_tunnel: prevent perpetual headroom growth (Florian Westphal)   
  - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter (Ryosuke Yasuoka)   
  - mtd: spinand: gigadevice: Fix the get ecc status issue (Han Xu)   
  - netfilter: nf_tables: disallow timeout for anonymous sets (Pablo Neira Ayuso)   
  - LTS version: v5.15.150 (Vijayendra Suman)   
  - r8169: use new PM macros (Heiner Kallweit)   
  - netfilter: nf_tables: can't schedule in nft_chain_validate (Florian Westphal)   
  - ext4: avoid bb_free and bb_fragments inconsistency in mb_free_blocks() (Baokun Li)   
  - ext4: regenerate buddy after block freeing failed if under fc replay (Baokun Li)   
  - netfilter: nf_tables: fix scheduling-while-atomic splat (Florian Westphal)   
  - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio (Bart Van Assche)   
  - i2c: imx: when being a target, mark the last read as processed (Corey Minyard)   
  - i2c: imx: Add timer for handling the stop condition (Corey Minyard)   
  - drm/amd/display: Fix memory leak in dm_sw_fini() (Armin Wolf)   
  - drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set (Erik Kurzinger)   
  - netfilter: nft_flow_offload: release dst in case direct xmit path is used (Pablo Neira Ayuso)   
  - netfilter: nft_flow_offload: reset dst in route object after setting up flow (Pablo Neira Ayuso)   
  - netfilter: flowtable: simplify route logic (Pablo Neira Ayuso)   
  - netfilter: nf_tables: set dormant flag on hook register failure (Florian Westphal)   
  - tls: stop recv() if initial process_rx_list gave us non-DATA (Sabrina Dubroca)   
  - tls: rx: drop pointless else after goto (Jakub Kicinski)   
  - tls: rx: jump to a more appropriate label (Jakub Kicinski)   
  - s390: use the correct count for __iowrite64_copy() (Jason Gunthorpe)   
  - octeontx2-af: Consider the action set by PF (Subbaraya Sundeep)   
  - drm/nouveau/instmem: fix uninitialized_var.cocci warning (Guo Zhengkui)   
  - packet: move from strlcpy with unused retval to strscpy (Wolfram Sang)   
  - ipv6: sr: fix possible use-after-free and null-ptr-deref (Vasiliy Kovalev)   
  - afs: Increase buffer size in afs_update_volume_status() (Daniil Dulov)   
  - bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel (Martin KaFai Lau)   
  - ata: ahci_ceva: fix error handling for Xilinx GT PHY support (Radhey Shyam Pandey)   
  - ata: libahci_platform: Introduce reset assertion/deassertion methods (Serge Semin)   
  - ata: libahci_platform: Convert to using devm bulk clocks API (Serge Semin)   
  - ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid (Eric Dumazet)   
  - ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid (Eric Dumazet)   
  - net: stmmac: Fix incorrect dereference in interrupt handlers (Pavel Sakharov)   
  - nouveau: fix function cast warnings (Arnd Bergmann)   
  - scsi: jazz_esp: Only build if SCSI core is builtin (Randy Dunlap)   
  - bpf, scripts: Correct GPL license name (Gianmarco Lusvardi)   
  - RDMA/srpt: fix function pointer cast warnings (Arnd Bergmann)   
  - arm64: dts: rockchip: set num-cs property for spi on px30 (Heiko Stuebner)   
  - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib)   
  - RDMA/srpt: Support specifying the srpt_service_guid parameter (Bart Van Assche)   
  - RDMA/irdma: Add AE for too many RNRS (Mustafa Ismail)   
  - RDMA/irdma: Set the CQ read threshold for GEN 1 (Mustafa Ismail)   
  - RDMA/irdma: Validate max_send_wr and max_recv_wr (Shiraz Saleem)   
  - RDMA/irdma: Fix KASAN issue with tasklet (Mike Marciniszyn)   
  - RDMA/bnxt_re: Return error for SRQ resize (Kalesh AP)   
  - IB/hfi1: Fix a memleak in init_credit_return (Zhipeng Lu)   
  - cifs: add a warning when the in-flight count goes negative (Shyam Prasad N)   
  - xhci: track port suspend state correctly in unsuccessful resume cases (Mathias Nyman)   
  - xhci: decouple usb2 port resume and get_port_status request handling (Mathias Nyman)   
  - xhci: clear usb2 resume related variables in one place. (Mathias Nyman)   
  - xhci: rename resume_done to resume_timestamp (Mathias Nyman)   
  - xhci: move port specific items such as state completions to port structure (Mathias Nyman)   
  - xhci: cleanup xhci_hub_control port references (Mathias Nyman)   
  - ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA (Paul Menzel)   
  - ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA (Tamim Khan)   
  - ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks (Hans de Goede)   
  - ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA (Tamim Khan)   
  - ACPI: resource: Add ASUS model S5402ZA to quirks (Kellen Renshaw)   
  - ACPI: video: Add backlight=native DMI quirk for Apple iMac12,1 and iMac12,2 (Hans de Goede)   
  - ARM: dts: BCM53573: Describe on-SoC BCM53125 rev 4 switch (Rafał Miłecki)   
  - arm64: dts: rockchip: add SPDIF node for ROCK Pi 4 (Alex Bee)   
  - arm64: dts: rockchip: add ES8316 codec for ROCK Pi 4 (Alex Bee)   
  - arm64: dts: rockchip: fix regulator name on rk3399-rock-4 (FUKAUMI Naoki)   
  - exfat: support dynamic allocate bh for exfat_entry_set_cache (Yuezhang Mo)   
  - wifi: iwlwifi: mvm: avoid baid size integer overflow (Johannes Berg)   
  - igb: Fix igb_down hung on surprise removal (Ying Hsu)   
  - wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point() (Gustavo A. R. Silva)   
  - bpf: Address KCSAN report on bpf_lru_list (Martin KaFai Lau)   
  - wifi: ath11k: fix registration of 6Ghz-only phy without the full channel range (Maxime Bizon)   
  - sched/fair: Don't balance task to its current running CPU (Yicong Yang)   
  - arm64: mm: fix VA-range sanity check (Mark Rutland)   
  - arm64: set __exception_irq_entry with __irq_entry as a default (Youngmin Nam)   
  - ACPI: video: Add backlight=native DMI quirk for Lenovo ThinkPad X131e (3371 AMD version) (Hans de Goede)   
  - ACPI: video: Add backlight=native DMI quirk for Apple iMac11,3 (Hans de Goede)   
  - ACPI: button: Add lid disable DMI quirk for Nextbook Ares 8A (Hans de Goede)   
  - btrfs: add xxhash to fast checksum implementations (David Sterba)   
  - posix-timers: Ensure timer ID search-loop limit is valid (Thomas Gleixner)   
  - md/raid10: prevent soft lockup while flush writes (Yu Kuai)   
  - md: fix data corruption for raid456 when reshape restart while grow up (Yu Kuai)   
  - nbd: Add the maximum limit of allocated index in nbd_dev_add (Zhong Jinghua)   
  - debugobjects: Recheck debug_objects_enabled before reporting (Tetsuo Handa)   
  - netfilter: nf_tables: add rescheduling points during loop detection walks (Florian Westphal)   
  - net/sched: Refactor qdisc_graft() for ingress and clsact Qdiscs (Peilin Ye)   
  - Input: iqs269a - do not poll during ATI (Jeff LaBundy)   
  - Input: iqs269a - do not poll during suspend or resume (Jeff LaBundy)   
  - Input: iqs269a - switch to DEFINE_SIMPLE_DEV_PM_OPS() and pm_sleep_ptr() (Jonathan Cameron)   
  - PM: core: Remove static qualifier in DEFINE_SIMPLE_DEV_PM_OPS macro (Paul Cercueil)   
  - mmc: mxc: Use the new PM macros (Paul Cercueil)   
  - mmc: jz4740: Use the new PM macros (Paul Cercueil)   
  - PM: core: Add new *_PM_OPS macros, deprecate old ones (Paul Cercueil)   
  - PM: core: Redefine pm_ptr() macro (Paul Cercueil)   
  - powerpc/eeh: Set channel state after notifying the drivers (Ganesh Goudar)   
  - powerpc/eeh: Small refactor of eeh_handle_normal_event() (Daniel Axtens)   
  - powerpc/rtas: ensure 4KB alignment for rtas_data_buf (Nathan Lynch)   
  - powerpc/rtas: make all exports GPL (Nathan Lynch)   
  - net: ethernet: ti: add missing of_node_put before return (Wang Qing)   
  - dt-bindings: clocks: imx8mp: Add ID for usb suspend clock (Li Jun)   
  - clk: imx8mp: add clkout1/2 support (Lucas Stach)   
  - clk: imx8mp: Add DISP2 pixel clock (Marek Vasut)   
  - serial: 8250: Remove serial_rs485 sanitization from em485 (Ilpo Järvinen)   
  - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Enzo Matsumiya)   
  - kernel/sched: Remove dl_boosted flag comment (Hui Su)   
  - drm/i915/dg1: Update DMC_DEBUG3 register (Chuansheng Liu)   
  - f2fs: write checkpoint during FG_GC (Byungki Lee)   
  - f2fs: don't set GC_FAILURE_PIN for background GC (Chao Yu)   
  - drm/amdgpu: init iommu after amdkfd device init (Yifan Zhang)   
  - tools/virtio: fix build (Stefano Garzarella)   
  - perf beauty: Update copy of linux/socket.h with the kernel sources (Arnaldo Carvalho de Melo)   
  - tools headers UAPI: Sync linux/fscrypt.h with the kernel sources (Arnaldo Carvalho de Melo)   
  - ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger (Rafał Miłecki)   
  - acpi: property: Let args be NULL in __acpi_node_get_property_reference (Sakari Ailus)   
  - platform/x86: asus-wmi: Document the dgpu_disable sysfs attribute (Luke D. Jones)   
  - clk: linux/clk-provider.h: fix kernel-doc warnings and typos (Randy Dunlap)   
  - RDMA/siw: Correct wrong debug message (Guoqing Jiang)   
  - RDMA/siw: Balance the reference of cep->kref in the error path (Guoqing Jiang)   
  - ARM: dts: BCM53573: Drop nonexistent #usb-cells (Rafał Miłecki)   
  - selftests: net: vrf-xfrm-tests: change authentication and encryption algos (Magali Lemes)   
  - MIPS: vpe-mt: drop physical_memsize (Randy Dunlap)   
  - MIPS: SMP-CPS: fix build error when HOTPLUG_CPU not set (Randy Dunlap)   
  - powerpc/pseries/lpar: add missing RTAS retry status handling (Nathan Lynch)   
  - powerpc/perf/hv-24x7: add missing RTAS retry status handling (Nathan Lynch)   
  - powerpc/pseries/lparcfg: add missing RTAS retry status handling (Nathan Lynch)   
  - clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled() (Chen-Yu Tsai)   
  - clk: qcom: gpucc-sdm845: fix clk_dis_wait being programmed for CX GDSC (Dmitry Baryshkov)   
  - clk: qcom: gpucc-sc7180: fix clk_dis_wait being programmed for CX GDSC (Dmitry Baryshkov)   
  - powerpc/powernv/ioda: Skip unallocated resources when mapping to PE (Frederic Barrat)   
  - Input: ads7846 - don't check penirq immediately for 7845 (Luca Ellero)   
  - Input: ads7846 - always set last command to PWRDOWN (Luca Ellero)   
  - clk: imx: avoid memory leak (Peng Fan)   
  - clk: renesas: cpg-mssr: Remove superfluous check in resume code (Geert Uytterhoeven)   
  - Input: ads7846 - don't report pressure for ads7845 (Luca Ellero)   
  - clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed (Alexey Khoroshilov)   
  - Input: iqs269a - increase interrupt handler return delay (Jeff LaBundy)   
  - Input: iqs269a - configure device with a single block write (Jeff LaBundy)   
  - Input: iqs269a - drop unused device node references (Jeff LaBundy)   
  - RISC-V: fix funct4 definition for c.jalr in parse_asm.h (Heiko Stuebner)   
  - mtd: rawnand: sunxi: Fix the size of the last OOB region (Samuel Holland)   
  - clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents (Dmitry Baryshkov)   
  - clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents (Dmitry Baryshkov)   
  - clk: imx: imx8mp: add shared clk gate for usb suspend clk (Li Jun)   
  - mptcp: fix lockless access in subflow ULP diag (Paolo Abeni)   
  - usb: roles: don't get/set_role() when usb_role_switch is unregistered (Xu Yang)   
  - usb: roles: fix NULL pointer issue when put module's reference (Xu Yang)   
  - usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs (Krishna Kurapati)   
  - usb: cdns3: fix memory double free when handle zero packet (Frank Li)   
  - usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable() (Frank Li)   
  - usb: cdnsp: fixed issue with incorrect detecting CDNSP family controllers (Pawel Laszczak)   
  - usb: cdnsp: blocked some cdns3 specific code (Pawel Laszczak)   
  - serial: amba-pl011: Fix DMA transmission in RS485 mode (Lino Sanfilippo)   
  - x86/alternative: Make custom return thunk unconditional (Peter Zijlstra)   
  - Revert "x86/alternative: Make custom return thunk unconditional" (Borislav Petkov (AMD))   
  - x86/returnthunk: Allow different return thunks (Peter Zijlstra)   
  - x86/ftrace: Use alternative RET encoding (Peter Zijlstra)   
  - x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch() (Peter Zijlstra)   
  - x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR (Peter Zijlstra)   
  - Revert "x86/ftrace: Use alternative RET encoding" (Borislav Petkov (AMD))   
  - ARM: ep93xx: Add terminator to gpiod_lookup_table (Nikita Shubin)   
  - l2tp: pass correct message length to ip6_append_data (Tom Parkin)   
  - PCI/MSI: Prevent MSI hardware interrupt number truncation (Vidya Sagar)   
  - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() (Vasiliy Kovalev)   
  - KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table() (Oliver Upton)   
  - KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler (Oliver Upton)   
  - platform/x86: touchscreen_dmi: Allow partial (prefix) matches for ACPI names (Hans de Goede)   
  - dm-crypt: don't modify the data when using authenticated encryption (Mikulas Patocka)   
  - drm/ttm: Fix an invalid freeing on already freed page in error path (Thomas Hellström)   
  - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Daniel Vacek)   
  - erofs: fix lz4 inplace decompression (Gao Xiang)   
  - pmdomain: renesas: r8a77980-sysc: CR7 must be always on (Geert Uytterhoeven)   
  - pmdomain: mediatek: fix race conditions with genpd (Eugen Hristev)   
  - virtio-blk: Ensure no requests in virtqueues before deleting vqs. (Yi Sun)   
  - drm/amdgpu: reset gpu for s3 suspend abort case (Prike Liang)   
  - drm/amdgpu: skip to program GFXDEC registers for suspend abort (Prike Liang)   
  - firewire: core: send bus reset promptly on gap count error (Takashi Sakamoto)   
  - scsi: lpfc: Use unsigned type for num_sge (Hannes Reinecke)   
  - hwmon: (coretemp) Enlarge per package core count limit (Zhang Rui)   
  - efi: Don't add memblocks for soft-reserved memory (Andrew Bresticker)   
  - efi: runtime: Fix potential overflow of soft-reserved region size (Andrew Bresticker)   
  - wifi: mac80211: adding missing drv_mgd_complete_tx() call (Johannes Berg)   
  - fs/ntfs3: Fix oob in ntfs_listxattr (Edward Adam Davis)   
  - fs/ntfs3: Update inode->i_size after success write into compressed file (Konstantin Komarov)   
  - fs/ntfs3: Correct function is_rst_area_valid (Konstantin Komarov)   
  - fs/ntfs3: Prevent generic message "attempt to access beyond end of device" (Konstantin Komarov)   
  - fs/ntfs3: use non-movable memory for ntfs3 MFT buffer cache (Ism Hong)   
  - fs/ntfs3: Disable ATTR_LIST_ENTRY size check (Konstantin Komarov)   
  - fs/ntfs3: Add NULL ptr dereference checking at the end of attr_allocate_frame() (Konstantin Komarov)   
  - fs/ntfs3: Fix detected field-spanning write (size 8) of single field "le->name" (Konstantin Komarov)   
  - fs/ntfs3: Print warning while fixing hard links count (Konstantin Komarov)   
  - fs/ntfs3: Correct hard links updating when dealing with DOS names (Konstantin Komarov)   
  - fs/ntfs3: Improve ntfs_dir_count (Konstantin Komarov)   
  - fs/ntfs3: Modified fix directory element type detection (Konstantin Komarov)   
  - Input: i8042 - add Fujitsu Lifebook U728 to i8042 quirk table (Szilard Fabian)   
  - ext4: correct the hole length returned by ext4_map_blocks() (Zhang Yi)   
  - nvmet-fc: take ref count on tgtport before delete assoc (Daniel Wagner)   
  - nvmet-fc: avoid deadlock on delete association path (Daniel Wagner)   
  - nvmet-fc: abort command when there is no binding (Daniel Wagner)   
  - nvmet-fc: hold reference on hostport match (Daniel Wagner)   
  - nvmet-fc: defer cleanup using RCU properly (Daniel Wagner)   
  - nvmet-fc: release reference on target port (Daniel Wagner)   
  - nvmet-fcloop: swap the list_add_tail arguments (Daniel Wagner)   
  - nvme-fc: do not wait in vain when unloading module (Daniel Wagner)   
  - ALSA: usb-audio: Ignore clock selector errors for single connection (Alexander Tsoy)   
  - netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new (Xin Long)   
  - Input: xpad - add Lenovo Legion Go controllers (Brenton Simpson)   
  - spi: sh-msiof: avoid integer overflow in constants (Wolfram Sang)   
  - ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616 (Chen-Yu Tsai)   
  - ALSA: usb-audio: Check presence of valid altsetting control (Alexander Tsoy)   
  - nvmet-tcp: fix nvme tcp ida memory leak (Guixin Liu)   
  - regulator: pwm-regulator: Add validity checks in continuous .get_voltage (Martin Blumenstingl)   
  - dmaengine: ti: edma: Add some null pointer checks to the edma_probe (Kunwu Chan)   
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Baokun Li)   
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Baokun Li)   
  - ext4: avoid dividing by 0 in mb_update_avg_fragment_size() when block bitmap corrupt (Baokun Li)   
  - platform/x86: touchscreen_dmi: Add info for the TECLAST X16 Plus tablet (Phoenix Chen)   
  - MIPS: reserve exception vector space ONLY ONCE (Huang Pei)   
  - ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers (Lennert Buytenhek)   
  - ahci: asm1166: correct count of reported ports (Conrad Kostecki)   
  - spi: hisi-sfc-v3xx: Return IRQ_NONE if no interrupts were detected (Devyn Liu)   
  - fbdev: sis: Error out if pixclock equals zero (Fullway Wang)   
  - fbdev: savage: Error out if pixclock equals zero (Fullway Wang)   
  - wifi: mac80211: fix race condition on enabling fast-xmit (Felix Fietkau)   
  - wifi: cfg80211: fix missing interfaces when dumping (Michal Kazior)   
  - dmaengine: fsl-qdma: increase size of 'irq_name' (Vinod Koul)   
  - dmaengine: shdma: increase size of 'dev_id' (Vinod Koul)   
  - scsi: target: core: Add TMF to tmr_list handling (Dmitry Bogdanov)   
  - sched/rt: Disallow writing invalid values to sched_rt_period_us (Cyril Hrubis)   
  - sched/rt: Fix sysctl_sched_rr_timeslice intial value (Cyril Hrubis)   
  - userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb (Lokesh Gidra)   
  - bpf: Remove trace_printk_lock (Jiri Olsa)   
  - bpf: Do cleanup in bpf_bprintf_cleanup only when needed (Jiri Olsa)   
  - bpf: Add struct for bin_args arg in bpf_bprintf_prepare (Jiri Olsa)   
  - bpf: Merge printk and seq_printf VARARG max macros (Dave Marchevsky)   
  - sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset (Cyril Hrubis)   
  - smb: client: fix parsing of SMB3.1.1 POSIX create context (Paulo Alcantara)   
  - smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara)   
  - smb: client: fix OOB in receive_encrypted_standard() (Paulo Alcantara)


author: Brian Maly <brian.maly@oracle.com> [5.15.0-206.153.5.el8uek]
changelog:
  - KVM: x86: Add BHI_NO (Daniel Sneddon)  [Orabug: 36509092]  {CVE-2024-2201} 
  - x86/bhi: Mitigate KVM by default (Pawan Gupta)  [Orabug: 36509092]  {CVE-2024-2201} 
  - x86/bhi: Add BHI mitigation knob (Pawan Gupta)  [Orabug: 36509092]  {CVE-2024-2201} 
  - x86/bhi: Enumerate Branch History Injection (BHI) bug (Pawan Gupta)  [Orabug: 36509092]  {CVE-2024-2201} 
  - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Daniel Sneddon)  [Orabug: 36509092]  {CVE-2024-2201} 
  - x86/bhi: Add support for clearing branch history at syscall entry (Pawan Gupta)  [Orabug: 36509092]  {CVE-2024-2201} 
  - x86/cpufeature: Add missing leaf enumeration (Daniel Sneddon)  [Orabug: 36509092]  {CVE-2024-2201} 
  - KVM: x86: Use a switch statement and macros in __feature_translate() (Jim Mattson)  [Orabug: 36509092]  {CVE-2024-2201} 
  - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Jim Mattson)  [Orabug: 36509092]  {CVE-2024-2201} 
  - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Sean Christopherson)  [Orabug: 36509092]  {CVE-2024-2201} 
  - x86/bugs: Use sysfs_emit() (Borislav Petkov)  [Orabug: 36509092]  {CVE-2024-2201} 
  - x86/cpu: Support AMD Automatic IBRS (Kim Phillips)  [Orabug: 36509092]  {CVE-2024-2201} 
  - Documentation/hw-vuln: Update spectre doc (Lin Yujun)  [Orabug: 36509092]  {CVE-2024-2201} 
  - x86/speculation: Reorder SRSO and GDS functions (Alexandre Chartre)  [Orabug: 36509092]  {CVE-2024-2201} 
  - rds/rdma: print connection up/down time while dropping/connecting (Juan Garcia)  [Orabug: 36264673]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-206.153.6.el8uek]
changelog:
  - rds/rdma: Fix congestion value for userspace consumption (Juan Garcia)  [Orabug: 36264651]  
  - rds: Include transport protocol name in rds-info -k output (Juan Garcia)  [Orabug: 36264651]  
  - rds/ib: Disable WARN_ON() when system is going down (Hans Westgaard Ry)  [Orabug: 36394501]  
  - ipvlan: handle NETDEV_DOWN event (Venkat Venkatsubra)  [Orabug: 36500076]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-206.153.7.el8uek]
changelog:
  - mmc: core: Initialize mmc_blk_ioc_data (Mikko Rapeli)   
  - ahci: asm1064: asm1166: don't limit reported ports (Conrad Kostecki)   
  - mmc: core: Fix switch on gp3 partition (Dominique Martinet)   
  - Drivers: hv: vmbus: Calculate ring buffer size for more efficient use of memory (Michael Kelley)   
  - bpf: Protect against int overflow for stack access size (Andrei Matei)   
  - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion (Bart Van Assche)   
  - module: fix init_module_from_file() error handling (Linus Torvalds)  [Orabug: 36381490]  
  - modules: catch concurrent module loads, treat them as idempotent (Linus Torvalds)  [Orabug: 36381490]  
  - module: split up 'finit_module()' into init_module_from_file() helper (Linus Torvalds)  [Orabug: 36381490]  
  - module: avoid allocation if module is already present and ready (Luis Chamberlain)  [Orabug: 36381490]  
  - module: extract patient module check into helper (Luis Chamberlain)  [Orabug: 36381490]  
  - module: move early sanity checks into a helper (Luis Chamberlain)  [Orabug: 36381490]  
  - module: Move all into module/ (Aaron Tomlin)  [Orabug: 36381490]  
  - fbdev: fix incorrect address computation in deferred IO (Nam Cao)  [Orabug: 36427407]  
  - io_uring: ensure '0' is returned on file registration success (Jens Axboe)  [Orabug: 36544518]  
  - io_uring: don't save/restore iowait state (Jens Axboe)  [Orabug: 36544518]  
  - io_uring: drop any code related to SCM_RIGHTS (Jens Axboe)  [Orabug: 36544518]  
  - io_uring/unix: drop usage of io_uring socket (Jens Axboe)  [Orabug: 36544518]  
  - Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems" (Harshit Mogalapalli)  [Orabug: 36585256]  
  - genirq/cpuhotplug: Retry with cpu_online_mask when migration fails (Dongli Zhang)  [Orabug: 36591489]  
  - rds: Add garbage collection for receive ready cache (Hans Westgaard Ry)  [Orabug: 36382723]  
  - exec, elf: ignore malformed note segments (Anthony Yznaga)  [Orabug: 36524976]  
  - vfio/pds: Refactor/simplify reset logic (Brett Creeley)  [Orabug: 36525705]  
  - vfio/pds: Make sure migration file isn't accessed after reset (Brett Creeley)  [Orabug: 36525705]  
  - vfio/pds: Always clear the save/restore FDs on reset (Brett Creeley)  [Orabug: 36525705]  
  - vfio/pds: Move seq/ack bitmaps into region struct (Brett Creeley)  [Orabug: 36525705]  
  - vfio/pds: Pass region info to relevant functions (Brett Creeley)  [Orabug: 36525705]  
  - vfio/pds: Move and rename region specific info (Brett Creeley)  [Orabug: 36525705]  
  - vfio/pds: Only use a single SGL for both seq and ack (Brett Creeley)  [Orabug: 36525705]  
  - vfio/pds: Fix calculations in pds_vfio_dirty_sync (Brett Creeley)  [Orabug: 36525705]  
  - vfio/pds: Fix possible sleep while in atomic context (Brett Creeley)  [Orabug: 36525705]  
  - vfio/pds: Fix mutex lock->magic != lock warning (Brett Creeley)  [Orabug: 36525705]  
  - RDMA/cm: Print the old state when cm_destroy_id gets timeout (Mark Zhang)  [Orabug: 36546711]  
  - igb: free up irq resources in device shutdown path. (Imran Khan)  [Orabug: 36547249]  
  - net: rds: use maybe_get_net() when acquiring refcount on TCP sockets (Tetsuo Handa)  [Orabug: 34695506]  
  - net: rds: acquire refcount on TCP sockets (Tetsuo Handa)  [Orabug: 34695506]  
  - net: make sock_inuse_add() available (Eric Dumazet)  [Orabug: 34695506]  
  - rds: Optimize rds_cfu_cache_do_gc (Hans Westgaard Ry)  [Orabug: 36195145]  
  - rds: Optimize rds_percpu_caches garbage-collection (Hans Westgaard Ry)  [Orabug: 36195145]  
  - rds: Add lfstack_pop_all (Hans Westgaard Ry)  [Orabug: 36195145]  
  - KVM: arm64: Avoid soft lockups due to I-cache maintenance (Oliver Upton)  [Orabug: 36227024]  
  - KVM: arm64: Drop is_kernel_in_hyp_mode() from __invalidate_icache_guest_page() (Marc Zyngier)  [Orabug: 36227024]  
  - arm64: tlbflush: Rename MAX_TLBI_OPS (Oliver Upton)  [Orabug: 36227024]  
  - uek-rpm: aarch64: Build the ampere-cspmu driver (Dave Kleikamp)  [Orabug: 36227024]  
  - perf: arm_cspmu: Reject events meant for other PMUs (Ilkka Koskinen)  [Orabug: 36227024]  
  - docs/perf: Add ampere_cspmu to toctree to fix a build warning (Ilkka Koskinen)  [Orabug: 36227024]  
  - perf: arm_cspmu: ampere_cspmu: Add support for Ampere SoC PMU (Ilkka Koskinen)  [Orabug: 36227024]  
  - perf: arm_cspmu: Support implementation specific validation (Ilkka Koskinen)  [Orabug: 36227024]  
  - perf: arm_cspmu: Support implementation specific filters (Ilkka Koskinen)  [Orabug: 36227024]  
  - perf: arm_cspmu: Split 64-bit write to 32-bit writes (Ilkka Koskinen)  [Orabug: 36227024]  
  - perf: arm_cspmu: Separate Arm and vendor module (Besar Wicaksono)  [Orabug: 36227024]  
  - perf/arm_cspmu: Decouple APMT dependency (Robin Murphy)  [Orabug: 36227024]  
  - ACPI/APMT: Don't register invalid resource (Robin Murphy)  [Orabug: 36227024]  
  - perf: arm_cspmu: Add missing MODULE_DEVICE_TABLE (Ilkka Koskinen)  [Orabug: 36227024]  
  - perf/arm_cspmu: Fix event attribute type (Robin Murphy)  [Orabug: 36227024]  
  - perf: arm_cspmu: Set irq affinitiy only if overflow interrupt is used (Ilkka Koskinen)  [Orabug: 36227024]  
  - perf: arm_cspmu: Fix variable dereference warning (Besar Wicaksono)  [Orabug: 36227024]  
  - perf: arm_cspmu: Fix module cyclic dependency (Besar Wicaksono)  [Orabug: 36227024]  
  - perf: arm_cspmu: Fix build failure on x86_64 (Besar Wicaksono)  [Orabug: 36227024]  
  - perf: arm_cspmu: Fix modular builds due to missing MODULE_LICENSE()s (Will Deacon)  [Orabug: 36227024]  
  - ACPI: APMT: Fix kerneldoc and indentation (Besar Wicaksono)  [Orabug: 36227024]  
  - perf: arm_cspmu: Add support for NVIDIA SCF and MCF attribute (Besar Wicaksono)  [Orabug: 36227024]  
  - perf: arm_cspmu: Add support for ARM CoreSight PMU driver (Besar Wicaksono)  [Orabug: 36227024]  
  - ACPI: ARM Performance Monitoring Unit Table (APMT) initial support (Besar Wicaksono)  [Orabug: 36227024]  
  - ACPICA: Add support for ARM Performance Monitoring Unit Table. (Besar Wicaksono)  [Orabug: 36227024]  
  - cpufreq: CPPC: Add per_cpu efficiency_class (Pierre Gondois)  [Orabug: 36227024]  
  - bonding: rate-limit bonding driver inspect messages (Praveen Kumar Kannoju)  [Orabug: 36250567]  
  - mlxbf_gige: stop interface during shutdown (David Thompson)  [Orabug: 36525636]  
  - mlxbf_gige: call request_irq() after NAPI initialized (David Thompson)  [Orabug: 36525636]  
  - mlxbf_gige: stop PHY during open() error paths (David Thompson)  [Orabug: 36525636]  
  - mlxbf_gige: add support to display pause frame counters (David Thompson)  [Orabug: 36525636]  
  - uek-rpm: Bluefield 3: Add missing mtd_blkdev module (Thomas Tai)  [Orabug: 36530434]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-206.153.7.1.el8uek]
changelog:
  - scripts/gdb: Fix gdb 'lx-symbols' command (Khalid Masum)  [Orabug: 36632448]  
  - module: Fix prefix for module.sig_enforce module param (Saravana Kannan)  [Orabug: 36632448]


author: Pavel Raiskup <praiskup@redhat.com> - 3.3.1-1
changelog:
  - the latest release, per release notes:
    https://groups.google.com/forum/#!topic/libarchive-discuss/jfc7lBfrvVg


author: Pavel Raiskup <praiskup@redhat.com> - 3.3.2-4
changelog:
  - fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
  - fix crash on crafted 7zip archives (CVE-2019-1000019)
  - fix infinite loop in ISO9660 (CVE-2019-1000020)


author: Ondrej Dubaj <odubaj@redhat.com> - 3.3.2-7
changelog:
  - fix use-after-free in delayed newc link processing (#1602575)
  - fix a few obvious resource leaks and strcpy() misuses (#1602575)


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.3.3-6
changelog:
  - Resolves: CVE-2025-5914
  - Skip compression-level=1 size check on s390x.
  - Related to https://github.com/libarchive/libarchive/issues/1515


author: Anand Jain <anand.jain@oracle.com> - 5.15.1-1.el8
changelog:
  - Release: 5.15.1-1: Fix for missing by-uuid link after mkfs (Anand Jain)  
  - btrfs-progs: fix stray fd close in open_ctree_fs_info() (Qu Wenruo)  [Orabug: 36214038] 
  - btrfs-progs: rename struct open_ctree_flags to open_ctree_args (Anand Jain)  [Orabug: 36214038] 
  - btrfs-progs: mkfs: keep file descriptors open during whole time (Qu Wenruo)  [Orabug: 36214038] 
  - btrfs-progs: mkfs: run device preparation in parallel (Li Zhang)  [Orabug: 36214038]


author: Colin Walters <walters@verbum.org> - 0.1.7-1
changelog:
  - New upstream version;
    https://github.com/projectatomic/bubblewrap/releases/tag/v0.1.7
  - Resolves: #1411814


author: Jakub Martisko <jamartis@redhat.com> - 1.0.6-28
changelog:
  - The previous fix caused some regressions
  - Use an updated patch that deals with the original issue+the regressions
  Resolves: RHEL-71140


author: Alexey Tikhonov <atikhono@redhat.com> - 1.13.0-6
changelog:
  - Resolves: rhbz#1989425 - CVE-2021-3672 c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-8]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.13.0-7
changelog:
  - Resolves: rhbz#2170867 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-8]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.13.0-6.1
changelog:
  - Resolves: rhbz#2209516 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-8.8.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.13.0-9
changelog:
  - Resolves: rhbz#2238293 - CVE-2020-22217 c-ares: read-heap-buffer-overflow in ares_parse_soa_reply [rhel-8] [rhel-8.9.0.z]


author: Kai Engert <kaie@redhat.com> - 2017.2.20-6
changelog:
  - Depend on bash, grep, sed. Required for ca-legacy script execution.
  - p11-kit is already required at %post execution time. (rhbz#1537127)


author: Bob Relyea <rrelyea@redhat.com> - 2019.2.32-80.0
changelog:
  - Update to CKBI 2.32 from NSS 3.44
  -  Removing:
  -   # Certificate "Visa eCommerce Root"
  -   # Certificate "AC Raiz Certicamara S.A."
  -   # Certificate "ComSign CA"
  -   # Certificate "Certplus Root CA G1"
  -   # Certificate "Certplus Root CA G2"
  -   # Certificate "OpenTrust Root CA G1"
  -   # Certificate "OpenTrust Root CA G2"
  -   # Certificate "OpenTrust Root CA G3"
  -  Adding:
  -   # Certificate "GlobalSign Root CA - R6"
  -   # Certificate "OISTE WISeKey Global Root GC CA"
  -   # Certificate "GTS Root R1"
  -   # Certificate "GTS Root R2"
  -   # Certificate "GTS Root R3"
  -   # Certificate "GTS Root R4"
  -   # Certificate "UCA Global G2 Root"
  -   # Certificate "UCA Extended Validation Root"
  -   # Certificate "Certigna Root CA"
  -   # Certificate "emSign Root CA - G1"
  -   # Certificate "emSign ECC Root CA - G3"
  -   # Certificate "emSign Root CA - C1"
  -   # Certificate "emSign ECC Root CA - C3"
  -   # Certificate "Hongkong Post Root CA 3"


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-80.0
changelog:
  - Update to CKBI 2.41 from NSS 3.53.0
  -    Removing:
  -     # Certificate "AddTrust Low-Value Services Root"
  -     # Certificate "AddTrust External Root"
  -     # Certificate "UTN USERFirst Email Root CA"
  -     # Certificate "Certplus Class 2 Primary CA"
  -     # Certificate "Deutsche Telekom Root CA 2"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "Certinomis - Root CA"
  -    Adding:
  -     # Certificate "Entrust Root Certification Authority - G4"


author: Bob Relyea <rrelyea@redhat.com> - 2021.2.48-80.0
changelog:
  - Update to CKBI 2.48 from NSS 3.66
  -    Removing:
  -     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root CA"
  -     # Certificate "Sonera Class 2 Root CA"
  -     # Certificate "Taiwan GRCA"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Trustis FPS Root CA"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
  -     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
  -    Adding:
  -     # Certificate "Microsoft ECC Root Certificate Authority 2017"
  -     # Certificate "Microsoft RSA Root Certificate Authority 2017"
  -     # Certificate "e-Szigno Root CA 2017"
  -     # Certificate "certSIGN Root CA G2"
  -     # Certificate "Trustwave Global Certification Authority"
  -     # Certificate "Trustwave Global ECC P256 Certification Authority"
  -     # Certificate "Trustwave Global ECC P384 Certification Authority"
  -     # Certificate "NAVER Global Root Certification Authority"
  -     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
  -     # Certificate "GlobalSign Secure Mail Root R45"
  -     # Certificate "GlobalSign Secure Mail Root E45"
  -     # Certificate "GlobalSign Root R46"
  -     # Certificate "GlobalSign Root E46"
  -     # Certificate "GLOBALTRUST 2020"
  -     # Certificate "ANF Secure Server Root CA"
  -     # Certificate "Certum EC-384 CA"
  -     # Certificate "Certum Trusted Root CA"


author: Bob Relyea <rrelyea@redhat.com> - 2021.2.48-81
changelog:
  - Update to CKBI 2.48 from NSS 3.64
  -    Removing:
  -     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "Taiwan GRCA"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
  -     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
  -    Adding:
  -     # Certificate "Microsoft ECC Root Certificate Authority 2017"
  -     # Certificate "Microsoft RSA Root Certificate Authority 2017"
  -     # Certificate "e-Szigno Root CA 2017"
  -     # Certificate "certSIGN Root CA G2"
  -     # Certificate "Trustwave Global Certification Authority"
  -     # Certificate "Trustwave Global ECC P256 Certification Authority"
  -     # Certificate "Trustwave Global ECC P384 Certification Authority"
  -     # Certificate "NAVER Global Root Certification Authority"
  -     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
  -     # Certificate "GlobalSign Secure Mail Root R45"
  -     # Certificate "GlobalSign Secure Mail Root E45"
  -     # Certificate "GlobalSign Root R46"
  -     # Certificate "GlobalSign Root E46"


author: Bob Relyea <rrelyea@redhat.com> - 2021.2.48-82
changelog:
  - Update to CKBI 2.48 from NSS 3.66
  -    Removing:
  -     # Certificate "QuoVadis Root CA"
  -     # Certificate "Sonera Class 2 Root CA"
  -     # Certificate "Trustis FPS Root CA"
  -    Adding:
  -     # Certificate "GLOBALTRUST 2020"
  -     # Certificate "ANF Secure Server Root CA"
  -     # Certificate "Certum EC-384 CA"
  -     # Certificate "Certum Trusted Root CA"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-81
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "GlobalSign Root CA - R2"
  -     # Certificate "DST Root CA X3"
  -     # Certificate "Cybertrust Global Root"
  -     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
  -    Adding:
  -     # Certificate "TunTrust Root CA"
  -     # Certificate "HARICA TLS RSA Root CA 2021"
  -     # Certificate "HARICA TLS ECC Root CA 2021"
  -     # Certificate "HARICA Client RSA Root CA 2021"
  -     # Certificate "HARICA Client ECC Root CA 2021"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "vTrus ECC Root CA"
  -     # Certificate "vTrus Root CA"
  -     # Certificate "ISRG Root X2"
  -     # Certificate "HiPKI Root CA - G1"
  -     # Certificate "Telia Root CA v2"
  -     # Certificate "D-TRUST BR Root CA 1 2020"
  -     # Certificate "D-TRUST EV Root CA 1 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-80.0
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Adding:
  -     # Certificate "CAEDICOM Root"
  -     # Certificate "I.CA Root CA/RSA"
  -     # Certificate "MULTICERT Root Certification Authority 01"
  -     # Certificate "Certification Authority of WoSign G2"
  -     # Certificate "CA WoSign ECC Root"
  -     # Certificate "CCA India 2015 SPL"
  -     # Certificate "Swedish Government Root Authority v3"
  -     # Certificate "Swedish Government Root Authority v2"
  -     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "OpenTrust Root CA G2"
  -     # Certificate "OpenTrust Root CA G3"
  -     # Certificate "Certplus Root CA G1"
  -     # Certificate "Certplus Root CA G2"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Thailand National Root Certification Authority - G1"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Certification Authority of WoSign"
  -     # Certificate "CA 沃通根证书"
  -     # Certificate "SSC GDL CA Root B"
  -     # Certificate "SAPO Class 2 Root CA"
  -     # Certificate "SAPO Class 3 Root CA"
  -     # Certificate "SAPO Class 4 Root CA"
  -     # Certificate "CA Disig Root R1"
  -     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
  -     # Certificate "ApplicationCA2 Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Halcom Root CA"
  -     # Certificate "Swisscom Root EV CA 2"
  -     # Certificate "CFCA GT CA"
  -     # Certificate "Digidentity L3 Root CA - G2"
  -     # Certificate "SITHS Root CA v1"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "IGC/A AC racine Etat francais"
  -     # Certificate "PersonalID Trustworthy RootCA 2011"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "Swiss Government Root CA II"
  -     # Certificate "Swiss Government Root CA I"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "LuxTrust Global Root"
  -     # Certificate "AC1 RAIZ MTIN"
  -     # Certificate "Microsoft Root Certificate Authority 2011"
  -     # Certificate "CCA India 2011"
  -     # Certificate "ANCERT Certificados Notariales V2"
  -     # Certificate "ANCERT Certificados CGN V2"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "China Internet Network Information Center EV Certificates Root"
  -     # Certificate "Verizon Global Root CA"
  -     # Certificate "SwissSign Silver Root CA - G3"
  -     # Certificate "SwissSign Platinum Root CA - G3"
  -     # Certificate "SwissSign Gold Root CA - G3"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "SITHS CA v3"
  -     # Certificate "Certinomis - Autorité Racine"
  -     # Certificate "ANF Server CA"
  -     # Certificate "Thawte Premium Server CA"
  -     # Certificate "Thawte Server CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "KEYNECTIS ROOT CA"
  -     # Certificate "I.CA - Standard Certification Authority, 09/2009"
  -     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
  -     # Certificate "VI Registru Centras RCSC (RootCA)"
  -     # Certificate "CCA India 2007"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Actalis Authentication CA G1"
  -     # Certificate "A-Trust-Qual-03"
  -     # Certificate "AddTrust External CA Root"
  -     # Certificate "ECRaizEstado"
  -     # Certificate "Configuration"
  -     # Certificate "FNMT-RCM"
  -     # Certificate "StartCom Certification Authority"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "E-ME SSI (RCA)"
  -     # Certificate "ACEDICOM Root"
  -     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
  -     # Certificate "Correo Uruguayo - Root CA"
  -     # Certificate "CNNIC ROOT"
  -     # Certificate "Common Policy"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "Cisco Root CA 2048"
  -     # Certificate "CA Disig"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "UCA Global Root"
  -     # Certificate "UCA Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Starfield Services Root Certificate Authority"
  -     # Certificate "I.CA - Qualified root certificate"
  -     # Certificate "I.CA - Standard root certificate"
  -     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
  -     # Certificate "Japanese Government"
  -     # Certificate "AdminCA-CD-T01"
  -     # Certificate "Admin-Root-CA"
  -     # Certificate "Izenpe.com"
  -     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
  -     # Certificate "Halcom CA FO"
  -     # Certificate "Halcom CA PO 2"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "ACNLB"
  -     # Certificate "state-institutions"
  -     # Certificate "state-institutions"
  -     # Certificate "SECOM Trust Systems CO.,LTD."
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "D-TRUST Root Class 2 CA 2007"
  -     # Certificate "D-TRUST Root Class 3 CA 2007"
  -     # Certificate "SSC Root CA A"
  -     # Certificate "SSC Root CA B"
  -     # Certificate "SSC Root CA C"
  -     # Certificate "Autoridad de Certificacion de la Abogacia"
  -     # Certificate "Root CA Generalitat Valenciana"
  -     # Certificate "VAS Latvijas Pasts SSI(RCA)"
  -     # Certificate "ANCERT Certificados CGN"
  -     # Certificate "ANCERT Certificados Notariales"
  -     # Certificate "ANCERT Corporaciones de Derecho Publico"
  -     # Certificate "GLOBALTRUST"
  -     # Certificate "Certipost E-Trust TOP Root CA"
  -     # Certificate "Certipost E-Trust Primary Qualified CA"
  -     # Certificate "Certipost E-Trust Primary Normalised CA"
  -     # Certificate "Cybertrust Global Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "IGC/A"
  -     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "Swisscom Root CA 1"
  -     # Certificate "Microsec e-Szigno Root CA"
  -     # Certificate "LGPKI"
  -     # Certificate "AC RAIZ DNIE"
  -     # Certificate "Common Policy"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 1"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Staat der Nederlanden Root CA"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Global CA 2"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root Certification Authority"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Microsoft Root Authority"
  -     # Certificate "Microsoft Root Certificate Authority"
  -     # Certificate "Microsoft Root Certificate Authority 2010"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "UTN-USERFirst-Object"
  -     # Certificate "BYTE Root Certification Authority 001"
  -     # Certificate "CISRCA1"
  -     # Certificate "ePKI Root Certification Authority - G2"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "SSL.com EV Root Certification Authority RSA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "ACA ROOT"
  -     # Certificate "Security Communication ECC RootCA1"
  -     # Certificate "Security Communication RootCA3"
  -     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
  -     # Certificate "Network Solutions RSA Certificate Authority"
  -     # Certificate "Network Solutions ECC Certificate Authority"
  -     # Certificate "Australian Defence Public Root CA"
  -     # Certificate "SI-TRUST Root"
  -     # Certificate "Halcom Root Certificate Authority"
  -     # Certificate "Application CA G3 Root"
  -     # Certificate "GLOBALTRUST 2015"
  -     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
  -     # Certificate "emSign Root CA - G2"
  -     # Certificate "emSign Root CA - C2"
  -     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
  -     # Certificate "DigiCert CS ECC P384 Root G5"
  -     # Certificate "DigiCert CS RSA4096 Root G5"
  -     # Certificate "DigiCert RSA4096 Root G5"
  -     # Certificate "DigiCert ECC P384 Root G5"
  -     # Certificate "HARICA Code Signing RSA Root CA 2021"
  -     # Certificate "HARICA Code Signing ECC Root CA 2021"
  -     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-80.2
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "Izenpe.com"
  -     # Certificate "state-institutions"
  -     # Certificate "GlobalSign"
  -     # Certificate "Common Policy"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "AC Raíz Certicámara S.A."


author: Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-80.0
changelog:
  - Update to CKBI 2.60_v7.0.306 from NSS 3.91
  -    Removing:
  -     # Certificate "Camerfirma Global Chambersign Root"
  -     # Certificate "Staat der Nederlanden EV Root CA"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "CCA India 2007"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -    Adding:
  -     # Certificate "DigiCert TLS ECC P384 Root G5"
  -     # Certificate "DigiCert TLS RSA4096 Root G5"
  -     # Certificate "DigiCert SMIME ECC P384 Root G5"
  -     # Certificate "DigiCert SMIME RSA4096 Root G5"
  -     # Certificate "Certainly Root R1"
  -     # Certificate "Certainly Root E1"
  -     # Certificate "E-Tugra Global Root CA RSA v3"
  -     # Certificate "E-Tugra Global Root CA ECC v3"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
  -     # Certificate "BJCA Global Root CA1"
  -     # Certificate "BJCA Global Root CA2"
  -     # Certificate "Symantec Enterprise Mobile Root for Microsoft"
  -     # Certificate "A-Trust-Root-05"
  -     # Certificate "ADOCA02"
  -     # Certificate "StartCom Certification Authority G2"
  -     # Certificate "ATHEX Root CA"
  -     # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "America Online Root Certification Authority 1"
  -     # Certificate "Juur-SK"
  -     # Certificate "ComSign CA"
  -     # Certificate "ComSign Secured CA"
  -     # Certificate "ComSign Advanced Security CA"
  -     # Certificate "Global Chambersign Root"
  -     # Certificate "Sonera Class2 CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "VeriSign, Inc."
  -     # Certificate "GTE CyberTrust Global Root"
  -     # Certificate "Equifax Secure Global eBusiness CA-1"
  -     # Certificate "Equifax"
  -     # Certificate "Class 1 Primary CA"
  -     # Certificate "Swiss Government Root CA III"
  -     # Certificate "Application CA G4 Root"
  -     # Certificate "SSC GDL CA Root A"
  -     # Certificate "GlobalSign Code Signing Root E45"
  -     # Certificate "GlobalSign Code Signing Root R45"
  -     # Certificate "Entrust Code Signing Root Certification Authority - CSBR1"


author: Frantisek Krenzelok <fkrenzel@redhat.com> - 2024.2.69_v8.0.303-80.0
changelog:
  - Update to CKBI 2.69_v8.0.303 from NSS 3.101.1
  -    Removing:
  -     # Certificate "Verisign Class 1 Public Primary Certification Authority - G3"
  -     # Certificate "Verisign Class 2 Public Primary Certification Authority - G3"
  -     # Certificate "Security Communication Root CA"
  -     # Certificate "Camerfirma Chambers of Commerce Root"
  -     # Certificate "Hongkong Post Root CA 1"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Symantec Class 1 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 2 Public Primary Certification Authority - G6"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "FNMT-RCM"
  -    Adding:
  -     # Certificate "LAWtrust Root CA2 (4096)"
  -     # Certificate "Sectigo Public Email Protection Root E46"
  -     # Certificate "Sectigo Public Email Protection Root R46"
  -     # Certificate "Sectigo Public Server Authentication Root E46"
  -     # Certificate "Sectigo Public Server Authentication Root R46"
  -     # Certificate "SSL.com TLS RSA Root CA 2022"
  -     # Certificate "SSL.com TLS ECC Root CA 2022"
  -     # Certificate "SSL.com Client ECC Root CA 2022"
  -     # Certificate "SSL.com Client RSA Root CA 2022"
  -     # Certificate "Atos TrustedRoot Root CA ECC G2 2020"
  -     # Certificate "Atos TrustedRoot Root CA RSA G2 2020"
  -     # Certificate "Atos TrustedRoot Root CA ECC TLS 2021"
  -     # Certificate "Atos TrustedRoot Root CA RSA TLS 2021"
  -     # Certificate "TrustAsia Global Root CA G3"
  -     # Certificate "TrustAsia Global Root CA G4"
  -     # Certificate "CommScope Public Trust ECC Root-01"
  -     # Certificate "CommScope Public Trust ECC Root-02"
  -     # Certificate "CommScope Public Trust RSA Root-01"
  -     # Certificate "CommScope Public Trust RSA Root-02"
  -     # Certificate "D-Trust SBR Root CA 1 2022"
  -     # Certificate "D-Trust SBR Root CA 2 2022"
  -     # Certificate "Telekom Security SMIME ECC Root 2021"
  -     # Certificate "Telekom Security TLS ECC Root 2020"
  -     # Certificate "Telekom Security SMIME RSA Root 2023"
  -     # Certificate "Telekom Security TLS RSA Root 2023"
  -     # Certificate "FIRMAPROFESIONAL CA ROOT-A WEB"
  -     # Certificate "SECOM Trust.net"
  -     # Certificate "Chambers of Commerce Root"
  -     # Certificate "VeriSign Class 2 Public Primary Certification Authority - G3"
  -     # Certificate "SSL.com Code Signing RSA Root CA 2022"
  -     # Certificate "SSL.com Code Signing ECC Root CA 2022"


author: rhel-developer-toolbox <krenzelok.frantisek@gmail.com> - 2025.2.80_v9.0.304-80.0
changelog:
  - Update to CKBI 2.80_v9.0.304 from NSS 3.114
  -    Adding:
  -     # Certificate "TWCA CYBER Root CA"
  -     # Certificate "TWCA Global Root CA G2"
  -     # Certificate "SecureSign Root CA12"
  -     # Certificate "SecureSign Root CA14"
  -     # Certificate "SecureSign Root CA15"
  -     # Certificate "D-TRUST BR Root CA 2 2023"
  -     # Certificate "TrustAsia SMIME ECC Root CA"
  -     # Certificate "TrustAsia SMIME RSA Root CA"
  -     # Certificate "TrustAsia TLS ECC Root CA"
  -     # Certificate "TrustAsia TLS RSA Root CA"
  -     # Certificate "D-TRUST EV Root CA 2 2023"
  -     # Certificate "SwissSign RSA SMIME Root CA 2022 - 1"
  -     # Certificate "SwissSign RSA TLS Root CA 2022 - 1"
  -     # Certificate "Sectigo Public Code Signing Root R46"
  -     # Certificate "Sectigo Public Code Signing Root E46"


author: David Howells <dhowells@redhat.com> 0.10.6-1
changelog:
  - Note the correct licence.
  - Handle malformed kernel status correctly.
  - Permit culling to be disabled on the command line with the -N flag.
  - Suspend culling when cache space is short and cache objects are pinned.


author: David Howells <dhowells@redhat.com> 0.10.8-1
changelog:
  - Use systemd interaction macros in specfile installation sections [RH BZ 850053].
  - Fix the service file to use /usr/sbin/ rather than /sbin/.
  - Turn on RELRO and PIE build hardening in RPM builds.


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.3.62-1
changelog:
  - use systemctl preset, not systemctl enable
  - fix typo in manpage
  - partly support socket activated services


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.4-1
changelog:
  - ntsysv: show systemd services and sockets
  - fix combination --type xinetd --list service
  - leveldb: restore selinux context for xinetd conf files
  - alternatives: remove unused variable
  - alternatives: warn if the target is not a symlink
  - spec: add link to git
  - lets simplify version


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.5-1
changelog:
  - add systemd-sysv-install alias
  - don't create symlinks if they already exist
  - fix wrongly behaving LDFLAGS


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.6-1
changelog:
  - systemd-sysv-install: don't play ping-pong with systemctl
  - ntsysv: add description to systemd services
  - ntsysv: skip templates
  - Makefile: fix typo


author: Lukáš Nykrýn <lnykryn@redhat.com> - 1.8-1
changelog:
  - alternatives: introduce --keep-missing
  - alternatives: allow family in --set and display it in --config
  - chkconfig: use isXinetdEnabled instead of isOn
  - leveldb: trim leading whitespaces from systemctl
  - leveldb: suppress error messages when selinux is turned off
  - alternatives: always recreate symlinks when the alternative is updated
  - test-alternatives: basic tests for slave links
  - chkconfig: resetpriorities should work on all runlevels


author: Lukas Nykryn <lnykryn@redhat.com> - 1.11-1
changelog:
  - Add tests for --add/remove-slave and use beakerlib
  - alternatives: add-slave and remove-slave
  - leveldb: don't crash on long names
  - alternatives: prettier --list output


author: Jan Macku <jamacku@redhat.com> - 1.15-1
changelog:
  - spec: sync specfile with Fedora
  - makefile: Use rpmdev-bumpspec's legacy date option
  - Add feature to generate specfile entry, commit and archive


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Jan Macku <jamacku@redhat.com> - 1.19.2-1
changelog:
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - spec: Replace not working awk command with sed (#63)


author: EL Errata <el-errata_ww@oracle.com> - 1.19.2-1.0.1
changelog:
  - Replaced bugzilla.oracle.com references [Orabug: 35475734]
  - Remove upstream references [OLDIS-4405]


author: Miroslav Lichvar <mlichvar@redhat.com> 3.2-2
changelog:
  - fix chronyc getting stuck in infinite loop after clock step
  - don't allow packaging without vendor zone
  - suggest ntp-refclock
  - remove obsolete dependency
  - update description


author: Miroslav Lichvar <mlichvar@redhat.com> 3.3-2
changelog:
  - move pidfile to /var/run/chrony to allow chronyd to remove it on exit
    (#1584585)
  - avoid blocking in getrandom system call (#1592425)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.3-3
changelog:
  - fix PIDFile in local chronyd.service on upgrades from chrony < 3.3-2
    (#1614800)
  - add workaround for late reload of unit file (#1614751)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.5-1
changelog:
  - update to 3.5 (#1685469 #1677218)
  - fix shellcheck warnings in helper scripts (#1711948)
  - update ntp2chrony script


author: Miroslav Lichvar <mlichvar@redhat.com> 4.1-1
changelog:
  - update to 4.1 (#1895003 #1847853 #1929157)
  - add NetworkManager dispatcher script to add servers from DHCP even without
    dhclient (#1933139)
  - restrict permissions of /var/lib/chrony and /var/log/chrony (#1939295)
  - reset chrony-helper state after stopping chronyd (#1971697)
  - add gcc-c++ and make to build requirements
  - move default paths in /var/run to /run


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (#2062356)
  - fix chrony-helper to delete sources by their original name (#2061660)
  - update ntp2chrony script (#2018045 #2063766)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.5-2.el8_10
changelog:
  - fix crash on reload command during start (RHEL-59112)
  - enable AES-CMAC support using gnutls (RHEL-59032)


author: EL Errata <el-errata_ww@oracle.com> - 4.5-2.0.1
changelog:
  - Fixed chrony starting before network-online service [Orabug: 36299189]
  - Change chrony.conf to use pool.ntp.org [Orabug: 28627760]


author: David King <amigadave@amigadave.com> - 0.16-1
changelog:
  - Update to 0.16 (#1144863)
  - Remove clean section and BuildRoot tag
  - Update URL and Sourc0
  - Use license macro for COPYING
  - Use parallel make flags
  - Preserve timestamps during install


author: Jeff Layton <jlayton@redhat.com> - 6.7-5
changelog:
  - more updates, switch to rst for manpages
  - update mount.cifs manpage to describe defaults better (BZ#1474539)


author: Sachin Prabhu <sprabhu@redhat.com> - 6.8-3
changelog:
  - Add manual gating tests
  - docs: cleanup rst formating
  - mount.cifs.rst: document new (no)handlecache mount option
  - manpage: update mount.cifs manpage with info about rdma option
  - checkopts: add python script to cross check mount options
  - mount.cifs.rst: document missing options, correct wrong ones
  - checkopts: report duplicated options in man page
  - mount.cifs.rst: more cleanups
  - mount.cifs.rst: document vers=3 mount option
  - mount.cifs.rst: document vers=3.02 mount option
  - cifs: Allow DNS resolver key to expire
  - mount.cifs: be more verbose and helpful regarding mount errors
  - Update mount.cifs with vers=default mount option and SMBv3.0.2
  - mount.cifs.rst: update vers=3.1.1 option description
  - getcifsacl: Do not go to parse_sec_desc if getxattr fails.
  - getcifsacl: Improve help usage and add -h option.
  - setcifsacl: fix adding ACE when owner sid in unexpected location
  - cifs.upcall: fix a compiler warning
  - mount.cifs Add various missing parms from the help text
  - mount.cifs: add more options to help message
  - mount.cifs: detect GMT format of snapshot version
  - Update man page for mount.cifs to add new options
  - mount.cifs.rst: mention kernel version for snapshots
  - Fix authors and maintainers


author: Martin Pitt <mpitt@redhat.com> - 177-1
changelog:
  - Support centrally-managed SSH known hosts rhbz#1622835
  - Drop support for Internet Explorer rhbz#1619993


author: Martin Pitt <mpitt@redhat.com> - 178-1
changelog:
  - Fix remote unauthenticated crash with crafted URLs rhbz#1627634
  - Fix large downloads stalling after a few megabytes rhbz#1626847
  - Recommend system-logos to ensure correct branding rhbz#1626066


author: Martin Pitt <mpitt@redhat.com> - 179-1
changelog:
  - Various crash fixes (coverity) rhbz#1635182
  - Updates for React 16 (for future backports) rhbz#1635182
  - Fix building with platform-python rhbz#1631174


author: Martin Pitt <mpitt@redhat.com> - 183-1
changelog:
  - Kernel Dump: Support non-local targets rhbz#1651691
  - Fix firewall page oops when not selecting anything rhbz#1652207
  - Fix changing user's own password rhbz#1652304
  - Never send Content-Length with chunked encoding rhbz#1652511
  - Include "Web Console" in package description rhbz#1653617
  - Respect SSH configuration


author: Martin Pitt <mpitt@redhat.com> - 184-1
changelog:
  - Integration of Cockpit pages on the desktop rhbz#1651264
  - Fix crash in Simplified Chinese locale rhbz#1653544
  - Update screenshots in AppStream data rhbz#1656982
  - Update translations from Zanata rhbz#1608292
  - Improve login error message if cockpit-system is not installed rhbz#1650467
  - Mark deleted cookie as HttpOnly to pacify security scanners rhbz#1656441


author: Edward Leung <edward.leung@oracle.com> - 185-2.0.1
changelog:
  - Turn off display of subscriptions menu item in GUI
  - Drop subscription-manager requirement since we do not ship it (tianyue.lan@oracle.com)
  - Remove Red Hat references.


author: Martin Pitt <mpitt@redhat.com> - 189-1
changelog:
  - Add search box to Services page rhbz#1657752
  - Connect to firewalld as superuser rhbz#1664158
  - Fix log filtering rhbz#1665421
  - Show error message for invalid IdM domain names rhbz#1659333
  - Changing passwords as root does not ask for current password rhbz#1666005


author: Martin Pitt <mpitt@redhat.com> - 191-1
changelog:
  - System: Enable/disable SMT rhbz#1678956
  - Logs: Add service filtering rhbz#1657756
  - Networking: Add custom firewall ports rhbz#1660400


author: Martin Pitt <mpitt@redhat.com> - 196-1
changelog:
  - Networking: Add Firewall Zones configuration rhbz#1678473
  - Fix ssh login to unknown hosts rhbz#1701174
  - Fix login when ~/.bashrc prints to stdout rhbz#1716223
  - Much better On/Off buttons, also avoid text overlap rhbz#1677593


author: Martin Pitt <mpitt@redhat.com> - 196.1-1
changelog:
  - networkmanager: Show correct IPv6 route metric in dialog (rhbz#1719575)
  - networkmanager: Ensure that endianess is always set (rhbz#1728213)
  - Update translations (rhbz#1689977)


author: Matej Marusak <mmmarusak@redhat.com> - 209-1
changelog:
  - New overview design
  - Session timeouts
  - Banners on login screen
  - Client certificate authentication
  - Dropped support for pam_rhost


author: Martin Pitt <mpitt@redhat.com> - 210-1
changelog:
  - Overview: Add CPU utilization to usage card
  - Dashboard: Support SSH identity unlocking when adding new machines
  - SElinux: Introduce an Ansible automation script
  - Translation updates (partially fixes rhbz#1754958)


author: Martin Pitt <mpitt@redhat.com> - 211-1
changelog:
  - Fix HTTPS requests > 4 KiB (rhbz#1785509)
  - Better support for various TLS certificate formats
  - Switch from Zanata to Weblate
  - Overview layout optimizations
  - Translation updates (rhbz#1754958)


author: Martin Pitt <mpitt@redhat.com> - 211.1-1
changelog:
  - system: Fix graph layout across all browsers (rhbz#1792623)
  - websocket: Fix unaligned access in send_prefixed_message_rfc6455()


author: Matej Marusak <mmarusak@redhat.com> - 211.2-1
changelog:
  - Users: Fix reboot warnings of changed roles
  - Translation updates (rhbz#1754958)
  - Fix CPU mitigations to recognize kernel options at the beginning of line


author: Matej Marusak <mmarusak@redhat.com> - 220-1
changelog:
  - New navigation with integrated switching of hosts
  - Logs: Inline help for filtering
  - Fix cockpit-system AppStream dependency (rhbz#1838003)


author: Martin Pitt <mpitt@redhat.com> - 221-1
changelog:
  - Support for Cross-Origin-Resource-Policy
  - Accounts: Some buttons are hidden when access is limited
  - Developers: Importing "base1/patternfly.css" is deprecated
  - Translation updates (rhbz#1820538)


author: Martin Pitt <mpitt@redhat.com> - 221.1-1
changelog:
  - Put back missing base1/patternfly.css
  - Services: Don't offer 'Start Service' in Limited Access mode


author: Matej Marusak <mmarusak@redhat.com> - 222-1
changelog:
  - Logs: More flexible text filters
  - Services, Dashboard: Hide some buttons when access is limited
  - Webserver: Lock down cockpit.service privileges
  - Localization updates (rhbz#1820538)


author: Martin Pitt <mpitt@redhat.com> - 223-1
changelog:
  - Webserver: Standard-conformant lifetime of web server Certificate
  - Support certificate authentication against Active Directory
  - Fix cockpit-desktop privileges (rhbz#1841104)
  - Translation updates (rhbz#1820538)


author: Matej Marusak <mmarusak@redhat.com> - 224.2-1
changelog:
  - lib: Include current directory in FileAutoComplete option listing (rhbz#1866995)
  - lib: Make sure that the expandable part of table rows has unique key (rhbz#1865821)


author: Katerina Koukiou <kkoukiou@redht.com> - 233.1-1
changelog:
  - Non-admin users no longer see Cockpit in motd (rhbz#1872562)
  - Improved host editing
  - Replace system's graph page with a completely new USE method page
  - Logging of remote IP addresses
  - shell: Any page can be the shell
  - Accounts: Allow setting weak passwords (rhbz#1652390)
  - Terminal: Fix issue with prompt not returning when clicking reset button in disoconnected session (rhbz#1897430)


author: Martin Pitt <mpitt@redhat.com> - 235-1
changelog:
  - Login: Improved handling of SSH host keys
  - Overview: Editable motd
  - Adjust tests for sos 4.x to fix gating tests (rhbz#1895912)


author: Martin Pitt <mpitt@redhat.com> - 238-1
changelog:
  - Web server: Preserve permissions of administrator-provided certificates
  - System: Performance page shows busiest CPU cores


author: Martin Pitt <mpitt@redhat.com> - 238.1-1
changelog:
  - Several UI alignment fixes
  - Re-drop unit tests from built packages
  - Metrics: Don't show swap column when no swap is present
  - Metrics: Don't show duplicate events


author: EL Errata <el-errata_ww@oracle.com> - 238.2-1.0.1
changelog:
  - Make documentation links point to Oracle Linux information [Orabug: 30271413] [Orabug: 32013095]
  - Fix rendering of hwinfo page on systems with some empty memory slots [Orabug: 32826970]


author: Matej Marusak <mmarusak@redhat.com> - 242-1
changelog:
  - Network: Fix device connection button (rhbz#1946874)
  - Network: Fully show MAC dropdown in add bond dialog (rhbz#1946877)


author: Katerina Koukiou <kkoukiou@redhat.com> - 244.1-1
changelog:
  - Shell: sudo is invoked only when explicitly requested
  - Dynamically manage motd/issue symlinks in package scripts (rhbz#1876848)


author: Martin Pitt <mpitt@redhat.com> - 250-1
changelog:
  - Shell: Improve admin switcher and session menu
  - Update Insights links to point to console.redhat.com (rhbz#1984841)


author: EL Errata <el-errata_ww@oracle.com> - 251.1-1.0.1
changelog:
  - Update documentation links [Orabug: 32795691]
  - Make documentation links point to Oracle Linux information [Orabug: 30271413] [Orabug: 32013095]
  - Fix rendering of hwinfo page on systems with some empty memory slots [Orabug: 32826970]


author: Martin Pitt <mpitt@redhat.com> - 255-1
changelog:
  - Restrict frame embedding to same origin (rhbz#1984902, CVE-2021-3660)
  - kdump: Show "Directory" field for NFS mounts (rbhz#2004041)


author: Katerina Koukiou <kkoukiou@redhat.com> - 257-1
changelog:
  - Support for reading TLS certificates with any permissions
  - cockpit-ws no longer supports merged certificates
  - Services: Show user-owned systemd units (rhbz#1792270)


author: Martin Pitt <mpitt@redhat.com> - 260-1
changelog:
  - Certificate login validation (rhbz#1992620, CVE-2021-3698)
  - Client: Show previously used hosts
  - Client: Support port specification
  - bridge: Warning on missing cockpit-system package


author: Martin Pitt <mpitt@redhat.com> - 263-1
changelog:
  - Overview: Show scheduled shutdowns
  - Networking: Add firewall service description
  - Shell: Fix browser history


author: Martin Pitt <mpitt@redhat.com> - 264-1
changelog:
  - Metrics: Improve layout on small resolutions
   - Networking: Fix checkpoint handling and IP settings dialog (rhbz#2056386)
   - Services: Show error message instead of eternal "Loading..." state
   - Accounts: Add override button to confirm weak password
   - Accounts: Fix parsing of "last login" date


author: EL Errata <el-errata_ww@oracle.com> - 264.1-1.0.1
changelog:
  - Remove duplicate reference to server in cockpit [Orabug: 33862832]
  - Update documentation links [Orabug: 32795691]
  - Make documentation links point to Oracle Linux information [Orabug: 30271413] [Orabug: 32013095]
  - Fix rendering of hwinfo page on systems with some empty memory slots [Orabug: 32826970]


author: Martin Pitt <mpitt@redhat.com> - 264.2-1
changelog:
  - login: Use valid selectors when testing for :is() / :where() support (rhbz#2129055)
  - Don't run sudo without explicit request (rhbz#2129058)


author: Matej Marusak <mmarusak@redhat.com> - 269-1
changelog:
  - Kdump: Show journal when service fails (rhbz#2062297)
   - Parse /proc/cpuinfo on s390x (rhbz#2069552)
   - bridge: Default "init-superuser" to "none" (rhbz#2071938)
   - Animate new rows in lists
   - Crypto policies support
   - Metrics: Show busiest CPU core
   - Metrics: Show Podman containers in top CPU and memory lists
   - Standardize on SI-based units for data sizes and rates


author: Martin Pitt <mpitt@redhat.com> - 270-1
changelog:
  - Services: User-created timer deletion
   - System Diagnostics: Working with diagnostic reports has been improved


author: Martin Pitt <mpitt@redhat.com> - 273-1
changelog:
  - Metrics: Display CPU temperature
   - Networking: Suggest netmask and gateway addresses
   - Software Updates: Optionally reboot after updating
   - cockpit/ws container: Support modern SSH keys


author: EL Errata <el-errata_ww@oracle.com> - 276.1-1.0.1
changelog:
  - Update documentation links [Orabug: 34706402]
  - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
  - Remove duplicate reference to server in cockpit [Orabug: 33862832]
  - Update documentation links [Orabug: 32795691]
  - Make documentation links point to Oracle Linux information [Orabug: 30271413] [Orabug: 32013095]
  - Fix rendering of hwinfo page on systems with some empty memory slots [Orabug: 32826970]


author: Katerina Koukiou <kkoukiou@redhat.com> - 282-1
changelog:
  - Add right-to-left language support
  - Accounts: Redesign and include groups
  - Dark theme switcher
  - tools: Disallow root login by default


author: Martin Pitt <mpitt@redhat.com> - 286.1-1
changelog:
  - Users: Fix broken alignment of the first column in groups table
  - Translation updates (rhbz#2139715)


author: Packit <hello@packit.dev> - 297-1
changelog:
  - users: allow administrators to change the user shell
  - Enable Python bridge on Fedora 38 and CentOS/RHEL 9


author: Packit <hello@packit.dev> - 299-1
changelog:
  - Kdump: Show location of kdump to verify the successful configuration test
  - Storage: Support for no-overprovisioning with Stratis
  - Storage: Cockpit can now add caches to encrypted Stratis pools


author: Packit <hello@packit.dev> - 300-1
changelog:
  - Celebrating the Nürnberg life release!
  - Storage: Support for growing block devices of a Stratis pool


author: Darren Archibald <darren.archibald@oracle.com> - 310.5-1.0.1
changelog:
  - Fixed cockpit_ws_t selinux issue for tmpfs [Orabug: 36013589]
  - Move update-motd out of cockpit_ws_t context [Orabug: 36013589]
  - Update documentation links [Orabug: 34706402]
  - Drop subscription-manager-cockpit requirement for ol [Orabug: 34681110]
  - Remove duplicate reference to server in cockpit [Orabug: 33862832]
  - Update documentation links [Orabug: 32795691]
  - Make documentation links point to Oracle Linux information [Orabug: 30271413] [Orabug: 32013095]
  - Fix rendering of hwinfo page on systems with some empty memory slots [Orabug: 32826970]


author: Tomas Matus <tmatus@redhat.com> - 310.6-1
changelog:
  - networking: Fix renaming of bridges and other groups (RHEL-131249)
  - networkmanager: use connection.type as a fallback (RHEL-131244)


author: Kamil Dudka <kdudka@redhat.com> - 8.30-5
changelog:
  - sync: fix open() fallback bug (#1602463)
  - fix implicit declaration warning in coreutils-getgrouplist.patch (#1602463)


author: Kamil Dudka <kdudka@redhat.com> - 8.30-8
changelog:
  - df --local: recognize afs, auristorfs, and smb3 as remote fs (#1798030)
  - fix formatting of sha512sum(1) man page (#1688744)


author: Kamil Dudka <kdudka@redhat.com> - 8.30-9
changelog:
  - split: fix --number=K/N to output correct part of file (#1921246)
  - rm: do not skip files upon failure to remove an empty dir (#1905481)
  - use statx instead of stat when available (#1760300)


author: EL Errata <el-errata_ww@oracle.com> - 8.30-12.0.1
changelog:
  - clean up empty file if cp is failed [Orabug 15973168]
  - df --local: recognize afs, auristorfs, and smb3 as remote fs (#1798030)
  - fix formatting of sha512sum(1) man page (#1688744)


author: Kamil Dudka <kdudka@redhat.com> - 8.30-13
changelog:
  - ls, stat: avoid triggering automounts (#2044981)
  - make `df --direct` work again (#2058686)
  - doc: improve description of the --kibibytes option of ls (#1527391)


author: Kamil Dudka <kdudka@redhat.com> - 8.29-7
changelog:
  - add provides to coreutils-single to make it a drop-in replacement (#1572693)
  - reintroduce very old Provides (mktemp, sh-utils, textwrap, fileutils, stat)


author: Kamil Dudka <kdudka@redhat.com> - 8.29-8
changelog:
  - ls: increase the allowed abmon width from 5 to 12 (#1577872)
  - date, ls: pick strftime fixes from glibc to improve locale support (#1577872)


author: Ondrej Vasik <ovasik@redhat.com> - 2.11-36
changelog:
  - in 2015, file name in CVE-2014-9112 shows in a bit different timestamp
    format (fix FTBFS, #1239416)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.9.6-8
changelog:
  - Python 2 binary package renamed to python2-cracklib
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: John W. Linville <linville@redhat.com> - 3.18_2016.02.08-1
changelog:
  - Update wireless-regdb to version 2016.02.08
  - Do not treat unused-const-variable warnings as errors


author: Stanislaw Gruszka <sgruszka@redhat.com> - 3.18_2018.05.31-2
changelog:
  - Update wireless-regdb to 2018.05.31
  - Remove python2 dependency
  - Use sforshee signed reulatory.bin (required by modern kernels)


author: Ondřej Pohořelský <opohorel@redhat.com> - 1.11-17.20190603git
changelog:
  - update to the latest release
  - add sed require
  - remove %clean section
  - remove obsolete Group tag
  - fix upstream URL
  - Resolves: rhbz#1696449, rhbz#1703982


author: Tomáš Mráz <tmraz@redhat.com> - 20180925-1.git3ce363a
changelog:
  - Use Recommends instead of Requires for grubby
  - Revert setting of HostKeyAlgorithms for ssh client for now


author: Tomáš Mráz <tmraz@redhat.com> - 20181026-1.gitcc78cb7
changelog:
  - Fix regression in discovery of additional configuration
  - NSS: add DSA keyword to LEGACY policy
  - GnuTLS: Add 3DES and RC4 to LEGACY policy


author: Tomáš Mráz <tmraz@redhat.com> - 20181122-1.git70769d9
changelog:
  - update-crypto-policies: fix error on multiple matches in local.d
  - Print warning when update-crypto-policies --set is used in the FIPS mode
  - Java: Add 3DES and RC4 to legacy algorithms in LEGACY policy
  - OpenSSL: Properly disable non AEAD and AES128 ciphersuites in FUTURE
  - libreswan: Add chacha20_poly1305 to all policies and drop ikev1 from LEGACY


author: Tomáš Mráz <tmraz@redhat.com> - 20181217-1.git9a35207
changelog:
  - update-crypto-policies: Fix endless loop
  - update-crypto-policies: Add warning about the need of system restart
  - fips-mode-setup: Use grub2-editenv to modify the kernelopts for BLS


author: Tomáš Mráz <tmraz@redhat.com> - 20190613-1.git21ffdc8
changelog:
  - openssh: add missing curve25519-sha256 to the key exchange list
  - openssh: fix RSA certificate support
  - fips-mode-setup: drop the kernel boot option if there is no separate
    /boot drive
  - fips-finish-install: regenerate all initramdisks
  - add libssh configuration backend


author: Tomáš Mráz <tmraz@redhat.com> - 20190613-2.git21ffdc8
changelog:
  - fix ownership of policy directories
  - nss: enable X25519 in appropriate policies and conflict with old nss
  - openssh: conflict with old incompatible openssh version


author: Tomáš Mráz <tmraz@redhat.com> - 20191022-1.gite17cc3a
changelog:
  - custom crypto policies support
  - update-crypto-policies: fix handling of list operations in policy modules
  - update-crypto-policies: fix updating of the current policy marker
  - fips-mode-setup: fixes related to containers and non-root execution
  - make it possible to use fips-mode-setup --check without dracut
  - add .config symlinks so a crypto policy can be set with read-only
    /etc by bind-mounting /usr/share/crypto-policies/<policy> to
    /etc/crypto-policies/back-ends
  - run the update-crypto-policies in posttrans


author: Tomáš Mráz <tmraz@redhat.com> - 20200527-2.git63fc906
changelog:
  - explicitly enable DHE-DSS in gnutls config if enabled in policy
  - use grubby with --update-kernel=ALL to avoid breaking kernelopts
  - OSPP subpolicy: Allow GCM for SSH protocol
  - openssh: Support newly standardized ECDHE-GSS and DHE-GSS key exchanges
  - if the policy in FIPS mode is not a FIPS policy print a message
  - openssl: Add SignatureAlgorithms support
  - custom crypto policies: enable completely overriding contents of the list
    value
  - added ECDHE-ONLY.pmod policy module example
  - openssh: make LEGACY policy to prefer strong public key algorithms
  - various python code cleanups
  - update-crypto-policies: dump the current policy to
    /etc/crypto-policies/state/CURRENT.pol
  - split scripts into their own subpackage


author: Tomáš Mráz <tmraz@redhat.com> - 20200610-1.git0ac8b1f
changelog:
  - fallback to FIPS policy instead of the default-config in FIPS mode
  - java: Document properly how to override the crypto policy
  - krb5: No support for 3des anymore
  - reorder the signature algorithms to follow the order in default openssl list


author: Alexander Sosedkin <asosedkin@redhat.com> - 20210617-1.gitc776d3e
changelog:
  - implement scoped policies, e.g., cipher@SSH = ... (#1960266)
  - implement algorithm globbing, e.g., cipher@SSH = -*-CBC
  - deprecate derived properties:
    tls_cipher, ssh_cipher, ssh_group, ike_protocol
  - deprecate sha1_in_dnssec property
  - deprecate unscoped form of protocol property
  - update documentation
  - expand upstream test coverage
  - openssl: set MinProtocol / MaxProtocol separately for TLS and DTLS (#1946522)
  - support AES-192 ciphers in custom policies for non-TLS scenarios (#1876846)
  - stop claiming Camellia is disabled (#1925104)
  - disable CBC ciphers in FUTURE for everything but Kerberos (#1933016)
  - drop SHA224 from signature algorithms in FIPS:OSPP (#1934755)
  - condition ecdh-sha2-nistp384 on SECP384R1


author: Alexander Sosedkin <asosedkin@redhat.com> - 20211116-1.gitae470d6
changelog:
  - OSPP: relax -ECDSA-SHA2-512, -FFDHE-*
  - fips-mode-setup, fips-finish-install: call zipl more often (s390x-specific)
  - libssh: enable diffie-hellman-group14-sha256 support
  - openssl: fix disabling ChaCha20


author: Alexander Sosedkin <asosedkin@redhat.com> - 20221215-1.gitece0092
changelog:
  - bind: expand the list of disableable algorithms
  - tests/java: fix java.security.disableSystemPropertiesFile=true
  - stop accidentally creating /etc/crypto-policies/back-ends/.config symlink


author: Alexander Sosedkin <asosedkin@redhat.com> - 20230731-1.git3177e06
changelog:
  - krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones
  - krb5: fix policy generator to account for macs
  - docs: replace `FIPS 140-2` with just `FIPS 140`


author: Ondrej Kozina <okozina@redhat.com> - 2.0.4-1
changelog:
  - Update to cryptsetup 2.0.4.
  - patch: Add RHEL system library paths in configure.
  - patch: Increase default LUKS2 header size to 8 MiBs.
  - patch: update tests to be compatible with larger headers.
  - Set default format to LUKS2.
  - Cleanup changelog.
  - Resolves: #1564540 #1595257 #1595266 #1595881 #1600164


author: Ondrej Kozina <okozina@redhat.com> - 2.0.4-2
changelog:
  - patch: fix device alignment bug when processing hinted
    value by device topology info.
  - Resolves: #1614219


author: Ondrej Kozina <okozina@redhat.com> - 2.0.6-1
changelog:
  - Update to cryptsetup 2.0.6
  - Enables all supported metadata sizes in LUKS2 validation code.
  - Resolves: #1653383


author: Ondrej Kozina <okozina@redhat.com> - 2.2.0-2
changelog:
  - patch: Fix mapped segments overflow on 32bit architectures.
  - patch: Take optimal io size in account with LUKS2 reencryption.
  - Resolves: #1742815 #1746532


author: Ondrej Kozina <okozina@redhat.com> - 2.2.2-1
changelog:
  - Update to cryptsetup 2.2.2
  - LUKS2 reencryption honors activation flags (one time and persistent).
  - LUKS2 reencryption works also without volume keys put in kernel
    keyring service.
  - Resolves: #1757783 #1750680 #1753597 #1743399

  - Resolves: #1742815 #1746532


author: Ondrej Kozina <okozina@redhat.com> - 2.2.2-1
changelog:
  - Update to cryptsetup 2.2.2
  - LUKS2 reencryption honors activation flags (one time and persistent).
  - LUKS2 reencryption works also without volume keys put in kernel
    keyring service.
  - Resolves: #1757783 #1750680 #1753597 #1743399


author: Ondrej Kozina <okozina@redhat.com> - 2.3.3-2
changelog:
  - patch: Fix possible memory corruption in LUKS2 validation
  	 code in 32bit library.
  - Resolves: #1872294


author: Ondrej Kozina <okozina@redhat.com> - 2.3.3-4
changelog:
  - patch: Fix reencryption for custom devices with data segments
    set to use cipher_null.
  - Resolves: #1927409


author: Ondrej Kozina <okozina@redhat.com> - 2.3.7-1
changelog:
  - update to cryptsetup 2.3.7
  - fixes CVE-2021-4122
  - patch: Fix suboptimal optimization in bundled argon2.
  - patch: Fix bogus memory allocation/device read with
           invalid LUKS2 headers
  - patch: Fix typo in luksRepair prompt.
  - Resolves: #2021815 #2022301 #2031859


author: Daniel Zatovic <dzatovic@redhat.com> - 2.3.7-4
changelog:
  - patch: Remove LUKS2 encryption data size restriction.
  - patch: Abort encryption when header and data devices are same.
  - Resolves: #2150254


author: Daniel Zatovic <dzatovic@redhat.com> - 2.3.7-6
changelog:
  - patch: Delegate FIPS mode detection to configured crypto backend
  - patch: Disallow use of internal kenrel crypto driver names in "capi"
  - patch: Also disallow active devices with internal kernel names
  - patch: Fix init_by_name to allow unknown cipher format in dm-crypt
  - patch: Fix reencryption to fail properly for unknown cipher
  - patch: Fix activation of LUKS2 with capi format cipher and kernel
  - Resolves: #2212772 #2193342


author: Andreas Schneider <asn@redhat.com> - 4.9.1-5
changelog:
  - resolves: #1644327 - Segfault if wrong 'passdb backend' is configured
  - resolves: #1647959 - Segfault in the debug system with hardended build


author: Andreas Schneider <asn@redhat.com> - 4.9.1-6
changelog:
  - resolves: #1642092 - Harden [homes] share export
  - resolves: #1648846 - Fix out of bound array access in ctdb
  - resolves: #1657266 - Fix tmp directory creation in /run


author: Andreas Schneider <asn@redhat.com> - 4.9.1-7
changelog:
  - resolves: #1658690 - Add smbc_setOptionProtocols()
  - resolves: #1658678 - Fix spoolss client operations against Windows


author: Andreas Schneider <asn@redhat.com> - 4.10.4-0
changelog:
  - related: #1638001 - Rebase to Samba version 4.10.4
  - resolves: #1597298 - Build Samba with python3
  - resolves: #1658558 - Add 'net ads leave --keep-account' option
  - resolves: #1669004 - Fix systemd status notifications
  - resolves: #1672167 - Fix printing cache timeout in debug output
  - resolves: #1696525 - Fix CVE-2019-3880


author: Andreas Schneider <asn@redhat.com> - 4.10.4-1
changelog:
  - resolves: #1712378 - Fix smbspool CUPS backend
  - resolves: #1696612 - Fix 'net ads join -U admin@parentdomain'


author: Andreas Schneider <asn@redhat.com> - 4.10.4-100
changelog:
  - resolves: #1760824 - Avoid overlinking with librt and libpthread
  - resolves: #1759236 - Fix forest trusts enumeration
  - resolves: #1761719 - Fix CUPS username/password authentication with smbspool


author: Andreas Schneider <asn@redhat.com> - 4.11.2-4
changelog:
  - related: #1754409 - Add patch to avoid overlinking with libnsl and libsocket
  - related: #1754409 - Fix permissions for pidl
  - related: #1754409 - Fix logrotate script
  - related: #1754409 - Add missing README files


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.11.2-10
changelog:
  - resolves: #1790353 - Fix access check in DsRGetForestTrustInformation
  - resolves: #1791209 - Fix CVE-2019-14907


author: Andreas Schneider <asn@redhat.com> - 4.11.2-12
changelog:
  - related: #1781232 - Improve debug output of smbclient
  - resolves: #1794461 - Do not return bogus inode numbers in
                         cli_qpathinfo2()/cli_qpathinfo3() for SMB1
  - resolves: #1794442 - Fix segfault in smbd_do_qfilepathinfo()


author: Sushmita Bhattacharya <sushmita.bhattacharya@oracle.com> - 4.11.2-13.0.1
changelog:
  - Fix issues with join using netbios name [Orabug: 31546649]
  - related : samba bug #14116 - Join using netbios name and realm instead of machine fqdn
  - resolves: samba bug #14396 - Add msDS-AdditionalDnsHostName to the keytab and add net-ads-join dnshostname option
  - resolves: samba bug #14406 - Fix adding msDS-AdditionalDnsHostName to keytab with Windows DC


author: Andreas Schneider <asn@redhat.com> - 4.12.3-1
changelog:
  - resolves: #1666737 - Add a new smbc_readdirplus2() function to libsmbclient
  - resolves: #1842844 - Fix GnuTLS priority list for TLS connections


author: Isaac Boukris <iboukris@redhat.com> - 4.12.3-4
changelog:
  - resolves: #1850980 - Add "additional dns hostname" to keytab
  - resolves: #1850981 - Add net-ads-join dnshostname=fqdn option


author: Andreas Schneider <asn@redhat.com> - 4.12.3-5
changelog:
  - resolves: #1823612 - Fix segfault in 'net ads dns gethostbyname'
  - resolves: #1792553 - Fix 'net ads join createcomputer=OU'


author: Andreas Schneider <asn@redhat.com> - 4.12.3-7
changelog:
  - resolves: #1855711 - Fix 'require_membership_of' documentation in
                         pam_winbind manpage


author: Andreas Schneider <asn@redhat.com> - 4.12.3-9
changelog:
  - related: #1817557 - Move DECRPC mdssvc data files to correct package
  - resolves: #1856676 - Fix lookuprids in winbind


author: Andreas Schneider <asn@redhat.com> - 4.13.2-1
changelog:
  - resolves: #1878109 - Rebase Samba to version 4.13.2
  - resolves: #1872833 - Add samba-winexe subpackage
  - resolves: #1891688 - Fix CVE-2020-14323
  - resolves: #1892633 - Fix CVE-2020-14318
  - resolves: #1892639 - Fix CVE-2020-14383
  - resolves: #1879835 - Fix CVE-2020-1472
  - resolves: #1888990 - Update smb.conf manpages to describe how to apply
                         config changes.
  - resolves: #1869702 - Fix %U substitution for 'valid users' option
  - resolves: #1818038 - Improve FIPS compliance


author: Andreas Schneider <asn@redhat.com> - 4.13.2-2
changelog:
  - related: #1869702 - Fix spoolss crash
  - resolves: #1896736 - Fix name lookups of FreeIPA users
  - resolves: #1899113 - Fix DFS links


author: Andreas Schneider <asn@redhat.com> - 4.13.3-3
changelog:
  - resolves: #1924615 - Fix a memcache bug when cache is full
  - resolves: #1924571 - Ensure that libwbclient has been updated before
                         restarting services


author: Andreas Schneider <asn@redhat.com> - 4.13.3-4
changelog:
  - resolves: #1964314 - Fix ldconfig warning about libsmbldap.so.2
  - resolves: #1964398 - Fix smbd trying to delete files with wrong permissions
  - resolves: #1969831 - Fix memory leak in RPC server


author: Andreas Schneider <asn@redhat.com> - 4.14.4-0
changelog:
  - related: rhbz#1944657 - Update to version 4.14.5
  - resolves: rhbz#1969787 - Fix memory leak in RPC server
  - resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm
  - resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions
  - resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands
  - resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags


author: Andreas Schneider <asn@redhat.com> - 4.14.4-1
changelog:
  - resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring
  - resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message


author: Andreas Schneider <asn@redhat.com> - 4.14.4-4
changelog:
  - resolves: rhbz#2021163
    Fix CVE-2016-2124
  - resolves: rhbz#2021167
    Fix CVE-2021-23192
  - resolves: rhbz#2021171
    Fix CVE-2020-25717


author: Andreas Schneider <asn@redhat.com> - 4.14.5-5
changelog:
  - resolves: rhbz#2021493 - Add missing PAC buffer types to krb5pac.idl
  - related: rbhz#2021171 - Fix regression with 'allow trusted domains = no'


author: Andreas Schneider <asn@redhat.com> - 4.14.5-9
changelog:
  - resolves: rhbz#2046174 - Fix username map script regression of CVE-2020-25717
  - resolves: rhbz#2046160 - Fix possible segfault while joining a domain
  - resolves: rhbz#2046152 - Fix CVE-2021-44142


author: Andreas Schneider <asn@redhat.com> - 4.14.4-2
changelog:
  - resolves: rhbz#1944657 - Update to version 4.14.4
  - resolves: rhbz#1949445 - Fix CVE-2021-20254
  - resolves: rhbz#1947945 - Fix libsmbldap.so.2 not being a symbolic link
  - resolves: rhbz#1908506 - Fix creating the gencache user directory
  - resolves: rhbz#1901029 - Build the vfs_io_uring module


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-0
changelog:
  - Update to Samba 4.15.5
  - related: rhbz#2013596 - Rebase Samba to the the latest 4.15.x release
  - resolves: rhbz#2046127 - Fix CVE-2021-44141
  - resolves: rhbz#2046153 - Fix CVE-2021-44142
  - resolves: rhbz#2044404 - Printing no longer works on Windows 7
  - resolves: rhbz#2043154 - Fix systemd notifications
  - resolves: rhbz#2049602 - Disable NTLMSSP for ldap client connections (e.g. libads)


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-1
changelog:
  - resolves: #1995849 - [RFE] Change change password change prompt phrasing
  - resolves: #2029417 - virusfilter_vfs_openat: Not scanned: Directory or special file


author: Andreas Schneider <asn@redhat.com> - 4.15.5-5
changelog:
  - resolves: rhbz#2064325 - Fix 'create krb5 conf = yes` when a KDC has a
                             single IP address.


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-8
changelog:
  - resolves: rhbz#2079303 - Fix username map for unix groups
  - resolves: rhbz#2079299 - PAM Kerberos authentication fails with a clock skew error
  - resolves: rhbz#2079304 - Fix UPNs handling in lookup_name*() calls


author: EL Errata <el-errata_ww@oracle.com> - 4.15.5-10.0.1
changelog:
  - Gluster volumes not accessible via Samba due to missing samba-vfs-glusterfs
    in OL8 [Orabug: 30205755]


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.2-1
changelog:
  - resolves: rhbz#2013596 - Rebase to version 4.15.2
  - resolves: rhbz#1999294 - Remove noisy error message in winbindd
  - resolves: rhbz#1958881 - Don't require winbind being online for krb5 auth
                             with one-way trusts
  - resolves: rhbz#2019461 - Fix deleting directories with dangling symlinks


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.3-1
changelog:
  - related: rhbz#2013596 - Rebase to version 4.15.3
  - resolves: rhbz#2028029 - Fix possible null pointer dereference in winbind
  - resolves: rhbz#1912549 - Winexe: Kerberos Auth is respected via --use-kerberos=desired


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.4-0
changelog:
  - Update to Samba 4.15.4
  - related: rhbz#2013596 - Rebase Samba to the the latest 4.15.x release
  - resolves: rhbz#2039153 - Fix CVE-2021-20316
  - resolves: rhbz#1912549 - Winexe: Kerberos flag not invoking Kerberos Auth
  - resolves: rhbz#2039157 - Fix CVE-2021-43566
  - resolves: rhbz#2038148 - Failed to authenticate users after upgrade samba package to release samba-4.14.5-7
  - resolves: rhbz#2035528 - [smb] Segmentation fault when joining the domain
  - resolves: rhbz#2038796 - filename_convert_internal: open_pathref_fsp [xxx] failed: NT_STATUS_ACCESS_DENIED


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-6
changelog:
  - resolves: rhbz#2059151 - Fix username map for unix groups
  - resolves: rhbz#2065212 - Fix 'create krb5 conf = yes` when a KDC has a single IP address.


author: Pavel Filipenský <pfilipen@redhat.com> - 4.16.3-0
changelog:
  - related: rhbz#2077468 - Rebase Samba to 4.16.3
  - resolves: rhbz#2106672 - The pcap background queue process should not be stopped
  - resolves: rhbz#2106263 - Fix crash in rpcd_classic
  - resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name


author: Pavel Filipenský <pfilipen@redhat.com> - 4.16.4-5
changelog:
  - resolves: rhbz#2170394 - Fix share enum
  - resolves: rhbz#2170467 - Add to package ctdb dependency for package samba-winbind-clients
  - resolves: rhbz#2170468 - Add package dcerpc - fix winbind to retrieve user groups from AD
  - resolves: rhbz#2170469 - Create package samba-tools


author: EL Errata <el-errata_ww@oracle.com> - 4.16.4-6.0.1
changelog:
  - Fix memleak in _nss_winbind_initgroups_dyn [Orabug: 34727815]
  - Gluster volumes not accessible via Samba due to missing samba-vfs-glusterfs
    in OL8 [Orabug: 30205755]


author: Andreas Schneider <asn@redhat.com> - 4.17.2-1
changelog:
  - resolves: rhbz#2132051 - Update to version 4.17.2
  - resolves: rhbz#2126174 - Fix CVE-2022-1615
  - resolves: rhbz#2108487 - ctdb: Add dependency to samba-winbind-clients


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.2-2
changelog:
  - Always add epoch to samba_depver to fix osci.brew-build.rpmdeplint.functional
  - related: rhbz#2132051


author: Pavel Filipenský <pfilipenn@redhat.com> - 4.17.4-0
changelog:
  - related: rhbz#2132051 - Update to version 4.17.4
  - resolves: rhbz#2154370 - Fix CVE-2022-38023
  - resolves: rhbz#2142331 - Fix %U include directive for share listing (netshareenum)
  - resolves: rhbz#2148943 - Fix Winbind to retrieve user groups from Active Directory


author: Pavel Filipenský <pfilipen@redhat.com> - 4.17.5-2
changelog:
  - resolves: rhbz#2169339 - Fix winbind memory leak
  - resolves: rhbz#2152899 - Fix Samba shares not accessible issue


author: Darren Archibald <darren.archibald@oracle.com> - 4.17.5-3
changelog:
  - resolves: rhbz#2223601 - Fix trust relationship between workstation and DC
  - resolves: rhbz#2222895 - Fix CVE-2023-3347


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.4-1
changelog:
  - resolves: rhbz#2221594 - Fix broken symlink for libwbclient
  - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes`
  - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/
  - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.5-0
changelog:
  - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: Andreas Schneider <asn@redhat.com> - 4.18.6-1
changelog:
  - related: rhbz#2190417 - Update to version 4.18.6
  - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command


author: Mark Will <mark.will@oracle.com> - 4.18.6-2.0.1
changelog:
  - resolves: RHEL-11937
    Fix CVE-2023-3961 - smbd must check the pipename
  - resolves: RHEL-11937
    Fix CVE-2023-4091 - SMB clients can truncate files
  - resolves: RHEL-11937
    Fix CVE-2023-42669 - Remove rpcecho server


author: Pavel Filipenský <pfilipen@redhat.com> - 4.19.4-10
changelog:
  - resolves: RHEL-101902 - Fix DC discovery after Windows netlogon hardening - follow-up
  - resolves: RHEL-111318 - Fix winbind fork bomb in 'IPA with AD trust' environment


author: EL Errata <el-errata_ww@oracle.com> - 4.19.4-10.0.1
changelog:
  - s3: winbindd: winbindd_pam: fix leak in extract_pac_vrfy_sigs [Orabug: 36518285]
  - s3:passdb: Do not leak memory in pdb_tdb [Orabug: 36371377]
  - Gluster volumes not accessible via Samba due to missing samba-vfs-glusterfs in OL8 [Orabug: 30205755]


author: Pavel Filipenský <pfilipen@redhat.com> - 4.19.3-1
changelog:
  - resolves: RHEL-16483 - Update to version 4.19.3
  - resolves: RHEL-11361
              - Fix CVE-2023-3961 CVE-2023-4091 CVE-2023-42669
  - resolves: RHEL-2228  - Logging Format Enhancement
  - resolves: RHEL-1965  - Fix smbget issues with DFS shares
  - resolves: RHEL-2108  - Fix force user/group issues with 'allow trusted domains = yes'
  - resolves: RHEL-17122 - Fix memory corruption in libnss_winbind


author: Pavel Filipenský <pfilipen@redhat.com> - 4.19.4-2
changelog:
  - Fix error in PREIN scriptlet in rpm package samba-common
  - related: RHEL-16483 - Update to version 4.19.4


author: Darren Archibald <darren.archibald@oracle.com> - 4.19.4-3.0.1
changelog:
  - s3:passdb: Do not leak memory in pdb_tdb [Orabug: 36371377]
  - Gluster volumes not accessible via Samba due to missing samba-vfs-glusterfs
    in OL8 [Orabug: 30205755]


author: Akshata Konala <akshata.konala@oracle.com> - 4.19.4-4.0.1
changelog:
  - s3: winbindd: winbindd_pam: fix leak in extract_pac_vrfy_sigs [Orabug: 36518285]
  - s3:passdb: Do not leak memory in pdb_tdb [Orabug: 36371377]
  - Gluster volumes not accessible via Samba due to missing samba-vfs-glusterfs
    in OL8 [Orabug: 30205755]


author: Andreas Schneider <asn@redhat.com> - 4.9.0rc3-3
changelog:
  - related: #1614232 - Update to Samba 4.9.0rc3
  - resolves: #1554753 - Fix CVE-2018-1050
  - resolves: #1617912 - Fix CVE-2018-10858
  - resolves: #1617913 - Fix CVE-2018-10918
  - resolves: #1617914 - Fix CVE-2018-10919
  - resolves: #1617915 - Fix CVE-2018-1139
  - resolves: #1612522 - Manpage fixes


author: Andreas Schneider <asn@redhat.com> - 4.9.0rc5-3
changelog:
  - related: #1614232 - Update to Samba 4.9.0rc5
  - resolves: #1610909 - Re-enable glubsterfs vfs module
  - resolves: #1624170 - Build with -fstack-protectore-strong if available
  - resolves: #1602685 - Fixed issues found by covscan


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.9.1-3
changelog:
  - Temporarily remove smbtorture from samba-test due to Python 2 linkage
  - related: #1609661 - samba-test package cannot be installed due to unresolved dependencies


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-21
changelog:
  - 1602469 - fixed covscan issues
  - 1625899 - cups 2.2.6 lpr command fails against old cups 1.3.9 server
  - 1625913 - ssl options aren't initialized when no SSLOptions directive is set in /etc/cups/client.conf
  - 1618009 - Enabling cups.path causes high load when jobs are submitted to CUPS
  - 1630805 - Make cups systemd unit files more upstream-like


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-22
changelog:
  - 1622431 - Jobs with multiple files don't complete when backend fails
  - CVE-2018-4700 cups: Predictable session cookie breaks CSRF protection [rhel-8]


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-30
changelog:
  - 1774462 - CVE-2019-8675 - buffer overflow in SNMP and IPP, memory disclosure and DoS in scheduler
  - 1774463 - CVE-2019-8696


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-35
changelog:
  - 1825254 - CVE-2020-3898 cups: heap based buffer overflow in libcups's ppdFindOption() in ppd-mark.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-36
changelog:
  - 1838449 - ipp/socket backends connect to turned off device for eternity (contimeout is not applied)
  - 1689207 - Add failover backend
  - 1833516 - DirtyCleanInterval ignored if there are open client connections


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-39
changelog:
  - 1941437 - cupsd doesn't log job ids when logging into journal
  - 1782216 - Print queue is paused after ipp backend ends with CUPS_BACKEND_STOP
  - 1938384 - CUPS doesn't start if sssd starts after cupsd


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-40
changelog:
  - 1955964 - PreserveJobHistory doesn't work with seconds
  - 1927452 - CVE-2020-10001 cups: access to uninitialized buffer in ipp.c [rhel-8]


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-41
changelog:
  - 2006987 - Unauthenticated users can't move print jobs in Web UI
  - 2017919 - Setting 'MaxJobTime 0' does not set a job time to unlimited
  - 1726383 - "lpadmin -p <queue> -o cupsSNMPSupplies:false" doesn't work
  - 1982891 - Printing of banner before PCL file only prints banner
  - 2006591 - Trying to restart and hold a job doesn't work
  - 1811716 - lpr to non-existent printer reports incorrect error


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-46
changelog:
  - 2074684 - lp to a remote server takes a long time
  - 2074736 - CUPS is too chatty about "Removing document files." in debug mode


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-52
changelog:
  - 2217178 - Delays printing to lpd when reserved ports are exhausted
  - 2217283 - The command "cancel -x <job>" does not remove job files
  - 2217955 - Enlarge backlog queue for listen() in cupsd
  - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c
  - CVE-2023-32324 cups: heap buffer overflow may lead to DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-55
changelog:
  - RHEL-14933 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off"
  - RHEL-15309 cupsd fails to open cups-files.conf and the resulting error message is lost


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-56
changelog:
  - RHEL-10702 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents
  - RHEL-19200 Recommend new cups-filters subpackages with weak dep for better upgrade exp


author: Pavol Zacik <pzacik@redhat.com> - 1:2.2.6-60
changelog:
  - RHEL-40386 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-64
changelog:
  - RHEL-122666 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-64
changelog:
  - RHEL-122045 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-65
changelog:
  - RHEL-129729 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
  - RHEL-129720 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-6
changelog:
  - SASL password overflow via integer overflow (CVE-2018-16839)
  - fix use-after-free in handle close (CVE-2018-16840)
  - fix bad arethmetic when outputting warnings to stderr (CVE-2018-16842)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-10
changelog:
  - fix SMTP end-of-response out-of-bounds read (CVE-2019-3823)
  - fix NTLMv2 type-3 header stack buffer overflow (CVE-2019-3822)
  - fix NTLM type-2 out-of-bounds buffer read (CVE-2018-16890)
  - xattr: strip credentials from any URL that is stored (CVE-2018-20483)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-12
changelog:
  - double free due to subsequent call of realloc() (CVE-2019-5481)
  - fix heap buffer overflow in function tftp_receive_packet() (CVE-2019-5482)
  - fix TFTP receive buffer overflow (CVE-2019-5436)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-15
changelog:
  - do not crash when HTTPS_PROXY and NO_PROXY are used together (#1873327)
  - libcurl: wrong connect-only connection (CVE-2020-8231)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-18
changelog:
  - http: send payload when (proxy) authentication is done (#1918692)
  - curl: Inferior OCSP verification (CVE-2020-8286)
  - libcurl: FTP wildcard stack overflow (CVE-2020-8285)
  - curl: trusting FTP PASV responses (CVE-2020-8284)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-18.el8_4.1
changelog:
  - fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
  - disable metalink support to fix the following vulnerabilities
      CVE-2021-22923 - metalink download sends credentials
      CVE-2021-22922 - wrong content via metalink not discarded


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-18.el8_4.2
changelog:
  - fix STARTTLS protocol injection via MITM (CVE-2021-22947)
  - fix protocol downgrade required TLS bypass (CVE-2021-22946)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-19
changelog:
  - make `curl --head file://` work as expected (#1947493)
  - prevent automatic referer from leaking credentials (CVE-2021-22876)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-21
changelog:
  - fix TELNET stack contents disclosure again (CVE-2021-22925)
  - fix TELNET stack contents disclosure (CVE-2021-22898)
  - fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
  - disable metalink support to fix the following vulnerabilities
      CVE-2021-22923 - metalink download sends credentials
      CVE-2021-22922 - wrong content via metalink not discarded


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-22.el8_6.1
changelog:
  - fix credential leak on redirect (CVE-2022-27774)
  - fix auth/cookie leak on redirect (CVE-2022-27776)
  - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-22.el8_6.4
changelog:
  - fix HTTP compression denial of service (CVE-2022-32206)
  - fix FTP-KRB bad message verification (CVE-2022-32208)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-24
changelog:
  - fix too eager reuse of TLS and SSH connections (CVE-2022-27782)
  - fix invalid type in printf() argument detected by Coverity


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-25
changelog:
  - setopt: enable CURLOPT_SSH_KNOWNHOSTS and CURLOPT_SSH_KEYFUNCTION (#2063703)
  - fix HTTP compression denial of service (CVE-2022-32206)
  - fix FTP-KRB bad message verification (CVE-2022-32208)


author: Craig Guiller <craig.guiller@oracle.com> - 7.61.1-30.el8_8.3
changelog:
  - GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix host name wildcard checking (CVE-2023-28321)
  - rebuild certs with 2048-bit RSA keys


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-31
changelog:
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)


author: Alan Steinberg <alan.steinberg@oracle.com> - 7.61.1-33.5
changelog:
  - cap SFTP packet size sent (RHEL-5485)
  - when keyboard-interactive auth fails, try password (#2229800)
  - unify the upload/method handling (CVE-2023-28322)
  - fix cookie injection with none file (CVE-2023-38546)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Jacek Migacz <jmigacz@redhat.com> - 7.61.1-34
changelog:
  - when keyboard-interactive auth fails, try password (#2229800)
  - cap SFTP packet size sent (RHEL-5311)
  - unify the upload/method handling (CVE-2023-28322)
  - fix cookie injection with none file (CVE-2023-38546)
  - fix HTTP2 connection failure with HTTP2 framing layer (RHEL-5657)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Jacek Migacz <jmigacz@redhat.com> - 7.61.1-34.el8_10.3
changelog:
  - asyn-thread: create a socketpair to wait on (RHEL-34906)
  - fix crash, when talking to a NTLM proxy in FIPS mode (RHEL-32641)


author: Jacek Migacz <jmigacz@redhat.com> - 7.61.1-34.el8_10.4
changelog:
  - make up incomplete patch for host name wildcard checking (RHEL-5680)
  - asyn-thread: issue CURL_POLL_REMOVE before closing socket (RHEL-85602)


author: Simo Sorce <simo@redhat.com> - 2.1.27-0.4rc7
changelog:
  - Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
  - Resolves bz#1618744
  - Fix multilib issue bz#1663120


author: Jeff Moyer <jmoyer@redhat.com> - 67-1.el8
changelog:
  - Rebase to v67.  This brings in the following features:
    - support for the 'security frozen' sysfs attribute
    - support for using pmem as system ram
    - various cleanup and bug fixes
  - Fix load-keys failure in initramfs (Jeff Moyer)
  - Resolves: bz#1724531 bz#1730673 bz#1741164 bz#1741165 bz#1749888 bz#1749889


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-4.el8
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
    - Fix enable-namespace all reporting errors incorrectly
    - Add support for inject-smart on papr scm
  - Related: bz#2090190 bz#1986185 bz#2040074


author: Martin Pitt <mpitt@redhat.com>
changelog:
  - Drop unpublished -doc package to fix FTBFS rhbz#1640736
  - Add dist-git smoketest rhbz#1625683
  - Move dbus system user creation to correct package rhbz#1634496


author: Kevin Lyons <kevin.x.lyons@oracle.com> -1.12.8-12.0.1
changelog:
  - bus: raise fd limits before dropping privs [Orabug: 31175643]
  - fix netlink poll: error 4 (Zhenzhong Duan)


author: John Mcwalters <john.mcwalters@oracle.com> - 1.12.8-12.0.2.el8_4.2
changelog:
  - rebuild bumping release [Orabug 32849538]
  - bus: raise fd limits before dropping privs [Orabug: 31175643]
  - fix netlink poll: error 4 (Zhenzhong Duan)


author: Ray Strode <rstrode@redhat.com> - 1:1.12.8-22
changelog:
  - Use hangup signal instead of termination signal to
    kill sesssion monitoring script to appeach tcsh.
    Related: #2089362


author: Ray Strode <rstrode@redhat.com> - 1:1.12.8-23
changelog:
  - Address race for very short running sessions in SSH
    session monitoring script.
    Related: #2089362


author: Ray Strode <rstrode@redhat.com> - 1.12.8-25
changelog:
  - Ensure only one dbus-daemon is spawned for all shells sharing
    a single connection.
    Resolves: #2189201


author: David Herrmann <dh.herrmann@gmail.com> - 1:1.12.8-1
changelog:
  - Turn 'dbus' package into 'dbus-daemon' package, but keep 'dbus' for
    compatibility around and make it pull in the new 'dbus-daemon' package.


author: David Herrmann <dh.herrmann@gmail.com> - 1:1.12.8-1
changelog:
  - Extract 'dbus-common' package from 'dbus-daemon' to provide XML configuration
    and setup files as independent package ready for alternative Message Bus
    implementations to be used.


author: David Herrmann <dh.herrmann@gmail.com> - 1:1.12.8-2
changelog:
  - Extract 'dbus-tools' package from 'dbus-daemon' to provide all command-line
    utilities independent of the actual message bus. They are valid to be used
    with independent message-bus implementations, so they should not needlessly
    pull in dbus-daemon.


author: David King <amigadave@amigadave.com> - 0.104-1
changelog:
  - Update to 0.104
  - Remove RPATH
  - Remove executable bit from sourced script
  - Move man page to main package and update glob
  - Make the build output more verbose


author: Till Maas <opensource@till.name> - 0.104-2
changelog:
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.2.4-9
changelog:
  - Python 2 binary package renamed to python2-dbus
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.2.4-10
changelog:
  - Also add Provides for the old name without %_isa
  - Use %python_provide for the python3 subpackage and drop manual Provide which
    conflicts with %python_provide in the python2 subpackage.


author: Peter Jones <pjones@redhat.com> - 8-1
changelog:
  - Update to dbxtool 8
  - Make a "make coverity" rule to scan the source
    Results at: https://scan.coverity.com/projects/rhboot-dbxtool
  - Don't try to apply anything if PK and KEK aren't enrolled
  - Add --force and --quiet for the PK/KEK checker, and use them in the
    systemd service.
    Resolves: rhbz#1489942
  - Add a .syntastic_c_config for vim's Syntastic modules
  - Use tsearch()/tfind()/tdestroy() from libc instead of ccan htables
  - Don't open the dbx file with O_RDWR|O_CREAT, use O_RDONLY.
  - Lots of minor bug fixes gcc -Wextra and friends found.


author: Peter Jones <pjones@redhat.com> - 8-2
changelog:
  - Don't use -f in dbxtool.service; that'll make it do the thing we're
    trying to avoid.
    Resolves: rhbz#1489942


author: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> - 8-5.0.1
changelog:
  - Provide DBX for Oracle X7 and X8 [Orabug: 31682440]
  - Apply "fix relop in esl_iter_next()" patch [Orabug: 31682440]


author: Marian Csontos <mcsontos@redhat.com> - 2.02.181-1
changelog:
  - Reject conversions on raid1 LVs with split tracked SubLVs.
  - Reject conversions on raid1 split tracked SubLVs.
  - Fix dmstats list failing when no regions exist.
  - Reject conversions of LVs under snapshot.
  - Limit suggested options on incorrect option for lvconvert subcommand.
  - Add vdo plugin for monitoring VDO devices.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.00-0.2
changelog:
  - New upstream release.
  - Deduplication and compression - support for VDO volumes.
  - Dropped lvmetad, clvmd and liblvm2app.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.02-1
changelog:
  - Fix libdevmapper-event linking issue.
  - Fix missing proper initialization of pv_list struct when adding pv.
  - Fix (de)activation of RaidLVs with visible SubLVs.
  - Prohibit mirrored 'mirror' log via lvcreate and lvconvert.
  - Use sync io if async io_setup fails, or use_aio=0 is set in config.
  - Fix more issues reported by coverity scan.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.02-3
changelog:
  - Fix handling of exported VGs lvmdbusd.
  - Restore missing man info lvcreate --zero for thin-pools.
  - Drop misleadning comment for metadata minimum_io_size for VDO segment.
  - Ensure migration_threshold for cache is at least 8 chunks.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.02-4
changelog:
  - Introduce LVM_SUPPRESS_SYSLOG to suppress syslog usage by generator.
  - Fix generator querying config options missing from lvm.conf.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.02-6
changelog:
  * Thu Feb 07 2019 Marian Csontos <mcsontos@redhat.com> - 2.03.02-5
  - Improve -lXXX%VG modifier which improves cache segment estimation.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.05-2
changelog:
  - Fix scanning of PVs with size not matching device.
  - Allow --stripe/--stripesize in mirror conversions.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.05-3
changelog:
  - Remove unsupported OPTIONS+="event_timeout" udev rule from 11-dm-lvm.rules.
  - Prevent creating VGs with PVs with different logical block sizes.
  - Fix metadata writes from corrupting with large physical block size.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.07-1
changelog:
  - Ensure minimum required region size on striped RaidLV creation.
  - Fix resize of thin-pool with data and metadata of different segtype.
  - Improve mirror type leg splitting.
  - Fix activation order when removing merged snapshot.
  - Experimental VDO support for lvmdbusd.
  - Correctly set read_ahead for LVs when pvmove is finished.
  - Add support for DM_DEVICE_GET_TARGET_VERSION into device_mapper.
  - Activate thin-pool layered volume as 'read-only' device.
  - Ignore crypto devices with UUID signature CRYPT-SUBDEV.
  - Synchronize with udev when dropping snapshot.
  - Add missing device synchronization point before removing pvmove node.
  - See WHATS_NEW for more.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.08-1
changelog:
  - VDO and writecache volume improvements.
  - Prohibit reshaping of stacked raid LVs to prevent corruption.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.09-1
changelog:
  - Fix support for lvconvert --repair of pools used by third party applications.
  - Fix formating of vdopool (vdo_slab_size_mb was smaller by 2 bits).
  - Fix busy loop in dmeventd.
  - Fix lvmlocks.service using incorrect option.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.11-1
changelog:
  - Fix pvck handling MDA at offset different from 4096.
  - Partial or degraded activation of writecache is not allowed.
  - Enhance error handling in fsadm and handle correct fsck result.
  - Dmeventd lvm plugin ignores higher reserved_stack lvm.conf values.
  - Support using BLKZEROOUT for clearing devices.
  - Fixed interrup handling.
  - Fix block cache when device has too many failing writes.
  - Fix block cache waiting for IO completion with failing disks.
  - Add configure --enable-editline support as an alternative to readline.
  - Enhance reporting and error handling when creating thin volumes.
  - Enable vgsplit for VDO volumes.
  - Lvextend of vdo pool volumes ensure at least 1 new VDO slab is added.
  - Restore lost signal blocking while VG lock is held.
  - Improve estimation of needed extents when creating thin-pool.
  - Use extra 1% when resizing thin-pool metadata LV with --use-policy.
  - Enhance --use-policy percentage rounding.
  - Allow pvmove of writecache origin.
  - Report integrity fields.
  - Integrity volumes defaults to journal mode.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.11-2
changelog:
  - Fix problem with wiping of converted LVs.
  - Fix memleak in scanning.
  - Fix corner case allocation for thin-pools.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.11-3
changelog:
  - Fix mpath filtering of NVMe devices.
  - Check if lvcreate passes read_only_volume_list with tags and skips zeroing.
  - Limit pool metadata spare to 16GiB.
  - Improves conversion and allocation of pool metadata.
  - Fix different limits used for metadata by lvm2 and thin-tools.
  - Fix interrupting lvconvert --splitcache command with striped origin volumes.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.12-3
changelog:
  - Allow extending thin-pool data with writecache on top.
  - Fix removing thin-pool data converted to writeache.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.12-4
changelog:
  - Fix conversion of writecache LVs to thin pool data volume.
  - Add deviceidtype option for lvmdevices.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.12-6
changelog:
  - Fix handling of pmspare by vgsplit, vgmerge and vgremove.
  - Fix detection of active components of external origin volume.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.14-7
changelog:
  - Fix lvm crash when recreating PV with UUID of a missing PV.
  - Fix lvconvert --type vdo-pool with --test should not write signature.
  - Use correect profile in lvmdbusd preventing messages in JSON output.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.14-8
changelog:
  - Fix [vdo_]use_compression options.
  - Fix vgimportdevices operating on incomplete VGs fails when nothing to import.
  - Fix message processing on thin-pool extension leaving devices behind.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.14-14
changelog:
  - Fix multisegment RAID1 allocator using one disk for both legs.
  - Fix lvconvert -m 0 taking rimage_0 even if it is out of sync.
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: EL Errata <el-errata_ww@oracle.com> - 2.03.14-14.0.1
changelog:
  - Fixed deletion issue for symlink when device is opened [Orabug: 36228608]
  - Prevent duplicate uuid device to replace existing one in udev [Orabug: 35987487]
  - Prevent duplicate label to replace existing one in udev [Orabug: 34898273]


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.7-1
changelog:
  - Update Source to 0.7.7
    * Previous patches 0001-0009 & 0016 are included in this commit
  - Add upstream patches since 0.7.7
    * patches 0001-0012 are from upstream commits since 0.7.7
  - Add 0013-libmultipath-print-correct-default-for-delay_-_check.patch
    * fix minor configuration printing issue. posted upstream
  - Add 0014-multipath.conf.5-clarify-property-whitelist-handling.patch
    * clarify property blacklist_excecptions handling in man page
      posted upstream
  - Add 0015-mpathpersist-add-all_tg_pt-option.patch
    * add new all_tg_pt multpiath.conf option. posted upstream
  - Add 0016-libmultipath-remove-rbd-code.patch
    * remove unused rbd code. posted upstream
  - Add 0017-mpathpersist-fix-aptpl-support.patch
    * add ":aptpl" suffix for reservation_key to fix aptpl support.
      posted upstream
  - Add 0018-multipath-don-t-check-timestamps-without-a-path.patch
    * fix multipath null dereference crash. posted upstream
  - Add 0019-libmultipath-fix-detect-alua-corner-case.patch
    * fix alua detection with retain_hardware_handler set to off. posted
      upstream
  - Add 0020-multipath-fix-setting-conf-version.patch
    * multipath wasn't setting the kernel version correctly. posted
      upstream
  - Add 0028-RH-reset-default-find_mutipaths-value-to-off.patch
    * default to RHEL7 and older device detection style. Redhat specific,
      to keep customer experience the same.
  - Rename files
    * Previous patches 0010-0015 & 0017 are now patches 0021-0027
  - Modify 0021-RH-fixup-udev-rules-for-redhat.patch
    * Fix spurious compile warning with redhat compile options
  - Modify 0022-RH-Remove-the-property-blacklist-exception-builtin.patch
    * clarify changes in man page


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.7-2.gitef6d98b
changelog:
  - Update Source to latest upstream commit
    * Previous patches 0001-0018 are included in this commit
  - Rename files
    * Previous patches 0019-0028 are now patches 0002-0003 & 0012-0019
  - Add 0001-libmultipath-remove-last-of-rbd-code.patch
  - Add 0004-mpathpersist-add-param-alltgpt-option.patch
    * mpathpersist now accepts --param-alltgpt
  - Add 0005-libmutipath-remove-unused-IDE-bus-type.patch
  - Add 0006-multipathd-add-new-protocol-path-wildcard.patch
    * multipathd show paths format now accepts %PATCH for the path protocol/transport
  - Add 0007-libmultipath-add-protocol-blacklist-option.patch
    * You can now use the "protocol" blacklist section parameter to blacklist
      by protocol/transport
  - Add 0008-libmultipath-remove-_filter_-blacklist-functions.patch
  - Add 0009-multipath-tests-change-to-work-with-old-make-version.patch
  - Add 0010-multipath-tests-add-blacklist-tests.patch
  - Add 0011-mpathpersist-add-missing-param-rk-usage-info.patch
  - Refresh 0013-RH-Remove-the-property-blacklist-exception-builtin.patch
  - Modify 0016-RH-add-mpathconf.patch
    * improve usage message and man page
  - Modify device-mapper-multipath.spec
    * updated dependencies


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-1
changelog:
  - Update Source to upstream version 0.7.8
    * Previous patches 0001-0011 are included in this version
  - Rename files
    * Previous patches 0012-0019 are now patches 0007-0014
  - Add 0001-multipath-tweak-logging-style.patch
  - Add 0002-multipathd-check-for-NULL-udevice-in-cli_add_path.patch
  - Add 0003-libmultipath-remove-max_fds-code-duplication.patch
  - Add 0004-multipathd-set-return-code-for-multipathd-commands.patch
  - Add 0005-mpathpersist-fix-registration-rollback-issue.patch
  - Add 0006-libmultipath-timeout-on-unresponsive-tur-thread.patch
    * The above 6 patches have been submitted upstream
  - Resolves: bz #1606947, #1631883


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-2
changelog:
  - Add 0015-libmultipath-free-allocated-value-in-set_int.patch
  - Add 0016-kpartx-fix-new-memory-leak-in-dm_find_part.patch
  - change hardcoded /usr/lib/udev/rules.d to _udevrulesdir
  - Resolves: bz #1606947


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-3
changelog:
  - Add 0017-BZ-1648397-fix-mpp-hwe-handling-when-paths-are-freed.patch
    * Fix crash by deleting in use hardware entry list pointer
  - Add 0018-libmultipath-cleanup-pthread_cleanup_pop-call.patch
    * Fix compiler warning
  - Add 0019-libmultipath-fix-false-removes-in-dmevents-polling-c.patch
    * The above 3 patches have been accepted upstream
  - Resolves: bz #1648397


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-5
changelog:
  - Add 0021-BZ-1673167-Fix-miscounting-active-paths.patch
  - Add 0022-BZ-1673167-ignore-failed-wwid-recheck.patch
  - Resolves: bz #1673167


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-6
changelog:
  - Fix multipath_conf_syntax CI test
    * need to wait for udev to settle before removing multipath device
  - Resolves: bz #1673167


author: Benjamin Marzinski <bmarzins@redhat.com> 0.7.8-7.1
changelog:
  - Add 0024-BZ-1723746-check-on-multipathd-without-starting-it.patch
  - Add 0025-BZ-1723746-test-socket-connection-in-non-blocking-mo.patch
  - Update CI testing
  - Resolves: bz #1723746


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.0-1
changelog:
  - Update Source to upstream version 0.8.0
    * Previous patches 0001-0006 & 0015-0019 are included in this commit
  - Rename files
    * Previous patches 0007-0014 are now 0018-0025
    * Previous patches 0020-0023 are now 0001, 0006 & 0007
  - Add 0002-libmultipath-handle-existing-paths-in-marginal_path-.patch
  - Add 0003-multipathd-cleanup-marginal-paths-checking-timers.patch
  - Add 0004-libmultipath-fix-marginal-paths-queueing-errors.patch
  - Add 0005-libmultipath-fix-marginal_paths-nr_active-check.patch
  - Add 0008-libmutipath-continue-to-use-old-state-on-PATH_PENDIN.patch
  - Add 0009-multipathd-use-update_path_groups-instead-of-reload_.patch
  - Add 0010-multipath.conf-add-missing-options-to-man-page.patch
  - Add 0011-libmultipath-add-get_uid-fallback-code-for-NVMe-devi.patch
  - Add 0012-libmulitpath-cleanup-uid_fallback-code.patch
  - Add 0013-multipathd-handle-changed-wwids-by-removal-and-addit.patch
    * Multipath will now automatically remove and re-add paths if
      their wwid changes
  - Add 0014-multipathd-remove-wwid_changed-path-attribute.patch
  - Add 0015-multipathd-ignore-disable_changed_wwids.patch
    * Since paths are now getting removed and re-added there is
      no need to disable them.
  - Add 0016-multipathd-Don-t-use-fallback-code-after-getting-wwi.patch
  - Add 0017-libmultipath-silence-dm_is_mpath-error-messages.patch
  - Add 0026-RH-Fix-nvme-compilation-warning.patch
  - Add 0027-Fix-systemd-version-detection.patch
    * The above 16 patches have been submitted upstream
  - Add 0028-RH-attempt-to-get-ANA-info-via-sysfs-first.patch
    * Red Hat has a sysfs method to access the ANA state, which isn't
      upstream, and will not be. This will probably go away in the
      future.
  - Resolves: bz #1498546


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.0-2
changelog:
  - Add 0029-BZ-1700451-check-on-multipathd-without-starting-it.patch
  - Add 0030-BZ-1700451-test-socket-connection-in-non-blocking-mo.patch
    * the "multipath -u" call in 62-multipath.rules should no longer hang
      on multipathd startup.
  - Resolves: bz #1700451


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.0-3
changelog:
  - Add 0031-libmultipath-handle-clock_gettime-failures-in-tur-ch.patch
  - Add 0032-kpartx-fail-if-dup-of-dasd-file-descriptor-fails.patch
  - Add 0033-multipathd-fix-REALLOC_REPLY-with-max-length-reply.patch
  - Add 0034-multipathd-handle-NULL-return-from-genhelp_handler.patch
    * The above 4 patches have been submitted upstream
  - Related: bz #1498546


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.0-4
changelog:
  - Add 0035-BZ-1700911-hwtable-add-Lenovo-DE-series.patch
  - Add 0036-libmultipath-make-vector_foreach_slot_backwards-work.patch
    * Fix for bz #1713459
  - Fixes for bz #1666322 and #1669097 were included in 0.8.0 upstream
    code
  - Resolves: bz #1666322, #1669097, #1700911, #1713459


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.3-1
changelog:
  - Update Source to upstream version 0.8.3
    * This version includes the fixes for bz #1690515, #1703439,
        * Previous patches 0001-0017 & 0031-0036 are included in this version
  - Rename files
    * Previous patches 0018-0026 & 0028 are now 0004-0013
    * 0008-RH-add-mpathconf.patch has been modified to add a
      --property_blacklist option to fix bz #1753729
  - Add 0001-multipathd-warn-when-configuration-has-been-changed.patch
    * Multipath now logs a warning message when the configuration file
      has been changed to fix bz #1750594
  - Add 0002-libmultipath-fix-leak-in-foreign-code.patch
  - Add 0003-Fix-leak-in-mpathpersist.patch
    * The above 3 patches have been submitted upstream
  - Resolves: bz #1690515, #1703439, #1719562, #1747534, #1750594, #1753729


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.3-3
changelog:
  - Rename files
    * Previous patches 0004-0013 are now 0010-0019
    * 0014-RH-add-mpathconf.patch now makes mpathconf default to not
      printing foreign devices (bz #1760709)
  - Add 0004-libmultipath-remove-unused-path-prio_args.patch
  - Add 0005-libmultipath-constify-get_unaligned_be.patch
  - Add 0006-libmultipath-add-missing-hwe-mpe-variable-merges.patch
  - Add 0007-libmultipath-fix-sgio_get_vpd-looping.patch
  - Add 0008-libmultipath-add-vend_id-to-get_vpd_sgio.patch
  - Add 0009-libmultipath-add-code-to-get-vendor-specific-vpd-dat.patch
    * Add the '%g' maps and paths format wildcard, and the vpd_vendor
      multipath.conf devices section parameter. (bz #1527212)
  - Resolves: bz #1527212, #1760709


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.3-3.1
changelog:
  - Add 0020-libmultipath-make-dm_get_map-status-return-codes-sym.patch
  - Add 0021-multipathd-fix-check_path-errors-with-removed-map.patch
    * The above 2 patches fix bz #1856944. multipathd handles external
      device removal better.
  - Resolves: bz #1856944


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.3-3.3
changelog:
  - Add 0022-libmultipath-fix-files-read-from-config_dir.patch
    * Fix for bz #1858993. Only read files ending in .conf
  - Resolves: bz #1858993


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-1
changelog:
  - Update Source to upstream version 0.8.4
    * This version includes the fixes for bz #1768894 & #1821214
    * Previous patches 0001-0009 are included in this version
  - Rename files
    * Previous patches 0010-0019 are now 0011-0020
  - Add 0001-libmultipath-assign-variable-to-make-gcc-happy.patch
  - Add 0002-libmutipath-don-t-close-fd-on-dm_lib_release.patch
  - Add 0003-libmultipath-allow-force-reload-with-no-active-paths.patch
    * make multipath and multipathd reload maps with no active paths
      (bz #1814858)
  - Add 0004-libmpathpersist-depend-on-libmultipath.patch
  - Add 0005-multipath-tools-Makefile-more-dependency-fixes-for-p.patch
  - Add 0006-multipath-tools-Makefile.inc-set-Wno-error-clobbered.patch
  - Add 0007-libmultipath-discovery.c-use-z-qualifier-for-size_t.patch
  - Add 0008-libmultipath-eliminate-more-signed-unsigned-comparis.patch
  - Add 0009-libmultipath-set_uint-fix-parsing-for-32bit.patch
  - Add 0010-multipath-tools-Makefile-add-install-dependency.patch
    * The above 10 patches have been submitted upstream
  - Resolves: bz #1768894, #1814858, #1821214


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-2
changelog:
  - Add 0021-libmultipath-remove-_blacklist_exceptions-functions.patch
  - Add 0022-libmultipath-fix-parser-issue-with-comments-in-strin.patch
  - Add 0023-libmultipath-invert-regexes-that-start-with-exclamat.patch
    * This commit also changes the default devnode blacklist to
      blacklist all devices except scsi, dasd, and nvme.
  - Resolves: bz #1828180


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-3
changelog:
  - Add 0024-libmultipath-make-dm_get_map-status-return-codes-sym.patch
  - Add 0025-multipathd-fix-check_path-errors-with-removed-map.patch
  - Add 0026-libmultipath-make-dm_flush_maps-only-return-0-on-suc.patch
  - Add 0027-multipathd-add-del-maps-multipathd-command.patch
  - Add 0028-multipath-make-flushing-maps-work-like-other-command.patch
  - Add 0029-multipath-delegate-flushing-maps-to-multipathd.patch
  - Add 0030-multipath-add-option-to-skip-multipathd-delegation.patch
    * The above 7 patches fix bz #1845875. Multipath now attempts to
      delegate device removal to multipathd, and multipathd handles
      external device removal better.
  - Add 0031-libmultipath-fix-sysfs-dev_loss_tmo-parsing.patch
    * Fixes bz #1852843
  - Add 0032-kpartx-read-devices-with-direct-IO.patch
    * Fixes bz #1814858
  - Add 0033-kpartx-handle-alternate-bsd-disklabel-location.patch
  - Add 0034-libmultipath-fix-checker-detection-for-nvme-devices.patch
    * fixes bz #1845915
  - Add 0035-Makefile.inc-trim-extra-information-from-systemd-ver.patch
  - Add 0036-kpartx-fix-Wsign-compare-error.patch
  - Resolves: bz #1814858, #1845875, #1845915, #1852843


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-4
changelog:
  - Add 0037-libmultipath-count-pending-paths-as-active-on-loads.patch
    * make udev treat the device as having paths, so it will run kpartx
    * Fixes bz #1846866
  - Resolves: bz #1846866


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-5
changelog:
  - Add 0038-multipath-deal-with-failures-flushing-maps.patch
    * Don't print "fail" if multipath needs to failback to removing
      a device itself.
    * Fixes bz #1845875
  - Modify multipath_conf_syntax CI test
    * It started failing because "multpath -F" can now start multipathd
      via the socket, and the test expected multipathd to not be running
  - Resolves: bz #1845875


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-6
changelog:
  - Add 0039-libmultipath-factor-out-code-to-get-vpd-page-data.patch
  - Add 0040-libmultipath-limit-reading-0xc9-vpd-page.patch
    * Only check for rdac support on configured devices, or devices where
      vpd page 0x00 indicates support for vpd page 0xc9
    * Fixes bz #1877415
  - Add 0041-libmultipath-add-device-to-hwtable.c.patch
    * Add support for Fujitsu Eternus AB/HB
    * Fixes bz #1857429
  - Add 0042-libmultipath-move-fast_io_fail-defines-to-structs.h.patch
  - Add 0043-libmultipath-add-eh_deadline-multipath.conf-paramete.patch
    * Fixes bz #1819897
  - Add 0044-libmultipath-don-t-dlclose-tur-checker-DSO.patch
    * Fixes bz #1875384
  - Add 0045-libmultipath-warn-about-missing-braces-at-end-of-mul.patch
    * Fixes bz #1897530
  - Add 0046-libmultipath-ignore-multipaths-sections-without-wwid.patch
    * Fixes bz #1897815
  - Add 0047-tests-fix-missing-priority-blacklist-test.patch
  - Add 0048-mpathpersist-Fix-Register-and-Ignore-with-0x00-SARK.patch
    * Make mpathpersist Register and Ignore command clear the registration
      with a 0x0 SARK, like sg_persist does.
    * Fixes bz #1894103
  - Add 0049-mpathpersist-update-prkeys-file-on-changing-registra.patch
    * Fixes bz #1900522
    * The above 11 patches have all been submitted upstream
  - Resolves: bz #1819897, #1857429, #1875384, #1877415, #1894103, #1897530
  - Resolves: bz #1897815, #1900522


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-6
changelog:
  - Add 0050-multipathd-Fix-multipathd-stopping-on-shutdown.patch
    * Fixes bz #1892496
  - Add 0051-multipath.conf.5-Improve-checker_timeout-description.patch
    * Fixes bz #1906073
  - Resolves: bz #1892496, #1906073


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-7
changelog:
  - Add 0052-libmultipath-check-for-null-wwid-before-strcmp.patch
    * Missing part of fix for bz #1897815
  - Add 0053-libmultipath-make-find_err_path_by_dev-static.patch
  - Add 0054-multipathd-avoid-io_err_stat-crash-during-shutdown.patch
  - Add 0055-multipathd-avoid-io_err_stat-ABBA-deadlock.patch
  - Add 0056-multipathd-use-get_monotonic_time-in-io_err_stat-cod.patch
  - Add 0057-multipathd-combine-free_io_err_stat_path-and-destroy.patch
  - Add 0058-multipathd-cleanup-logging-for-marginal-paths.patch
    * The above 6 patches fix bz #1920795
  - Add 0059-libmpathpersist-fix-thread-safety-of-default-functio.patch
    * Fixes bz #1913549
  - Resolves: bz #1897815, #1913549, #1920795


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-9
changelog:
  - Add 0060-kpartx-free-loop-device-after-listing-partitions.patch
    * Fixes bz #1925490
  - Add 0061-RH-fix-find_multipaths-in-mpathconf.patch
    * Fixes bz #1921651
  - Resolves: bz #1921651, #1925490


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-10
changelog:
  - Add 0062-libmultipath-select_action-don-t-drop-map-if-alias-c.patch
    * Fall back to WWID names instead of removing existing device
  - Add 0063-libmultipath-check-if-user_friendly_name-is-in-use.patch
    * make sure to choose a user_friendly_name that isn't in use
    * Fixes bz #1923777
  - Add alias_clash CI test
  - Resolves: bz #1923777


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-11
changelog:
  - Add 0062-libmultipath-select_action-don-t-drop-map-if-alias-c.patch
    * Fall back to WWID names instead of removing existing device
  - Add 0063-libmultipath-check-if-user_friendly_name-is-in-use.patch
    * make sure to choose a user_friendly_name that isn't in use
    * Fixes bz #1937832
  - Add alias_clash CI test
  - Remove unused multipath.conf
  - Resolves: bz #1937832


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-12
changelog:
  - Add 0064-libmultipath-check-udev_device_get_-return-value-to-.patch
    * Fixes bz #1946940
  - Resolves: bz #1946940


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-13
changelog:
  - Add 0065-libmultipath-cleanup-code-to-strip-wwid-trailing-spa.patch
  - Add 0066-multipathd-add-recheck_wwid-option-to-verify-the-pat.patch
  - Add 0067-libmultipath-avoid-infinite-loop-with-bad-vpd-page-8.patch
  - Add 0068-libmultipath-fix-priorities-in-parse_vpd_pg83.patch
  - Add 0069-RH-make-parse_vpd_pg83-match-scsi_id-output.patch
  - Add 0070-multipathd-improve-getting-parent-udevice-in-rescan_.patch
  - Add 0071-multipathd-don-t-trigger-uevent-for-partitions-on-ww.patch
    * add recheck_wwid option
    * Fixes bz #1907904
  - Resolves: bz #1907904


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-17
changelog:
  - Add 0074-mpathpersist-fail-commands-when-no-usable-paths-exis.patch
    * Fixes bz #1984723
  - Add 0075-multipath-print-warning-if-multipathd-is-not-running.patch
    * Fixes bz #1973592
  - Add 0076-multipathd-don-t-access-path-if-it-was-deleted.patch
    * Found by coverity
  - Resolves: bz #1973592, #1984723


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-18
changelog:
  - Add 0077-multipathd.socket-add-missing-conditions-from-servic.patch
    * Fixes bz #2008101
  - Add 0078-libmulitpath-add-section-name-to-invalid-keyword-out.patch
    * Fixes bz #1918150
  - Resolves: bz #1918150, #2008101


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-20
changelog:
  - Add 0079-libmultipath-use-typedef-for-keyword-handler-and-pri.patch
  - Add 0080-libmultipath-print-the-correct-file-when-parsing-fai.patch
  - Add 0081-libmultipath-pass-file-and-line-number-to-keyword-ha.patch
  - Add 0082-libmultipath-make-set_int-take-a-range-for-valid-val.patch
  - Add 0083-libmultipath-improve-checks-for-set_str.patch
  - Add 0084-libmultipath-split-set_int-to-enable-reuse.patch
  - Add 0085-libmultipath-cleanup-invalid-config-handling.patch
  - Add 0086-libmultipath-don-t-return-error-on-invalid-values.patch
    * Above 8 patches fix bz #1900595
  - Add 0087-multipathd-avoid-unnecessary-path-read-only-reloads.patch
    * Fixes bz #2009624
  - Resolves: bz #1900595, #2009624, #2021823


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-21
changelog:
  - Add 0088-libmultipath-make-helper-function-to-trigger-path-ue.patch
  - Add 0089-multipathd-trigger-udev-change-on-path-addition.patch
  - Resolves: bz #1862032


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-23
changelog:
  - Add 0091-multipath-tools-add-HPE-MSA-1060-2060-to-hwtable.patch
    * Partial fix for bz #2058222
  - Add 0092-multipath-tools-update-mpp-force_readonly-in-ev_add_.patch
    * Fixes bz #2065468
  - Add 0093-updated-HPE-MSA-builtin-config.patch
    * Fixes bz #2058222
  - Resolves bz #2065468, #2058222


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-24
changelog:
  - Add 0094-multipath-return-failure-on-an-invalid-remove-comman.patch
    * Fixes bz #2052054
  - Add 0095-libmultipath-steal-the-src-string-pointer-in-merge_s.patch
  - Add 0096-libmultipath-enable-linear-ordering-of-bus-proto-tup.patch
  - Add 0097-libmultipath-use-bus_protocol_id-in-snprint_path_pro.patch
  - Add 0098-libmultipath-make-protocol_name-global.patch
  - Add 0099-libmultipath-add-a-protocol-subsection-to-multipath..patch
  - Add 0100-libmultipath-Set-the-scsi-timeout-parameters-by-path.patch
  - Add 0101-libmultipath-check-the-overrides-pctable-for-path-va.patch
  - Add 0102-libmultipath-fix-eh_deadline-documentation.patch
  - Add 0103-libmultipath-Add-documentation-for-the-protocol-subs.patch
  - Add 0104-libmultipath-use-symbolic-value-for-invalid-pcentry.patch
    * The above 10 patches implement feature from bz #2065477
  - Resolves: bz #2052054, #2065477


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-25
changelog:
  - Add 0105-multipathd-handle-fpin-events.patch
  - Add 0106-multipathd-disallow-changing-to-from-fpin-marginal-p.patch
  - Resolves: bz #2083077


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-27
changelog:
  - Add 0108-multipathd-Add-missing-ctype-include.patch
  - Add 0109-multipathd-replace-libreadline-with-libedit.patch
    * replace readline with libedit, to avoid license conflicts
  - Resolves: bz #2119887


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-30
changelog:
  - Add 0111-multipathd-factor-out-the-code-to-flush-a-map-with-n.patch
  - Add 0112-libmultipath-return-success-if-we-raced-to-remove-a-.patch
  - Add 0113-multipathd-Handle-losing-all-path-in-update_map.patch
  - Resolves: bz #2110485


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-31
changelog:
  - Add 0114-multipathd-ignore-duplicated-multipathd-command-keys.patch
    * Fixes bz #2133996
  - Add 0115-multipath-tools-use-run-instead-of-dev-shm.patch
    * Fixes bz #2133990
  - Resolves: bz #2133990, #2133996


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-32
changelog:
  - Add 0116-kpartx-hold-device-open-until-partitions-have-been-c.patch
    * Fixes bz #2128885
  - Add 0117-libmultipath-cleanup-remove_feature.patch
  - Add 0118-libmultipath-cleanup-add_feature.patch
  - Add 0119-multipath-tests-tests-for-adding-and-removing-featur.patch
  - Add 0120-libmultipath-fix-queue_mode-feature-handling.patch
  - Add 0121-multipath-tests-tests-for-reconcile_features_with_qu.patch
  - Add 0122-libmultipath-prepare-proto_id-for-use-by-non-scsi-de.patch
  - Add 0123-libmultipath-get-nvme-path-transport-protocol.patch
  - Add 0124-libmultipath-enforce-queue_mode-bio-for-nmve-tcp-pat.patch
    * Fixes bz #2022359
  - Resolves: bz #2022359, #2128885


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-33
changelog:
  - Add 0125-multipath-add-historical-service-time-to-the-man-pag.patch
    * Fixes bz #2141996
  - Modify tests/multipath_conf_syntax/main.sh
    * fix unrelated test error
  - Resolves: bz #2141996


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-34
changelog:
  - Add 0126-libmultipath-copy-mpp-hwe-from-pp-hwe.patch
    * Fixes bz #2126714
  - Cleanup multiple CI tests
  - Resolves: bz #2126714


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-35
changelog:
  - Add 0127-libmultipath-don-t-leak-memory-on-invalid-strings.patch
  - Add 0128-libmutipath-validate-the-argument-count-of-config-st.patch
  - Resolves: bz #2155560


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-36
changelog:
  - Add 0129-libmultipath-select-resize-action-even-if-reload-is-.patch
  - Add 0130-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch
  - Add 0131-libmultipath-keep-renames-from-stopping-other-multip.patch
  - Resolves: bz #2166468


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-37
changelog:
  - Fix bugzilla linked to the changes (was previously linked to
    the wrong bug, 2162537)
  - Resolves: bz #2166468


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-38
changelog:
  - Add 0132-multipathd-make-pr-registration-consistent.patch
  - Add 0133-libmultipath-make-prflag-an-enum.patch
  - Add 0134-multipathd-handle-no-active-paths-in-update_map_pr.patch
  - Add 0135-libmpathpersist-fix-resource-leak-in-update_map_pr.patch
  - Resolves: bz #2164871


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-39
changelog:
  - Add OSCI tests directory
  - Make kpartx_id installation location relative to /usr/lib/udev/rules.d
  - Resolves: bz #2164871


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-40
changelog:
  - Add 0136-multipathd-Added-support-to-handle-FPIN-Li-events-fo.patch
    * Add support in multipathd for NVMe to listen for FPIN-Li events and
      mark effected paths as marginal
  - Resolves: RHEL-6677


author: Marian Csontos <mcsontos@redhat.com> - 0.7.2-1
changelog:
  - Update to latest upstream release including various bug fixes and new features.
  - Fix segfault when dump tools are given a tiny metadata file.
  - Fix -V exiting with 1.
  - Fix thin_check when running on XML dump instead of binary data.
  - Speed up free block searching.


author: Marian Csontos <mcsontos@redhat.com> - 0.7.3-1
changelog:
  - Update to latest bugfix and documentation update release.
  - *_restore tools wipe superblock as a last resort.
  - Add thin_check --override-mapping-root.


author: Marian Csontos <mcsontos@redhat.com> - 0.8.5-3
changelog:
  - Remove obsolete pool-inactive option from thin_trim man page.
  - Check input file exists eralier, and prevent writing incorrect metadata.


author: Marian Csontos <mcsontos@redhat.com> - 0.9.0-1
changelog:
  - Update to upstream version 0.9.0.
  - Fix important issues found by static analysis.
  - Update crc32c to version 0.5 supporting non x86 architectures.
  - New tools thin_metadata_pack and thin_metadata_unpack.


author: Pavel Zhukov <pzhukov@redhat.com> - 12:4.3.6-33
changelog:
  - Resolves: #1673946 - Change default prefix length to 128
  - Add address-prefix-lenght option to change default value
  - Fix backporting issues


author: Lianbo Jiang <lijiang@redhat.com> - 1:3.2-6
changelog:
  - Updated to the latest upstream(5b3c8e995026 ("Allow overriding
    build settings from the environment"))
  - Resolves: rhbz#1796581


author: Jaroslav Mracek <jmracek@redhat.com> - 3.6.1-1
changelog:
  - [module] Improved module commands list, info
  - [module] Reports error from module solver
  - Fix: Error detected when calling 'RepoCB.fastestMirror' (RhBug:1628056)
  - Preserve packages from other installed mod profiles (RhBug:1629841)
  - [spec] Postpone conflict with yum to Fedora 30+ (RhBug:1600444)
  - [cli] Install command recommends alternative packages (RhBug:1625586)
  - [cli] Fix case insensitive hint (1628514)
  - Fix installed profiles for module info (RhBug:1629689)
  - Fix module provides not having consistent output (RhBug:1623866)
  - Enhance label for transaction table (RhBug:1609919)
  - Implement C_, the gettext function with a context (RhBug:1305340)
  - Actually disambiguate some messages using C_ (RhBug:1305340)
  - Restore 'strict' choice for group installs (#1461539)
  - [repoquery] More strict queryformat parsing (RhBug:1631458)
  - Redirect repo progress to std error (RhBug:1626011)
  - Unify behavior of remove and module remove (RhBug:1629848)
  - Change behavior of disabled module for module install (RhBug:1629711)
  - Allow enablement on disabled plugin (RhBug:1614539)
  - Resolves: rhbz#1622585 - [modularity] dnf should not be proposing distro-sync
  - Resolves: rhbz#1614531 - dnf 3.2 does not depsolve correctly
  - Bug 1564369 - don't show duplicate errors in dnf output
  - Resolves: rhbz#1597257 - dnf should accept localinstall command, at least as an alias
  - Resolves: rhbz#1613860 - dnf search behaviour is slightly confusing
  - Resolves: rhbz#1625586 - Advise user about alternatives to the non-existing "python" package
  - Resolves: rhbz#1614346 - dnf rollback doesn't work after install/downgrade/upgrade
  - Resolves: rhbz#1612752 - platform-python should be used in completion_helper
  - Resolves: rhbz#1618421 - dnf module install fails to find non-modular dependencies
  - Bug 1629655 - not helpful/complete error message when specifying wrong stream or profile
  - Bug 1629709 - disabled modules should be identified in the module listing
  - Bug 1630761 - [usability] unable to determine if a stream with [d] is enabled or not
  - Bug 1625270 - there is ???% [=== when baseurl is wrong
  - Resolves: rhbz#1624056 - quoted baseurl is error out


author: Jaroslav Mracek <jmracek@redhat.com> - 4.0.4-1
changelog:
  - Update to 4.0.4
  - Add dnssec extension
  - Set termforce to AUTO to automatically detect if stdout is terminal
  - Repoquery command accepts --changelogs option (RhBug:1483458)
  - Calculate sack version from all installed packages (RhBug:1624291)
  - [module] Allow to enable module dependencies (RhBug:1622566)


author: Jaroslav Mracek <jmracek@redhat.com> - 4.0.9-1
changelog:
  - Added dnf.repo.Repo.get_http_headers
  - Added dnf.repo.Repo.set_http_headers
  - Added dnf.repo.Repo.add_metadata_type_to_download
  - Added dnf.repo.Repo.get_metadata_path
  - Added dnf.repo.Repo.get_metadata_content
  - Added --changelogs option for check-update command
  - [module] Add information about active modules
  - Hide messages created only for logging
  - Enhanced --setopt option
  - [module] Fix dnf remove @<module>
  - [transaction] Make transaction content available for plugins


author: Daniel Mach <dmach@redhat.com> - 4.0.9.1-1
changelog:
  - Updated difference YUM vs. DNF for yum-updateonboot
  - Added new command ``dnf alias [options] [list|add|delete] [<name>...]`` to allow the user to
    define and manage a list of aliases
  - Enhanced documentation
  - Unifying return codes for remove operations
  - [transaction] Make transaction content available for commands
  - Add hotfix packages to install pool (RhBug:1654738)
  - Report group operation in transaction table
  - [sack] Change algorithm to calculate rpmdb_version
  - Add basic integration with digest (RhBug:1614351)


author: Jaroslav Mracek <jmracek@redhat.com> - 4.0.9.2-1
changelog:
  - Print information about skipped packages after the transaction
  - Sort reported skipped packages, force ignore_weak
  - Allow to enable modules that break default modules (RhBug:1648839)


author: Jaroslav Mracek <jmracek@redhat.com> - 4.0.9.2-2
changelog:
  - Backport patches for: RHEL should use --best option by default for dnf / libdnf (RhBug:1670776)
  - Add --nobest dnf option to revert the new default behavior from commandline


author: Ales Matej <amatej@redhat.com> - 4.2.11-1
changelog:
  - Update to 4.2.11
  - Improve modularity documentation (RhBug:1730162,1730162,1730807,1734081)
  - Fix detection whether system is running on battery (used by metadata caching timer) (RhBug:1498680)
  - New repoquery queryformat: %{reason}
  - Print rpm errors during test transaction (RhBug:1730348) 
  - Fix incorrectly marked profile and stream after failed rpm transaction check (RhBug:1719679)
  - Show transaction errors inside dnf shell (RhBug:1743644)
  - dnf-automatic now respects versionlock excludes (RhBug:1746562)
  - [doc] Add user_agent and countme options
  - [history] Don't store failed transactions as succeeded
  - [history] Do not require root for informative commands
  - [dnssec] Fix UnicodeWarning when using new rpm (RhBug:1699650)
  - Apply excludes before modular excludes (RhBug:1709453)
  - Improve help for command line arguments (RhBug:1659328)
  - Add new modular API method ModuleBase.get_modules
  - Mark features used by ansible, anaconda and subscription-manager as an API


author: Ales Matej <amatej@redhat.com> - 4.2.16-1
changelog:
  - Update to 4.2.16
  - Fix downloading local packages into destdir (RhBug:1727137)
  - Report skipped packages with identical nevra only once (RhBug:1643109)
  - Restore functionality of dnf remove --duplicates (RhBug:1674296)
  - Improve API documentation
  - Document NEVRA parsing in the man page
  - Do not wrap output when no terminal (RhBug:1577889)
  - Allow to ship alternative dnf.conf (RhBug:1752249)
  - Don't check if repo is expired if it doesn't have loaded metadata (RhBug:1745170)
  - Remove duplicate entries from "dnf search" output (RhBug:1742926)
  - Set default value of repo name attribute to repo id (RhBug:1669711)
  - Allow searching in disabled modules using "dnf module provides" (RhBug:1629667)
  - Group install takes obsoletes into account (RhBug:1761137)
  - Improve handling of vars
  - Do not load metadata for repolist commands (RhBug:1697472,1713055,1728894)
  - Fix messages for starting and failing scriptlets (RhBug:1724779)
  - Don't show older install-only pkgs updates in updateinfo (RhBug:1649383,1728004)
  - Add --ids option to the group command (RhBug:1706382)
  - Add --with_cve and --with_bz options to the updateinfo command (RhBug:1750528)


author: Ales Matej <amatej@redhat.com> - 4.2.17-2
changelog:
  - Update to 4.2.17
  - Enable versionlock for check-update command (RhBug:1750620)
  - Add error message when no active modules matched (RhBug:1696204)
  - Log mirror failures as warning when repo load fails (RhBug:1713627)
  - dnf-automatic: Change all systemd timers to a fixed time of day (RhBug:1754609)
  - DNF can use config from the remote location (RhBug:1721091)
  - [doc] update reference to plugin documentation (RhBug:1706386)
  - [yum compatibility] Report all packages in repoinfo
  - [doc] Add definition of active/inactive module stream
  - repoquery: Add a switch to disable modular excludes
  - Report more informative messages when no match for argument (RhBug:1709563)
  - [doc] Add description of excludes in dnf
  - Report more descriptive message when removed package is excluded
  - Add module repoquery command
  - Fix assumptions about ARMv8 and the way the rpm features work (RhBug:1691430)
  - Add Requires information into module info commands
  - Enhance inheritance of transaction reasons (RhBug:1672618,1769788)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.2.17-3
changelog:
  - Do a substitution of variables in repo_id (RhBug:1748841)
  - Respect order of config files in aliases.d (RhBug:1680489)
  - [doc] Remove note about user-agent whitelist (RhBug:1777255)
  - Fix detection of the latest module (RhBug:1781769)


author: Ales Matej <amatej@redhat.com> - 4.2.17-4
changelog:
  - Fix alias processing with '\' escaping (RhBug:1680482)
  - [doc] Explain the backslash notation also near the example (RhBug:1680482)
  - Better descriptions for infinite aliases recursion (RhBug:1680488)
  - Improve help for 'dnf module' command (RhBug:1758447)
  - Unify downgrade exit codes with upgrade (RhBug:1759847)
  - Honor priority with check-update (RhBug:1769466)
  - Add shell restriction with local packages (RhBug:1773483)
  - Restore functionality of remove --oldinstallonly (RhBug:1774670)


author: Ales Matej <amatej@redhat.com> - 4.2.17-6
changelog:
  - Sort packages in transaction output by nevra (RhBug:1773436)
  - Add support of commandline packages by repoquery (RhBug:1784148)
  - [doc] Document that the include option was removed (RhBug:1786072)
  - New API function for setting loggers (RhBug:1788212)


author: Ales Matej <amatej@redhat.com> - 4.2.21-1
changelog:
  - Update to 4.2.21
  - Running with tsflags=test doesn't update log files
  - Allow disabling individual aliases config files (RhBug:1680566)
  - List arguments: only first empty value is used (RhBug:1788154)
  - Report missing profiles or default as broken module (RhBug:1790967)
  - Format history table to use actual terminal width (RhBug:1786316)
  - Handle custom exceptions from libdnf
  - Fix _skipped_packages to return only skipped (RhBug:1774617)
  - Add setter for tsi.reason
  - Add new hook for commands: Run_resolved
  - Clean also .yaml repository metadata
  - Use WantedBy=timers.target for all dnf timers (RhBug:1798475)
  - Fix completion helper if solv files not in roon cache (RhBug:1714376)
  - Add bash completion for 'dnf module' (RhBug:1565614)
  - Check command no longer reports  missing %pre and %post deps (RhBug:1543449)
  - Check if arguments can be encoded in 'utf-8'
  - Fix crash with "dnf -d 6 repolist" (RhBug:1812682)
  - Do not print the first empty line for repoinfo
  - Redirect logger and repo download progress when --verbose
  - Respect repo priority when listing packages (RhBug:1800342)
  - Remove misleading green color from the "broken dependencies" lines (RhBug:1814192)
  - [repoquery] Fix rich deps matching by using provide expansion from libdnf (RhBug:1534123)
  - [repoquery] Do not protect running kernel for --unsafisfied (RhBug:1750745)
  - [doc] Document the retries config option only works for packages (RhBug:1783041)
  - [doc] repoquery --what* with  multiple arguments (RhBug:1790262)
  - [doc] Remove incorrect information about includepkgs (RhBug:1813460)
  - [doc] Document that list and info commands respect repo priority
  - [doc] Document color options


author: Nicola Sella <nsella@redhat.com> - 4.2.23-1
changelog:
  - Update to 4.2.23
  - Fix behavior of `install-n` command
  - Fix behavior of `localinstall` command
  - Fix behavior of `autoremove-n` command
  - Fix behavior of `remove-n` command
  - Fix behavior of `repoquery-n` command
  - Fix behavior of `list-updateinfo` and related aliases
  - Refactor code in `repoinfo` to use opts.command correctly.
  - Add myself to list of contributors
  - Add updated to verbose output of updateinfo list (RhBug: 1801092)
  - Fix a couple of missed grammatical errors in updateinfo docs.
  - Add comment option (RhBug:1773679)
  - Better wording of dnssec email parsing error.
  - Print nicer DnssecErrors (RhBug:1813244)
  - Add new API for handling gpg signatures (RhBug:1339617)
  - Verify GPG signatures (RhBug:1793298)
  - Fix a syntax typo
  - Fix up Conflicts: on python-dnf-plugins-extras so it actually works
  - [doc] Move yum-plugin-post-transaction-actions to dnf-plugins-core
  - Remove args "--set-enabled", "--set-disabled" from DNF (RhBug:1727882)
  -  Search command is now alphabetical (RhBug:1811802)
  - Fix downloading packages with full URL as their location
  - repo: catch libdnf.error.Error in addition to RuntimeError in load() (RhBug:1788182)
  - History tbl to max size when redirect to file (RhBug:1786335,1786316)


author: Nicola Sella <nsella@redhat.com> - 4.2.23-3
changelog:
  - Add logfilelevel configuration (RhBug:1802074)
  - [doc] Enhance repo variables documentation (RhBug:1848161,1848615)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.2.6-1
changelog:
  - Update to 4.2.6
  - Use improved config parser that preserves order of data
  - Follow RPM security policy for package verification
  - Update modules regardless of installed profiles
  - [conf] Use environment variables prefixed with DNF_VAR_
  - Allow adjustment of repo from --repofrompath (RhBug:1689591)
  - Allow globs in setopt in repoid part
  - Add command abbreviations (RhBug:1634232)
  - Installroot now requires absolute path
  - librepo: Turn on debug logging only if debuglevel is greater than 2 (RhBug:1355764,1580022)
  - Document cachedir option (RhBug:1691365)
  - Enhance documentation - API examples
  - Enhance documentation of --whatdepends option (RhBug:1687070)
  - Update documentation: implemented plugins; options; deprecated commands (RhBug:1670835,1673278)
  - [doc] Add info of relation update_cache with fill_sack (RhBug:1658694)
  - Rename man page from dnf.automatic to dnf-automatic to match command name
  - Fix alias list command (RhBug:1666325)
  - Fix behavior  of ``--bz`` option when specifying more values
  - Add protection of yum package (RhBug:1639363)
  - Fix ``list --showduplicates`` (RhBug:1655605)
  - Retain order of headers in search results (RhBug:1613860)
  - Solve traceback with the "dnf install @module" (RhBug:1688823)
  - Fix multilib obsoletes (RhBug:1672947)
  - Do not remove group package if other packages depend on it
  - Remove duplicates from "dnf list" and "dnf info" outputs
  - Fix the installation of completion_helper.py
  - Fix formatting of message about free space required
  - Fix installation failiure when duplicit RPMs are specified (RhBug:1687286)
  - Fix issues with terminal hangs when attempting bash completion (RhBug:1702854)
  - Allow plugins to terminate dnf (RhBug:1701807)
  - [provides] Enhanced detecting of file provides (RhBug:1702621)
  - [provides] Sort the output packages alphabetically


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.2.7-1
changelog:
  - Update to 4.2.7
  - Fix package reinstalls during yum module remove (RhBug:1700529)
  - Fail when "-c" option is given nonexistent file (RhBug:1512457)
  - Reuse empty lock file instead of stopping dnf (RhBug:1581824)
  - Propagate comps 'default' value correctly (RhBug:1674562)
  - Better search of provides in /(s)bin/ (RhBug:1657993)
  - Add detection for armv7hcnl (RhBug:1691430)
  - Fix group install/upgrade when group is not available (RhBug:1707624)
  - Report not matching plugins when using --enableplugin/--disableplugin
    (RhBug:1673289) (RhBug:1467304)
  - Add support of modular FailSafe (RhBug:1623128)
  - Replace logrotate with build-in log rotation for dnf.log and dnf.rpm.log
    (RhBug:1702690)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.2.7-3
changelog:
  - Update localizations from zanata (RhBug:1689982)
  - Accept multiple specs in repoquery options (RhBug:1667898,1656801)
  - Prevent switching modules in all cases (RhBug:1706215)
  - Change synchronization of rpm transaction to swdb (RhBug:1737328)
  - Print rpm error messages during transaction (RhBug:1677199)
  - Report missing default profile as an error (RhBug:1669527,1724564)
  - Describe a behavior when plugin is removed (RhBug:1700741)


author: Nicola Sella <nsella@redhat.com> - 4.4.2-3
changelog:
  - Backport patches
  - Log scriptlets output also for API users (RhBug:1847340)
  - Post transaction summary is logged for API users (RhBug:1855158)


author: Nicola Sella <nsella@redhat.com> - 4.4.2-4
changelog:
  - `dnf history` operations that work with comps correctly
  - Remove sourcepackages from install/upgrade set
  - Fix documentation of globs not supporting curly brackets


author: Nicola Sella <nsella@redhat.com> - 4.4.2-7
changelog:
  - Make log rotated permissions match initial log permissions (RhBug:1894344)
  - Add new attribute for Package - from_repo
  - Change behaviour of Package().from_repo
  - Package: add a get_header() method


author: Nicola Sella <nsella@redhat.com> - 4.4.2-8
changelog:
  - Add api function: fill_sack_from_repos_in_cache (RhBug:1865803)
  - Add tests and docs for fill_sack_from_repos_in_cache (RhBug:1865803)
  - Run tests for fill_sack_from_repos_in_cache in installroot


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.7.0-4
changelog:
  - Add fail_fast parameter to _download_remote_payloads() method
  - Throw CompsError when a group or environment is not found for the install methods
  - Respect cacheonly in python dnf API (RhBug:1862970)
  - [doc] Improve description of multilib_policy=all (RhBug:1996681,1995630)
  - [doc] Document default colors


author: Lukas Hrazky <lhrazky@redhat.com> - 4.7.0-8
changelog:
  - Add documentation for query api flags
  - Fix processing of download errors
  - Fix history undo on a Reason Change
  - Fix remove when no repos are enabled
  - Improve "proxy" configuration option documentation


author: Richard W.M. Jones <rjones@redhat.com> - 4.7.0-10
changelog:
  - Backport fix for leaks of libsolv's page file descriptors in Base object
    resolves: rhbz#2087734
  - Include instructions for regenerating patches.


author: Lukas Hrazky <lhrazky@redhat.com> - 4.7.0-11
changelog:
  - [doc] Describe how gpg keys are stored for `repo_ggpcheck`
  - Add only relevant pkgs to upgrade transaction (RhBug:2097757)


author: EL Errata <el-errata_ww@oracle.com> - 4.7.0-11.0.1
changelog:
  - Fixed python stack trace with updateinfo list cves command [Orabug: 32749660]
  - Replaced upstream bugzilla reporting reference. [Orabug: 32829849]


author: Lukas Hrazky <lhrazky@redhat.com> - 4.7.0-12
changelog:
  - Allow passing plugin parameters with dashes in names (RhBug:1980712)
  - Fix upgrade from file to noarch pkg (RhBug:2006018)
  - Add support for group upgrade rollback (RhBug:2016070)
  - Expose plugin unload method to API (RhBug:2047251)
  - Add doc related to --destdir and --downloadonly options (RhBug:2100811)
  - Set default value for variable to prevent crash (RhBug:2091636)
  - Don't include resolved advisories for obsoletes with sec. filters (RhBug:2101421)


author: Nicola Sella <nsella@redhat.com> - 4.7.0-13
changelog:
  - Add support for rollback of group upgrade rollback (RhBug:2016070)
  - Move system-upgrade plugin to core (RhBug:2054235)
  - Fix plugins unit tests + unload plugins upon their deletion (RhBug:2134309)


author: Nicola Sella <nsella@redhat.com> - 4.7.0-15
changelog:
  - Ignore processing variable files with unsupported encoding (RhBug:2141215)
  - Better explain traceback of rpm.error with dnf


author: Jaroslav Rohel <jrohel@redhat.com> - 4.7.0-17
changelog:
  - Omit src RPMs from check-update (RhBug:2151910,2203069)
  - automatic: Fix online detection with proxy (RhBug:2022440,2189851)


author: EL Errata <el-errata_ww@oracle.com> - 4.7.0-19.0.1
changelog:
  - Replaced bugzilla.oracle.com references [Orabug: 35475856]
  - Fixed python stack trace with updateinfo list cves command [Orabug: 32749660]
  - Replaced upstream bugzilla reporting reference. [Orabug: 32829849]


author: Jaroslav Rohel <jrohel@redhat.com> - 4.7.0-20
changelog:
  - Remove /usr/bin from sys.path to avoid accidentally importing garbage (RHEL-1245)
  - Fix japanese translations (RHEL-6393)
  - Fix substitution in kay-value-pair list in add_new_repo (RHEL-11786)


author: Marek Blaha <mblaha@redhat.com> - 4.7.0-21
changelog:
  - automatic: catch OSError, not SMTPException on smtp errors (RHEL-71545)
  - automatic: Check availability of config file (RHEL-71545)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.7.0-1
changelog:
  - Update to 4.7.0
  - New optional parameter for filter_modules enables following modular obsoletes based on a config option module_obsoletes
  - Fix module remove --all when no match spec (RhBug:1904490)
  - Make an error message more informative (RhBug:1814831)
  - Expand history to full term size when output is redirected (RhBug:1852577) (RhBug:1852577,1906970)
  - Print additional information when verifying GPG key using DNS
  - Enhanced detection of plugins removed in transaction (RhBug:1929163)
  - Improve repo config path ordering to fix a comps merging issue (RhBug:1928181)
  - Keep reason when package is removed (RhBug:1921063)
  - Improve mechanism for application of security filters (RhBug:1918475)
  - [API] Add new method for reset of security filters
  - Remove hardcoded logfile permissions (RhBug:1910084)
  - Preserve file mode during log rotation (RhBug:1910084)
  - Increase loglevel in case of invalid config options
  - Prevent traceback (catch ValueError) if pkg is from cmdline
  - Check for specific key string when verifing signatures (RhBug:1915990)
  - Use rpmkeys binary to verify package signature (RhBug:1915990)
  - [doc] Improve description of modular filtering
  - [doc] deprecated alias for dnf repoquery --deplist <deplist_option-label>
  - [doc] Describe install with just a name and obsoletes (RhBug:1902279)
  - [doc] Fix: "sslcacert" contains path to the file
  - [doc] Added proxy ssl configuration options, increase libdnf require
  - [doc] Update documentation for module_obsoletes and module_stream_switch
  - [doc] Improve documentation for Hotfix repositories
  - [doc] fix: "makecache" command downloads only enabled repositories
  - [doc] Add info that maximum parallel downloads is 20
  - [doc] installonly_limit documentation follows behavior
  - [doc] Add documentation for config option sslverifystatus (RhBug:1814383)
  - The noroot plugin no longer exists, remove mention


author: EL Errata <el-errata_ww@oracle.com> - 4.7.0-4.0.1
changelog:
  -Fixed python stack trace with updateinfo list cves command [Orabug: 32749660]
  - Replaced upstream bugzilla reporting reference. [Orabug: 32829849]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.7-1
changelog:
  - Update to 4.0.7
  - Use improved config parser that preserves order of data
  - Fix: copr disable command traceback (RhBug:1693551)
  - [doc] state repoid as repo identifier of config-manager (RhBug:1686779)
  - [leaves] Show multiply satisfied dependencies as leaves
  - [download] Fix downloading an rpm from a URL (RhBug:1678582)
  - [download] Do not download src without ``--source`` (RhBug:1666648)
  - [download] Fix problem with downloading src pkgs (RhBug:1649627)
  - [download] Fix download of src when not the latest requested (RhBug:1649627)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.8-1
changelog:
  - Update to 4.0.8
  - [reposync] Enable timestamp preserving for downloaded data (RhBug:1688537)
  - [reposync] Download packages from all streams (RhBug:1714788)
  - Make yum-copr manpage available (RhBug:1673902)
  - [needs-restarting] Add --reboothint option (RhBug:1192946) (RhBug:1639468)
  - Set the cost of ``_dnf_local`` repo to 500, to make it preferred to normal
    repos


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.8-2
changelog:
  - Update localizations from zanata (RhBug:1689984)
  - Rename dnf-utils to yum-utils (RhBug:1722093)
  - [builddep] Report all rpm errors (RhBug:1724668)
  - [config-manager] Behaviour of --setopt (RhBug:1702678)


author: Ales Matej <amatej@redhat.com> - 4.0.10-1
changelog:
  - Update to 4.0.10
  - debuginfo-install: Update both debuginfo and debugsource for updated package (RhBug:1586084)
  - copr: Support multilib repofiles (RhBug:1393664)
  - copr: Fix disable if copr instance has non-default port
  - copr: Fix repoid when using subdirectories in copr project


author: Ales Matej <amatej@redhat.com> - 4.0.11-1
changelog:
  - Update to 4.0.11
  - [spec] Specify attributes for ghost file (RhBug:1754463)
  - download: add the --debugsource option (RhBug:1637008)
  - Fix incorrect handling richdeps in buildep (RhBug:1756902)


author: Ales Matej <amatej@redhat.com> - 4.0.12-1
changelog:
  - Update to 4.0.12
  - [reposync] Add --urls option (RhBug:1686602)
  - [versionlock] Add --raw option (RhBug:1645564)
  - [doc] move manpages for plugins to "dnf-PLUGIN" (RhBug:1706386)
  - Add new plugin post-transaction-actions (RhBug:967264)
  - [builddep] Add --skip-unavailable switch (RhBug:1628634)
  - [versionlock] Don't apply excludes on @System (RhBug:1726712)
  - [reposync] Ignore only modular excludes (RhBug:1750273)


author: Ales Matej <amatej@redhat.com> - 4.0.12-2
changelog:
  - [config-manager] Allow use of --set-enabled without arguments (RhBug:1679213)
  - [reposync] Fix --delete with multiple repos (RhBug:1774103)
  - Redesign reposync --latest for modular system (RhBug:1775434)


author: Ales Matej <amatej@redhat.com> - 4.0.15-1
changelog:
  - Update to 4.0.15
  - Fix: config_manager respect config file location during save
  - Fix conflict for dnf download --resolve (RhBug:1787908)
  - Fix: don't open stdin if versionlock is missing (RhBug:1785563)
  - config-manager calls parser error when without options (RhBug:1782822)
  - Update reposync.py with --norepopath option
  - Support remote files in dnf builddep
  - [versionlock] Prevent conflicting/duplicate entries (RhBug:1782052)
  - [download] Respect repo priority (RhBug:1800342)
  - [doc] Skip creating and installing migrate documentation for Python 3+


author: Nicola Sella <nsella@redhat.com> - 4.0.16-1
changelog:
  - Update to 4.0.16
  - [versionlock] Take obsoletes into account (RhBug:1627124)
  - Move args "--set-enabled", "--set-disabled" from DNF (RhBug:1727882)
  - Add missing arguments --set-enabled/--set-diabled into error message
  - Warn when --enablerepo/--disablerepo args were passed (RhBug:1727882)
  - [copr] add support for enabling/disabling runtime dependencies
  - [copr] no-liability text to be always printed


author: Nicola Sella <nsella@redhat.com> - 4.0.17-1
changelog:
  - [repomanage] Add modular support (RhBug:1804720)
  - [needs-restarting] add options using .conf file (RhBug:1810123)


author: Marek Blaha <mblaha@redhat.com> - 4.0.17-4
changelog:
  - Debug-restore command do not remove installonly packages (RhBug:1844533)
  - Update translations (RhBug:1820546)


author: Nicola Sella <nsella@redhat.com> - 4.0.18-1
changelog:
  - Update to 4.0.18
  - [needs-restarting] Fix plugin fail if needs-restarting.d does not exist
  - [needs-restarting] add kernel-rt to reboot list
  - Fix debug-restore command
  - [config-manager] enable/disable comma separated pkgs (RhBug:1830530)
  - [debug] Use standard demands.resolving for transaction handling
  - [debug] Do not remove install-only packages (RhBug:1844533)
  - return error when dnf download failed
  - README: Reference Fedora Weblate instead of Zanata
  - [reposync] Add latest NEVRAs per stream to download (RhBug: 1833074)
  - copr: don't try to list runtime dependencies


author: Marek Blaha <mblaha@redhat.com> - 4.0.18-2
changelog:
  - Introduce groups-manager plugin (RhBug:1826016)
  - [needs-restarting] add -s to list services (RhBug:1772939)


author: Jaroslav Mracek <jmracek@redhat.com> 3.0.1-1
changelog:
  - Enhanced documentation
  - Resolves: rhbz#1576594
  - Resolves: rhbz#1530081
  - Resolves: rhbz#1547897
  - Resolves: rhbz#1550006
  - Resolves: rhbz#1431491
  - Resolves: rhbz#1516857
  - Resolves: rhbz#1499623
  - Resolves: rhbz#1489724


author: Jaroslav Mracek <jmracek@redhat.com> - 3.0.4-1
changelog:
  - [copr] Huge upgrade of copr plugin
  - [spec] Disable building python2 modules on Fedora 30+
  - Add characters into repo URL sanitization (RhBug:1615416)
  - copr: add support for multiple copr instances (RhBug:1478208)
  - Redirect repo progress to std error (RhBug:1626011)
  - Resolves: rhbz#1578787 - repodiff command not available in dnf-utils


author: Jaroslav Mracek <jmracek@redhat.com> - 4.0.0-1
changelog:
  - Update to 4.0.0
  - Enhance documentation
  - [repoclosure] check every --pkg attribute separately
  - [repoclosure] Now accepts nevra as a argument of --pkg option
  - [reposync] enhancements (RhBug:1550063,1582152,1550064,1405789,1598068)
  - package-cleanup: remove --oldkernels
  - Download only packages with unique NEVRAs (RhBug:1612874)


author: Jaroslav Mracek <jmracek@redhat.com> - 4.0.2-1
changelog:
  - Added repodif command
  - copr: fix enabling Rawhide repository
  - Add needs-restarting CLI shim
  - [reposync] Fix traceback with --quiet option
  - [versionlock] Accept more pkgspec forms


author: Daniel Mach <dmach@redhat.com> - 4.0.2.1-1
changelog:
  - zanata update
  - Attribute repo.metadata._comps_fn does not exist anymore
  - [download] Fix traceback when local rpm / url is passed
  - Run transaction hook only if transaction
  - [versionlock] Accept more NEVRA forms in the deletion code (RhBug:1654529)
  - [spec] Obsolete yum-utils < 1.1.31-513 (RhBug: 1579322)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.21-2
changelog:
  - [versionlock] Locking obsoleted package does not make the obsoleter unavailable (RhBug:1957280) 
  - [repomanage] Allow running with metadata only
  - [repomanage] Enhance repomanage documentation (RhBug:1898293)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.21-4
changelog:
  - [reposync] Don't stop downloading packages on the first error (RhBug:2009894)
  - [copr] Fix traceback of copr search (RhBug:2019868)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.21-7
changelog:
  - [groups-manager] Use full NEVRA for matching packages instead of only name (RhBug:2013633)
  - [versionlock] Fix: Multiple package-name-spec arguments don't lock (RhBug:2013324)
  - [versionlock] Update documentation for adding specifi version (RhBug:2013332)


author: Lukas Hrazky <lhrazky@redhat.com> - 4.0.21-12
changelog:
  - [repomanage] Use modules only from repo they are handling
  - [repomanage] Add new option --oldonly
  - Skip all non rpm tsi for transaction_action plugins
  - Update translations


author: Lukas Hrazky <lhrazky@redhat.com> - 4.0.21-13
changelog:
  - [copr] Fix 'dnf copr enable' on Fedora 35
  - [copr] Disable dnf playground command
  - [copr] Fix baseurl for centos stream chroot
  - [copr] Silence a deprecation warning in plugins/copr.py
  - [copr] Shorter verification that the project exists
  - [copr] Better error message for dnf copr enable
  - [copr] allow specifying protocol as part of --hub


author: Nicola Sella <nsella@redhat.com> - 4.0.21-17
changelog:
  - offline-upgrade: add support for security filters (RhBug:1939975,2139324)
  - Move system-upgrade plugin to core (RhBug:2054235)


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 4.0.21-19.0.1
changelog:
  - Update upstream references [Orabug: 35397664]
  - Update upstream references [Orabug: 35326894]
  - needs-restarting: Fix boot time derivation for systems with no rtc [Orabug: 35349682]
  - repoclosure - raise exception for typos in repository name [Orabug: 33074226]


author: Jaroslav Rohel <jrohel@redhat.com> - 4.0.21-20
changelog:
  - versionlock: Use only the most specific NEVRA (RhBug:1961217)
  - Fix boot time derivation for systems with no rtc (RhBug:2166444,2182157)
  - Doc update for reposync (RhBug:2132383,2182004)
  - reposync: Implement --safe-write-path option (RhBug:1898089,2203766)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.0.21-21
changelog:
  - Remove patch: "reposync: Implement --safe-write-path option (RhBug:1898089,2203766)" (RhBug:2208444)


author: Craig Guiller <craig.guiller@oracle.com> - 4.0.21-23.0.1
changelog:
  - Added kernel uek and uek core into needs restart list [Orabug: 35828587]
  - Update upstream references [Orabug: 35397664]
  - Update upstream references [Orabug: 35326894]
  - repoclosure - raise exception for typos in repository name [Orabug: 33074226]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.21-1
changelog:
  - Update to 4.0.21
  - [repomanage] Don't use cached metadata (RhBug:1899852)
  - [needs-restarting] fix -r in nspawn containers (RhBug:1913962,1914251)
  - doc: add packages to needs-restarting conf
  - Set blacklist subcommand as deprecated
  - Removed dependency on dnf.yum.misc.Checksum class (RhBug:1935465)
  - Bugs fixed (RhBug:1914827,1916782)


author: Ales Matej <amatej@redhat.com> - 4.0.6-1
changelog:
  - [system-upgrade] Use --system-upgrade plymouth mode (RhBug:1681584)
  - [system-upgrade] Fix traceback caused by setting gpgcheck options (RhBug:1751103,1746346)
  - Fix kickstart plugin (RhBug:1649093)
  - [system-upgrade] Ensure identical transaction in download and update steps (RhBug:1758588)
  - [system-upgrade] Provide distro specific url for help with system-upgrade


author: Ales Matej <amatej@redhat.com> - 4.0.8-2
changelog:
  - Backport patch to fix distribution issues with missing upgrade path between dist versions (RhBug:1767351)


author: Ales Matej <amatej@redhat.com> - 4.0.8-3
changelog:
  - Fix patch to fix distribution issues with missing upgrade path between dist versions (RhBug:1767351)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.0-1
changelog:
  - New version
    Resolves: rhbz#1333781
  - Switched to autotools
  - Various spec file cosmetic fixes (e.g. used optflags)


author: Livy Ge <livy.ge@oracle.com> - 049-10.git20190115.0.1
changelog:
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: Alex Burmashev <alexander.burmashev@oracle.com> - 049-10.git20190115.0.4
changelog:
  - Fix iscsi code strictly checking for is_boot_target [Orabug: 29864620]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]


author: Lukas Nykryn <lnykryn@redhat.com> - 048-34.git20180814
changelog:
  - TEST-50-MULTINIC/test.sh: fixed server startup
  - kernel-network-modules: add vlan kernel modules
  - test: fixed KVERSION and qemu backwards compatiblity
  - TEST-70-BONDBRIDGETEAMVLAN: load vlan kernel modules
  - test: also output server.log on failure
  - TEST-50-MULTINIC: s/--device/-device
  - enable parallel test suite
  - TEST-31-ISCSI-MULTI: use different port than TEST-30
  - load modules earlier for iscsi via dhcp root-path
  - test/{TEST-50-MULTINIC,TEST-70-BONDBRIDGETEAMVLAN}: use qemu-3.0 syntax
  - multipath-shutdown: fix shell syntax
  - dracut.spec: remove warpclock from z-series, not the other way round
  - iscsi: remove $() where it does not fit
  - mdraid: better handling of various UUID formats
  - dracut-functions: fix the word splitting
  - Add gpio and pinctrl drivers for arm*/aarch64
  - mdraid/parse-md.sh: also accept rd.md.uuid with ":"
  - spec: sort modules
  - spec: warpclock is not available on s390 or s390x
  - dracut.spec: Remove needless use of defattr
  - dracut.spec: add 00warpclock dracut module
  - Bring back 51-dracut-rescue-postinst.sh
  - lsinitrd: update help message and man page
  - lsinitrd: optimize performance when handling multiple files
  - lsinitrd: allow to only unpack certain files
  - NEWS: forgot to update the latest version
  - 00warpclock: Set correct timezone
  - dracut-install: skip modules with empty path
  - Record loaded kernel modules when hostonly mode is enabled
  - modules.d/95fcoe/cleanup-fcoe.sh: chmod +x
  - TEST-40-NBD: disable for now
  - TEST-30-ISCSI: readd multiple target test


author: Natalya Naumova <natalya.naumova@oracle.com> - 049-10.git20190115.0.7.1
changelog:
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738] (Fred Herard)
  - Fix kernel-core POSTTRANS script issues with kernel command line [Orabug: 29542203] (Petr Benes)
  - Fix dhclient classless static route parsing [Orabug: 28881975] (Frank Deng)
  - Fix iscsi code strictly checking for is_boot_target [Orabug: 29864620] (Alex Burmashev)
  - Update list of necessary files after squashfs execution [Orabug: 29864620] (Alex Burmashev)
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195] (Alex Burmashev)
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988] (Alex Burmashev)
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156] (Alex Burmashev)
  - Fix BOOTPROTO calculation for iscsi [Orabug: 29518713] (Alex Burmashev)
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: Lukas Nykryn <lnykryn@redhat.com> - 049-127.git20210107
changelog:
  - match the whole string
  - match simplified rd.zfcp format too
  - base: hardcode rhel red
  - 95iscsi:
  - iscsi: fix error messages with iSCSI root
  - 95nvmf: add module for NVMe-oF
  - Write dns values passed by ip argument to ifcfg-* files
  - dracut.sh: added help for --regenerate-all
  - 35network-legacy: fix classless static route parsing
  - network: fix glob matching ipv6 addresses
  - dasd: only install /etc/dasd.conf if present
  - 90multipath: install kpartx's 11-dm-parts.rules
  - network/net-lib.sh: Configure all iBFT interfaces
  - Change the order of NFS servers during the boot NFS server
  - install: string_hash_func should not be fed with NULL
  - Consider also drm_dev_register when looking for gpu driver
  - fix graphics startup failure with the rhgb paramter in
  - Configure the runner for team interfaces
  - network-manager: set kernel hostname from the command line
  - 95nvmf: add NVMe over TCP support
  - 95fcoe: Add the rd.nofcoe option to disable the FCoE module
  - 04watchdog: split the watchdog module install
  - dracut.spec: include the 04watchdog-modules module
  - 95fcoe: ensure needed modules are installed


author: Lukas Nykryn <lnykryn@redhat.com> - 049-131.git20210107
changelog:
  - 00systemd: when putting systemd-vconsole-setup.service as a
  - 51-dracut-rescue.install: Don't use BLS fragment shipped by


author: Lukas Nykryn <lnykryn@redhat.com> - 049-133.git20210112
changelog:
  - 95fcoe: Fix startup when fcoe module is included
  - Fix pre-trigger stage by replacing exit with return in


author: EL Errata <el-errata_ww@oracle.com> - 049-135.git20210121.0.1
changelog:
  - Add manpage for single-dhcp [Orabug 32201686]
  - Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
  - Use pgrep in dhcp-multi.sh to make efficient and error free [Orabug 32254008]
  - Send DHCP request in parallel on all interfaces for 80% boot time improvement [Orabug: 32034110]
  - Revert fix for [Orabug: 31404167]
  - drop 51-dracut-rescue.install patch
  - Send DHCP query only on min BDF device to improve boot times by 50-60 secs [Orabug: 31404167]
  - add ofb and cts to 01fips kernel module list [Orabug: 30622737]
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
  - Fix kernel-core POSTTRANS script issues with kernel command line [Orabug: 29542203]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
  - Fix BOOTPROTO calculation for iscsi [Orabug: 29518713]
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: Lukas Nykryn <lnykryn@redhat.com> - 049-151.git20210719
changelog:
  - Drop 51-dracut-rescue-postinst.sh entirely
  - fix(fips): add dh and ecdh ciphers
  - 35network-legacy: discard pointless RTNETLINK message
  - 95fcoe: don't install if there is no FCoE hostonly devices
  - 95nfs: set correct ownership and permissions for statd 
  - fix(dracut.sh): harden dracut against GZIP environment
  - fix(multipath): stop multipath before udev db cleanup
  - fix(dracut-functions): implement a cache for get_maj_min
  - fix(dracut-functions): get_maj_min without
  - fix(fcoe): rd.nofcoe=0 should disable fcoe
  - fix(fcoe): rename rd.nofcoe to rd.fcoe
  - fix(mdraid): remove offroot
  - fix(mdraid): add grow continue service
  - net-lib.sh: support infiniband network mac addresses
  - 95nvmf: add nvmf-autoconnect script


author: Lukas Nykryn <lnykryn@redhat.com> - 049-188.git20210802
changelog:
  - dracut-functions: fix botched backport
  - squash: unsquash the root image instead of mounting it on
  - 99squash: fail early if can't install require modules in
  - 99squash: Don't hardcode the squash sub directories
  - 99squash: improve pre-requirements check
  - Fixed some SUSE specific typos and outputs
  - 99squash: simplify the code
  - 99squash: Check require module earlier, and properly
  - fix(99squash): use kernel config instead of modprobe to check
  - kill bogus comment
  - busybox: simplify listing of supported utilities
  - fix: use find_binary
  - fix: shellcheck for modules.d/99squash/setup-squash.sh
  - fix: shellcheck for modules.d/99squash/clear-squash.sh
  - fix: shellcheck for modules.d/99squash/module-setup.sh
  - fix(squash): this module shouldn't depend on bash
  - refactor(squash): move the post install scripts into the
  - fix: revise squash module checks
  - fix(squash): post install should be the last step before
  - refactor(squash): move all setup code to init-squash.sh
  - feat(squash): install and depmod modules seperately
  - refactor(squash): don't record mount points in text file
  - lsinitrd: list squash content as well
  - refactor(squash): structure in a cleaner way
  - feat(squash): use busybox for early setup if available
  - feat: squash module follow --compress option
  - perf: disable initrd compression when squash module is
  - fix(squash): shellcheck for modules.d/99squash
  - fix(squash): don't mount the mount points if already mounted
  - feat(squash): install umount util
  - fix(squash): create relative symlinks
  - fix(dracut.sh): handle '-i' option to include files beginning
  - fix(dracut.sh): handle symlinks appropriately while using
  - fix(squash): keep ld cache under initdir
  - dracut-functions: backport block_is_* functions
  - fix(squash): fixes related to squash module rebase
  - fix(squash): remove tailing '/' when installing ld.so.conf.d


author: EL Errata <el-errata_ww@oracle.com> - 049-191.git20210920.0.1
changelog:
  - Change installation dir in network legacy module-setup so that file is never missing [Orabug: 33516170]
  - Fix paths in squash module, so that correct modprobe is installed [Orabug: 33514517]
  - Restore 51-dracut-rescue-postinst.sh for anaconda compatibility
  - Install missing 68-del-part-node.rules [Orabug: 32827579]
  - Add manpage for single-dhcp [Orabug 32201686]
  - Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
  - Use pgrep in dhcp-multi.sh to make efficient and error free [Orabug 32254008]
  - Send DHCP request in parallel on all interfaces for 80% boot time improvement [Orabug: 32034110]
  - Revert fix for [Orabug: 31404167]
  - drop 51-dracut-rescue.install patch
  - Send DHCP query only on min BDF device to improve boot times by 50-60 secs [Orabug: 31404167]
  - add ofb and cts to 01fips kernel module list [Orabug: 30622737]
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
  - Fix kernel-core POSTTRANS script issues with kernel command line [Orabug: 29542203]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
  - Fix BOOTPROTO calculation for iscsi [Orabug: 29518713]
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: Pavel Valena <pvalena@redhat.com> - 049-201.git20220131
changelog:
  - ci: introduce C8S based GHA CI
  - ci: backport TEST-21-NFS-NM
  - dracut.sh: fix early microcode detection logic
  - fix(url-lib): make pre-pivot hook separetely per nfs mount
  - fix(watchdog): replace return with echo
  - fix(network): add errors and warnings when network interface
  - dracut.sh: add check for invalid configuration files
  - fips: removed false-positive 'FATAL: Module xxx not found'
  - fix(shutdown): be robust against forced shutdown
  - fix(fips): handle s390x OSTree systems


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 049-201.git20220131.0.1
changelog:
  - Enable the code to create ifcfg file [Orabug: 33888951]
  - Skip parse iscsiroot.sh on PV VMs [Orabug: 33676753]
  - Add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs [Orabug: 33603682]
  - Change installation dir in network legacy module-setup so that file is never missing [Orabug: 33516170]
  - Fix paths in squash module, so that correct modprobe is installed [Orabug: 33514517]
  - Restore 51-dracut-rescue-postinst.sh for anaconda compatibility
  - Install missing 68-del-part-node.rules [Orabug: 32827579]
  - Add manpage for single-dhcp [Orabug 32201686]
  - Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
  - Use pgrep in dhcp-multi.sh to make efficient and error free [Orabug 32254008]
  - Send DHCP request in parallel on all interfaces for 80% boot time improvement [Orabug: 32034110]
  - Revert fix for [Orabug: 31404167]
  - drop 51-dracut-rescue.install patch
  - Send DHCP query only on min BDF device to improve boot times by 50-60 secs [Orabug: 31404167]
  - add ofb and cts to 01fips kernel module list [Orabug: 30622737]
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
  - Fix kernel-core POSTTRANS script issues with kernel command line [Orabug: 29542203]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
  - Fix BOOTPROTO calculation for iscsi [Orabug: 29518713]
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: Pavel Valena <pvalena@redhat.com> - 049-209.git20220815
changelog:
  - fix(95iscsi): Fix network setup
  - fix(dracut-systemd): correct service dependencies
  - feat(lvm): add new module lvmthinpool-monitor
  - fix(dracut-shutdown): add cleanup handler on failure


author: Pavel Valena <pvalena@redhat.com> - 049-218.git20221019
changelog:
  - Dracut: only login to one target at a time
  - iscsi: don't continue waiting if the root device is present
  - network: stop waiting for interfaces if root device is
  - iscsiroot: parse_iscsi_root overwrites command line args
  - iscsiroot: there's never more than one target per call
  - iscsiroot: try targets only once
  - iscsiroot: remove bashisms
  - fixup "Dracut: only login to one target at a time"
  - 35network-legacy: only skip waiting for interfaces if netroot


author: Pavel Valena <pvalena@redhat.com> - 049-221.git20221214
changelog:
  - fix(80lvmthinpool-monitor): use systemsctl instead of
  - fix(squash): build ld cache for squash loader
  - fix(network-manager): write DHCP filename option to dhcpopts


author: EL Errata <el-errata_ww@oracle.com> - 049-228.git20230802.0.1
changelog:
  - Fix typo in orabug33888951-dracut-Enable-the-code-to-create-ifcfg-file.patch [Orabug: 35268918]
  - Enable the code to create ifcfg file [Orabug: 33888951]
  - Skip parse iscsiroot.sh on PV VMs [Orabug: 33676753]
  - Add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs [Orabug: 33603682]
  - Change installation dir in network legacy module-setup so that file is never missing [Orabug: 33516170]
  - Fix paths in squash module, so that correct modprobe is installed [Orabug: 33514517]
  - Restore 51-dracut-rescue-postinst.sh for anaconda compatibility
  - Install missing 68-del-part-node.rules [Orabug: 32827579]
  - Add manpage for single-dhcp [Orabug 32201686]
  - Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
  - Use pgrep in dhcp-multi.sh to make efficient and error free [Orabug 32254008]
  - Send DHCP request in parallel on all interfaces for 80% boot time improvement [Orabug: 32034110]
  - Revert fix for [Orabug: 31404167]
  - drop 51-dracut-rescue.install patch
  - Send DHCP query only on min BDF device to improve boot times by 50-60 secs [Orabug: 31404167]
  - add ofb and cts to 01fips kernel module list [Orabug: 30622737]
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
  - Fix kernel-core POSTTRANS script issues with kernel command line [Orabug: 29542203]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
  - Fix BOOTPROTO calculation for iscsi [Orabug: 29518713]
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: Sam Booth <sam.booth@oracle.com> - 049-228.git20230802.0.2
changelog:
  - Remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] and reworks patch 0193 [Orabug: 36119898]


author: Pavel Valena <pvalena@redhat.com> - 049-231.git20231115
changelog:
  - fix(iscsi): do not exit in handle_netroot() if discovery
  - feat(systemd): install systemd-sysroot-fstab-check
  - fix(fcoe-uefi): exit early on empty vlan


author: Craig Guiller <craig.guiller@oracle.com> - 049-233.git20240115.0.1
changelog:
  - Revert the fixes for bugs 33676753 and 33888951 due to regressions [Orabug: 35656614]
  - Fix typo in orabug33888951-dracut-Enable-the-code-to-create-ifcfg-file.patch [Orabug: 35268918]
  - Enable the code to create ifcfg file [Orabug: 33888951]
  - Skip parse iscsiroot.sh on PV VMs [Orabug: 33676753]
  - Add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs [Orabug: 33603682]
  - Change installation dir in network legacy module-setup so that file is never missing [Orabug: 33516170]
  - Fix paths in squash module, so that correct modprobe is installed [Orabug: 33514517]
  - Restore 51-dracut-rescue-postinst.sh for anaconda compatibility
  - Install missing 68-del-part-node.rules [Orabug: 32827579]
  - Add manpage for single-dhcp [Orabug 32201686]
  - Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
  - Use pgrep in dhcp-multi.sh to make efficient and error free [Orabug 32254008]
  - Send DHCP request in parallel on all interfaces for 80% boot time improvement [Orabug: 32034110]
  - Revert fix for [Orabug: 31404167]
  - drop 51-dracut-rescue.install patch
  - Send DHCP query only on min BDF device to improve boot times by 50-60 secs [Orabug: 31404167]
  - add ofb and cts to 01fips kernel module list [Orabug: 30622737]
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
  - Fix kernel-core POSTTRANS script issues with kernel command line [Orabug: 29542203]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
  - Fix BOOTPROTO calculation for iscsi [Orabug: 29518713]
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: Pavel Valena <pvalena@redhat.com> - 049-237.git20250603
changelog:
  - fix(rescue): create hmac file for rescue kernel
  - fix(spec): drop %config from 50-network-legacy.conf


author: EL Errata <el-errata_ww@oracle.com> - 049-237.git20250603.0.1
changelog:
  - Refactor get_ucode_file [Orabug: 36989953]
  - Revert the fixes for bugs 33676753 and 33888951 due to regressions [Orabug: 35656614]
  - Fix typo in orabug33888951-dracut-Enable-the-code-to-create-ifcfg-file.patch [Orabug: 35268918]
  - Enable the code to create ifcfg file [Orabug: 33888951]
  - Skip parse iscsiroot.sh on PV VMs [Orabug: 33676753]
  - Add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs [Orabug: 33603682]
  - Change installation dir in network legacy module-setup so that file is never missing [Orabug: 33516170]
  - Fix paths in squash module, so that correct modprobe is installed [Orabug: 33514517]
  - Restore 51-dracut-rescue-postinst.sh for anaconda compatibility
  - Install missing 68-del-part-node.rules [Orabug: 32827579]
  - Add manpage for single-dhcp [Orabug 32201686]
  - Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
  - Use pgrep in dhcp-multi.sh to make efficient and error free [Orabug 32254008]
  - Send DHCP request in parallel on all interfaces for 80% boot time improvement [Orabug: 32034110]
  - Revert fix for [Orabug: 31404167]
  - drop 51-dracut-rescue.install patch
  - Send DHCP query only on min BDF device to improve boot times by 50-60 secs [Orabug: 31404167]
  - add ofb and cts to 01fips kernel module list [Orabug: 30622737]
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
  - Fix kernel-core POSTTRANS script issues with kernel command line [Orabug: 29542203]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
  - Fix BOOTPROTO calculation for iscsi [Orabug: 29518713]
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: Pavel Valena <pvalena@redhat.com> - 049-239.git20251127
changelog:
  - fix(multipath): disable user_friendly_names with mpathconf
  - fix(url-lib.sh): nfs_already_mounted() with trailing slash in


author: Lukas Nykryn <lnykryn@redhat.com> - 049-17.git20190725
changelog:
  - rngd: new module running early during boot to help generating entropy when system's default entropy sources are poor (e.g. use of SSD disks or UEFI RNG not available)


author: Lukas Nykryn <lnykryn@redhat.com> - 049-24.git20190802
changelog:
  - 95fcoe: load 'libfcoe' module as a fallback
  - 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases
  - dracut: let module handling function accept optional path option
  - squash: also squash systemctl if switch-root is not needed
  - squash: fix and simplify required_in_root
  - squash: squash systemd binary and udevadm


author: Tianyue Lan <tianyue.lan@oracle.com> - 049-27.git20190906.0.1
changelog:
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
  - Fix kernel-core POSTTRANS script issues with kernel command line [Orabug: 29542203]
  - Fix dhclient classless static route parsing [Orabug: 28881975]
  - Fix iscsi code strictly checking for is_boot_target [Orabug: 29864620]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
  - Fix BOOTPROTO calculation for iscsi [Orabug: 29518713]
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: EL Errata <el-errata_ww@oracle.com> - 049-27.git20190906.0.2.el8_1.1
changelog:
  - add ofb and cts to 01fips kernel module list [Orabug: 30622737]
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
  - Fix kernel-core POSTTRANS script issues with kernel command line [Orabug: 29542203]
  - Fix dhclient classless static route parsing [Orabug: 28881975]
  - Fix iscsi code strictly checking for is_boot_target [Orabug: 29864620]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
  - Fix BOOTPROTO calculation for iscsi [Orabug: 29518713]
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: Lukas Nykryn <lnykryn@redhat.com> - 049-60.git20191129
changelog:
  - 99squash: Only start the cleaner on switch-root
  - net-lib: check if addr exists before checking for dad state
  - always include sg module


author: Lukas Nykryn <lnykryn@redhat.com> - 049-63.git20200114
changelog:
  - network-legacy/ifup: fix typo when calling dhclient --timeout
  - network-legacy/ifup: dhclient should be started in oneshot mode
  - modules/network-manager: Install `ip`


author: Lukas Nykryn <lnykryn@redhat.com> - 049-68.git20200211
changelog:
  - Revert "wait for IPv6 RA if using none/static IPv6 assignment"
  - dhclient-script: ipv6 uses different variables for nameservers
  - 40network: bump rd.net.timeout.carrier to 10 seconds


author: Lukas Nykryn <lnykryn@redhat.com> - 049-83.git20200525
changelog:
  - Remove memtrace-ko and rd.memdebug=4 support in dracut
  - Add 99memstrack module
  - the strip command should avoid changing the file modification
  - dracut.sh: Adjust squash and strip order
  - Fine tune mksquashfs options for squash module
  - 90kernel-modules: don't install any block driver if not
  - 95znet: Add a rd.znet_ifname= option
  - Revert "[RHEL] network: default to network-legacy even in


author: Lukas Nykryn <lnykryn@redhat.com> - 049-89.git20200625
changelog:
  - Adapt to the new udevadm version output
  - network-manager: move connection generation to a lib file
  - cms: regenerate NetworkManager connections


author: Lukas Nykryn <lnykryn@redhat.com> - 049-92.git20200702
changelog:
  - install/dracut-install.c: install module dependencies of
  - install: also install post weak dependencies of kernel


author: Lukas Nykryn <lnykryn@redhat.com> - 049-94.git20200709
changelog:
  - dracut.sh: Move the library workaround after squash
  - dracut.sh: FIPS workaround for openssl-libs on Fedora/RHEL


author: EL Errata <el-errata_ww@oracle.com> - 049-95.git20200804.0.1
changelog:
  - Send DHCP request in parallel on all interfaces for 80% boot time improvement [Orabug: 32034110]
  - Revert fix for [Orabug: 31404167]
  - drop 51-dracut-rescue.install patch
  - Send DHCP query only on min BDF device to improve boot times by 50-60 secs [Orabug: 31404167]
  - add ofb and cts to 01fips kernel module list [Orabug: 30622737]
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
  - Fix kernel-core POSTTRANS script issues with kernel command line [Orabug: 29542203]
  - Fix dhclient classless static route parsing [Orabug: 28881975]
  - Fix iscsi code strictly checking for is_boot_target [Orabug: 29864620]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
  - Fix BOOTPROTO calculation for iscsi [Orabug: 29518713]
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: Lukas Nykryn <lnykryn@redhat.com> - 049-95.git20200804.1
changelog:
  - multipath: require kpartx binary
  - Replace ln with systemctl
  - multipath: add automatic configuration for multipath
  - 98dracut-systemd: don't wait for root device if remote
  - 90crypt: pull in remote-cryptsetup.target enablement


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 049-95.git20200804.0.4.el8_u3.4
changelog:
  - Add manpage for single-dhcp [Orabug 32201686]
  - Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
  - Use pgrep in dhcp-multi.sh to make efficient and error free [Orabug 32254008]
  - install: string_hash_func should not be fed with NULL [Orabug: 32127301]
  - Send DHCP request in parallel on all interfaces for 80% boot time improvement [Orabug: 32034110]
  - Revert fix for [Orabug: 31404167]
  - drop 51-dracut-rescue.install patch
  - Send DHCP query only on min BDF device to improve boot times by 50-60 secs [Orabug: 31404167]
  - add ofb and cts to 01fips kernel module list [Orabug: 30622737]
  - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
  - Fix kernel-core POSTTRANS script issues with kernel command line [Orabug: 29542203]
  - Fix dhclient classless static route parsing [Orabug: 28881975]
  - Fix iscsi code strictly checking for is_boot_target [Orabug: 29864620]
  - Update list of necessary files after squashfs execution [Orabug: 29864620]
  - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
  - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
  - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
  - Fix BOOTPROTO calculation for iscsi [Orabug: 29518713]
  - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
  - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
  - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828] (kevin.x.lyons@oracle.com)
  - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)


author: - <nick.alcock@oracle.com> - 1.1.0-0.1
changelog:
  - Add more DTRACE_PROBE definitions to sdt.h, for SystemTap
    compatibility, and test them (Tomas Jedlicka) [Orabug: 27721525]
  - Fix disassembler coredump (Tomas Jedlicka) [Orabug: 28054399]
  - Fix process-termination-related crash and deadlock bugs
   (Nick Alcock, Tomas Jedlicka) [Orabug: 27961105, 28133496]
  - Fix deadlock on creation of new threads in -c/-p processes
    [Orabug: 28210986]
  - Properly handle breakpoints tripped while DTrace is exiting
    [Orabug: 28473826]
  - Do not crash on self-grabs and on races with dtrace termination
    [Orabug: 28361373]
  - New ctfpath option, allowing explicit specification of ctf archives
    to use for the running kernel (Tomas Jedlicka) [Orabug: 28178265]
  - Fix memory leaks and minor uninitialized-data bugs [Orabug: 28247636]
  - Add test for SDT argument retrieval from stack, in UEK4QU7
    (Kris Van Hees) [Orabug: 25949088]
  - Remove preallocation from the buffering testsuite (Tomas Jedlicka)
    [Orabug: 27998779]
  - Speed up aggmod tests (Eugene Loh) [Orabug: 28007146, 28119700]
  - Include the smoketests in make check [Orabug: 28128338]
  - Test fixes (boost timeouts, kernel 4.17 compatibility,
    unskip a forgotten test).
  - Improve testsuite temporary file creation (Eugene Loh)
    [Orabug: 28142056]
  - Clean up compiler warnings (Eugene Loh) [Orabug: 27934422, 27998779]


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-0.4
changelog:
  - Add pre-release banner.
  - Add support for auto-building for OL7 and OL8.
  - Support building on systems with older kernels and/or glibc.


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-0.6.el8
changelog:
  - Fix copyrights, update README and NEWS, and bump release to 0.6 (Kris Van
    Hees)  [Orabug: 30624543] [Orabug: 30624553] [Orabug: 30619056] [Orabug:
    30619068]


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-0.7
changelog:
  - Update spec file for build requirements.
  - Sync with latest development code.
  - Ensure that pre-release banner does not interfere with test result
    comparison.


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-0.8
changelog:
  - Sync with latest development code.
  - Implement perf event output buffer management and processing.
  - Introduce dt_calloc() to use in all array allocations.
  - Provide support for building against libdtrace-ctf and libctf, with
    preference given to libctf (if available).
  - Implement association of BPF programs with probe events.


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.0
changelog:
  - BUILDINFO: commit=1bbc2287c7473ebe12804b4035725c648e2ea7e0
  - Implement BEGIN and END probes [Orabug: 31220513]
  - Implement a probe cleanup mechanism for providers [Orabug: 31220519]
  - Implement the exit() action [Orabug: 31220520]
  - Implement the flowindent option [Orabug: 31220522]
  - Implement the -xdisasm=n option [Orabug: 31220524]
  - Implement linking of precompiled BPF functions [Orabug: 31220525]
  - Fix memory leaks and minor uninitialized-data bugs [Orabug: 31220517]
  - Fix load-before-store BPF verifier errors for local variables
    [Orabug: 31220527]
  - Fix post-increment code generation [Orabug: 31220528]
  - Fix register clobbering and implement register spilling [Orabug: 31187562]
  - Add error and drop tag verification for tests [Orabug: 31220521]
  - Various code cleanup and errata release preparation [Orabug; 31220516]


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.3
changelog:
  - Implement the freopen() action. (Eugene Loh)
  - Implement the system() action. (Eugene Loh)
  - Implement the id built-in variable. (David McLean)
  - Implement the ppid built-in variable. (Eugene Loh)
  - Improve annotations in the disassembler.
  - Implement proper BEGIN and END probe semantics.
  - Correct exit() action semantics.
  - Correct signed divide and modulo operations. (Eugene Loh)
  - Correct code generation for post-decrement expressions. (Eugene Loh)
  - Various compilation fixes.
  - Better support for different distributions and compiler versions.


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.4
changelog:
  - Implement aggregation support code for both producer and consumer.
    [Orabug: 32254734]
  - Implement aggregation functions: count(), lquantize().
  - Implement aggregation functions: avg(), llquantize(), quantize().
    (Eugene Loh)
  - Implement aggregation functions: max(), min(), stddev(), sum().
    (David McLean)
  - Implement the printa() action.
  - Rework BPF code generation to use emit*() macros.
  - Fix bitwise negation. (Eugene Loh) [Orabug: 32125018]
  - Fix reporting when all quantize() data is in the last bin. (Eugene Loh)
    [Orabug: 32148161]
  - Load pre-compiled BPF functions even if they do not have relocations.
    (Eugene Loh)
  - Testsuite updates.
  - Fix END probe execution when consumer stops the producer.
  - Force use of bash as shell.


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.5
changelog:
  - Implement the ERROR probe. [Orabug: 32749498]
  - Add checks in BPF programs for division by zero and NULL pointer dereference.
    [Orabug: 32749498]
  - Implement the pid provider for userspace function boundary tracing.
    [Orabug: 32749504]
  - Implement the -w option to explicitly allow destructive actions.
    [Orabug: 31632678]
  - Add support in translators for more than two kernel variants.  (Nick Alcock)
    [Orabug: 32748968]
  - Switch from condition variable to eventfd for process death notifications.
    [Orabug: 32125018]
  - Implement normalize() and denormalize() actions.
  - Reworking of kernel tracepoint based providers.  [Orabug: 32125018]
  - Reworking of global and local variable storage to allow for values sizes
    beyond 8 bytes. (Eugene Loh) [Orabug: 32125018]
  - Implement -xbpflogsize option. (Eugene Loh) [Orabug: 32125018]
  - Improvements to -xdisasm support. (Eugene Loh) [Orabug: 32125018]
  - Fix bitfield operations. (Eugene Loh) [Orabug: 32125018]
  - Sample scripts for building DTrace on Ubuntu. (David McLean)
  - Coding style updates. (Eugene Loh)
  - Testsuite updates.


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.6
changelog:
  - Consolidated development of newly ported features. [Orabug: 33037106]
  - Implement built-in variables: probeprov, probemod, probefunc, probename.
  - Implement built-in variables: caller, stackdepth, ucaller, ustackdepth,
    errno, walltimestamp.  (Eugene Loh)
  - Implement actions: stack(), ustack(). (Eugene Loh)
  - Implement subroutine: strlen().
  - Implement option: -Z (partial). (Eugene Loh)
  - Added support for string constants and string values.
  - Added support for strings to trace().
  - Fixed storage size determination for global and local variables.
  - Improved storage layout for global and local variables.
  - Mark aggregation actions as non-data recording actions.  (Eugene Loh)
  - Load string constant table into the 'strtab' BPF map.
  - Load probe description data into the 'probes' BPF map.
  - Consolidate all string hash functions into a single hash function.
  - Implement variable length integer support.
  - Store the length of each string as a variable length integer inline with its
    character stream.
  - Improve memcpy() internal BPF function.
  - Testsuite improvements.  (Eugene Loh)


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.7
changelog:
  - Implement argument retrieval for SDT probes.
  - Introduce 'bpflog' runtime option to request BPF verifier log.
  - Implementation improvements for memry copy operations.
  - Fix type alignment handling for enums.
  - Fix ERROR-in-BEGIN probe handling.
  - Transition from variable-length string size to 2-byte string size.
  - Fix size of string data in the trace output buffer.
  - Fix data size for value copy.
  - Add support for strjoin() subroutine.
  - Add support for substr() subroutine.


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.8
changelog:
  - Support running dtrace under valgrind. (Nick Alcock) [Orabug: 32760574]
  - Implementation of speculative tracing. (Nick Alcock)
  - Add support for string comparison. (Eugene Loh)
  - Add support for strchr(), strrchr(), index(), rindex(), strstr(), lltostr().
    (Eugene Loh)
  - Add support for symbols in compressed kernel modules. (Nick Alcock)
  - Add support for htonl, htonll, htons, ntohl, ntohll, ntohs. (Eugene Loh)
  - Various testsuite fixes and improvements. [Orabug: 33474154]
  - Various code improvements. [Orabug: 33474154]


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.9
changelog:
  - Add support for strtok(). (Eugene Loh)
  - Implement TLS (thread-local storage) variables.
  - Add support for basename(), dirname(). (Eugene Loh)
  - Generic hash table improvements and consistent use of htabs. (Nick Alcock)
  - CTF improvements in view of better kernel support. (Nick Alcock)
  - Add support for ftruncate(). (Eugene Loh)
  - Add support for rand(). (Eugene Loh)
  - Fix string constant handling for strings longer than strsize.
  - Optimization of substr(), strjoin(), and storing strings in the trace buffer.
  - Various string handling fixes and improvements. (Eugene Loh, Kris Van Hees)
    [Orabug: 33651682]
  - Various testsuite fixes and improvements. [Orabug: 33651682]
  - Various code improvements. [Orabug: 33651682]


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.10
changelog:
  - Add support for assocaitive arrays.
  - Add support for allcoa() and bcopy(). (Nick Alcock)
  - Add support for inet_ntoa(), progenyof(), getmajor(), getminor(),
    mutex_owned(), mutex_owner(), mutex_type_adaptive(), mutex_type_spin(),
    rw_read_held(), rw_write_held(), and rw_iswriter(). (Eugene Loh)
  - Improved fault handling. (Nick Alcock, Kris Van Hees)
  - Various disassembler improvements, esp. annotations.
  - Strings are no longer stored using a length prefix.
  - The trace() action now supports arrays, structs, and unions.
  - Various testsuite fixes and improvements. [Orabug: 34112342]
  - Various code improvements. [Orabug: 34112342]


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.10
changelog:
  - Add support for associative arrays.
  - Add support for allcoa() and bcopy(). (Nick Alcock)
  - Add support for inet_ntoa(), progenyof(), getmajor(), getminor(),
    mutex_owned(), mutex_owner(), mutex_type_adaptive(), mutex_type_spin(),
    rw_read_held(), rw_write_held(), and rw_iswriter(). (Eugene Loh)
  - Improved fault handling. (Nick Alcock, Kris Van Hees)
  - Various disassembler improvements, esp. annotations.
  - Strings are no longer stored using a length prefix.
  - The trace() action now supports arrays, structs, and unions.
  - Various testsuite fixes and improvements. [Orabug: 34112342]
  - Various code improvements. [Orabug: 34112342]


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.11
changelog:
  - Add initial support for USDT. (Nick Alcock, Kris Van Hees)
  - Add support for aggregation keys. (Eugene Loh, Kris Van Hees)
  - Add support for copyin(), copyinto(), and copyinstr().
  - Add support for built-in variable args[] and sdt probe arg types.
  - Fix arg handling for various probes. (Eugene Loh)
  - Add basic support for setopt().
  - Add -xlockmem, with useful error message. (Eugene Loh)
  - Fix -xverbose, -xcpp, and -xctfpath
  - Fix handling of multiple args after --. (Nick Alcock)
  - Have the pid provider ignore compiler-generated internal function names.
  - Fix various bugs with typecasting and internal integer storage. (Eugene Loh)
  - Fix access to scalars in kernel space.
  - Fix libproc search of rtld_global due to glibc changes. (Nick Alcock)
    [Orabug: 32856318]
  - Truly decouple per-CPU BPF agg maps with a "map of maps."
  - Unused dual aggregation copies (DT_AGG_NUM_COPIES) have been removed.
    (Eugene Loh)
  - Various testsuite fixes and improvements. [Orabug: 34251899]
  - Various code improvements. [Orabug: 34251899]


author: Kris Van Hees <kris.vna.hees@oracle.com> - 2.0.0-1.12
changelog:
  - Fix evaluation order of bcopy() arguments and lift non-alloca restriction
    on the source address. (Eugene Loh, Kris Van Hees)
  - Implement actions: clear(), tracemem(). (Kris Van Hees, Eugene Loh)
  - Implement subroutines: copyout(), copyinstr(). (Kris Van Hees, Eugene Loh)
  - Implement options: switchrate, aggrate.
  - Implement provider: cpc. (Eugene Loh)
  - Implement provider: proc.
  - Implement built-in variable: uregs. (Eugene Loh)
  - Increase strtab maximum size.
  - Support using indirect load instructions for pointers to alloca()'d and
    DTrace managed memory. (Kris Van Hees, Eugene Loh)
  - Fix arg0 and arg1 for profile-* and tick-* probes. (Eugene Loh)
  - Implement runtime bounds checking for scalar array access. (Eugene Loh)
  - Updated manpage and moved to dtrace.8.
  - Support arbitrary address pointers for basename(), dirname(), strchr(),
    strrchr(), and inet_ntoa(). (Eugene Loh), [Orabug: 34857846]
  - Add runtime bounds checking for scalar array access. (Eugene Loh)
    [Orabug: 35045463]
  - Various testsuite fixes and improvements. [Orabug: 34829509]
  - Various code improvements. [Orabug: 34829509]


author: Kris Van Hees <kris.vna.hees@oracle.com> - 2.0.0-1.13
changelog:
  - Full support for is-enabled USDT probes. (Nick Alcock)
  - Report error on programs that exceed aggsize or dynvarsize.
  - Support for drop counters for principal, speculation, and aggregation buffers
    and for dynamic variables.
  - Implement probe: proc:::signal-clear.
  - Implement provider: sched (partial implementation).
  - Implement provider: lockstat (for kernels >= 5.10.0 and UEK6 with fix).
  - Support NULL strings. (Eugene Loh)
  - Support uregs[] on older kernels. (Eugene Loh)
  - New option: lonknommap. (Nick Alcock)
  - Support for USDT probes in programs in different fs namespaces. (Nick Alcock)
  - Support for USDT probes in non-PIE executables. (Nick Alcock)
  - Fix dtprobed to support DOF that exceeds 64KiB. (Nick Alcock)
    [Orabug: 35411920]
  - Do not modify input files with dtrace -G if unchanged. (Steven Sistare)
    [Orbug: 35417184]
  - Various testsuite fixes and improvements.
    (Nick Alcock, Eugene Loh, Kris Van Hees) [Orabug: 35435195]
  - Various code improvements.  (Nick Alcock, Eugene Loh, Kris Van Hees)
    [Orabug: 35435195]


author: Kris Van Hees <kris.vna.hees@oracle.com> - 2.0.0-1.13.1
changelog:
  - Restart dtprobed when upgrading DTrace.
  - Report and clean up orphaned tracing events after each test.


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.12
changelog:
  - Fix evaluation order of bcopy() arguments and lift non-alloca restriction
    on the source address. (Eugene Loh, Kris Van Hees)
  - Implement actions: clear(), tracemem(). (Kris Van Hees, Eugene Loh)
  - Implement subroutines: copyout(), copyinstr(). (Kris Van Hees, Eugene Loh)
  - Implement options: switchrate, aggrate.
  - Implement provider: cpc. (Eugene Loh)
  - Implement provider: proc.
  - Implement built-in variable: uregs. (Eugene Loh)
  - Increase strtab maximum size.
  - Support using indirect load instructions for pointers to alloca()'d and
    DTrace managed memory. (Kris Van Hees, Eugene Loh)
  - Fix arg0 and arg1 for profile-* and tick-* probes. (Eugene Loh)
  - Implement runtime bounds checking for scalar array access. (Eugene Loh)
  - Updated manpage and moved to dtrace.8.
  - Support arbitrary address pointers for basename(), dirname(), strchr(),
    strrchr(), and inet_ntoa(). (Eugene Loh) [Orabug: 34857846]
  - Add runtime bounds checking for scalar array access. (Eugene Loh)
    [Orabug: 35045463]
  - Various testsuite fixes and improvements. [Orabug: 34829509]
  - Various code improvements. [Orabug: 34829509]


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.13.2
changelog:
  - Support using DTrace with upstream kernels.
  - Implement provider: ip.
  - Implement actions: trunc(), pcap().
  - Implement subroutines: inet_ntoa6().
  - Implement subroutines: inet_ntop(). (Eugene Loh)
  - Support modules.builtin.ranges for builtin module-symbol association.
  - Provide a BTF-to-CTF convertor to provide (limited) kernel type information
    when CTF is not available.
  - Remove dependency on waitfd(). (Nick Alcock)
  - Various testsuite fixes and improvements.
    (Nick Alcock, Eugene Loh, Kris Van Hees)
  - Various code improvements. (Nick Alcock, Eugene Loh, Kris Van Hees)


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.14
changelog:
  - Implement provider: io.  (Eugene Loh, Kris Van Hees)
  - Implement actions: print().  (Alan Maguire)
  - Implement subroutines: link_ntop(), cleanpath().  (Eugene Loh)
  - Implement options: -xcpu, -xaggpercpu.  (Eugene Loh)
  - Improve providers: pid (offset-based probes) and rawtp (arg info).
  - Improve options: -xlockmem (improve default).  (Eugene Loh)
  - Ensure USDT probes can survive dtprobed restarts.  (Nick Alcock)
  - Improve USDT probe creation/deletion.  (Nick Alcock)
  - Improve support for DTrace with upstream kernels.  (Nick Alcock)
  - Improve support for compiling DTrace in older environments.  (Kris Van Hees)
  - Add support for aggregations of stacks.  (Eugene Loh)
  - Improve lexer parsing (top-level wildcard ambiguities and `numerals).
    (Nick Alcock)
  - Fix END probe execution with multiple tracers.  (Nick Alcock)
  - Preemptive BPF program execution for DTrace probes is not allowed.
  - Buffer overrun fix for systems with non-sequential online CPU ids.
    (Kris Van Hees, Nick Alcock) [Orabug: 36356681]
  - Various bug fixes.  (Nick Alcock, Eugene Loh, Kris Van Hees)
  - Various testsuite fixes and improvements.
    (Nick Alcock, Eugene Loh, Kris Van Hees)
  - Various code improvements.  (Nick Alcock, Eugene Loh, Kris Van Hees)
    [Orabug: 36329725]


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.0
changelog:
  - Implement BEGIN and END probes. (Eugene Loh) [Orabug: 31220513]
  - Implement a probe cleanup mechanism for providers.
    (Eugene Loh) [Orabug: 31220519]
  - Implement the exit() action. [Orabug: 31220520]
  - Implement the flowindent option. [Orabug: 31220522]
  - Implement the -xdisasm=n option. [Orabug: 31220524]
  - Implement linking of precompiled BPF functions. [Orabug: 31220525]
  - Fix memory leaks and minor uninitialized-data bugs. [Orabug: 31220517]
  - Fix load-before-store BPF verifier errors for local variables.
    [Orabug: 31220527]
  - Fix post-increment code generation. [Orabug: 31220528]
  - Fix register clobbering and implement register spilling. [Orabug: 31187562]
  - Add error and drop tag verification for tests. [Orabug: 31220521]
  - Various code cleanup and errata release preparation. [Orabug; 31220516]
  - Ensure that bpf_dlib.o is installed.
  - Fix the creation of FBT return probes.


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.1
changelog:
  - Implement profile-n and tick-n probes. (Eugene Loh)
  - Implement the printf() action.
  - Implement the raise() action.
  - Support probe specifications with wildcards.
  - Support multiple clauses for each probe.
  - Support built-in variables: arg0 through arg9 (for probes that provide
    arguments), curcpu curthread, epid, gid, pid, tid, uid, and timestamp.
  - Various memory management fixes.
  - Register leak fixes.


author: Eugene Loh <eugene.loh@oracle.com> - 2.0.0-1.2
changelog:
  - BUILDINFO: commit=d3223d41a463712889d12d7c425a60e9c1e4c10e
  - Ensure a minimum locked-memory limit for BPF.
  - int8_t is now always signed, even on platforms where char is unsigned.


author: Eugene Loh <eugene.loh@oracle.com> - 2.0.0-1.2
changelog:
  - Ensure a minimum locked-memory limit for BPF.
  - int8_t is now always signed, even on platforms where char is unsigned.


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.3
changelog:
  - BUILDINFO: commit=7b8abba152e7e537be0ad263535ce08944a2ea63
  - Implement the freopen() action. (Eugene Loh)
  - Implement the system() action. (Eugene Loh)
  - Implement the id built-in variable. (David McLean)
  - Implement the ppid built-in variable. (Eugene Loh)
  - Improve annotations in the disassembler.
  - Implement proper BEGIN and END probe semantics.
  - Correct exit() action semantics.
  - Correct signed divide and modulo operations. (Eugene Loh)
  - Correct code generation for post-decrement expressions. (Eugene Loh)
  - Various compilation fixes.
  - Better support for different distributions and compiler versions.


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.4
changelog:
  - BUILDINFO: commit=0c79be330c8f50b376dd164ca3861d7c000e9e66
  - Implement aggregation support code for both producer and consumer.
    [Orabug: 32254734]\
  - Implement aggregation functions: count(), lquantize().
  - Implement aggregation functions: avg(), llquantize(), quantize().
    (Eugene Loh)
  - Implement aggregation functions: max(), min(), stddev(), sum().
    (David McLean)
  - Implement the printa() action.
  - Rework BPF code generation to use emit*() macros.
  - Fix bitwise negation. (Eugene Loh) [Orabug: 32125018]
  - Fix reporting when all quantize() data is in the last bin. (Eugene Loh)
    [Orabug: 32148161]
  - Load pre-compiled BPF functions even if they do not have relocations.
    (Eugene Loh)
  - Testsuite updates.
  - Fix END probe execution when consumer stops the producer.
  - Force use of bash as shell.


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.5.1
changelog:
  - BUILDINFO: commit=61d6a4aaf7ea2b65b3f55451e3da57562be7a9a2
  - Memory corruption fix in pid probe discovery.


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.6
changelog:
  - Consolidated developent of newly ported features. [Orabug: 33037106]
  - Implement built-in variables: probeprov, probemod, probefunc, probename.
  - Implement built-in variables: caller, stackdepth, ucaller, ustackdepth,
    errno, walltimestamp.  (Eugene Loh)
  - Implement actions: stack(), ustack(). (Eugene Loh)
  - Implement subroutine: strlen().
  - Implement option: -Z (partial). (Eugene Loh)
  - Added support for string constants and string values.
  - Added support for strings to trace().
  - Fixed storage size determination for global and local variables.
  - Improved storage layout for global and local variables.
  - Mark aggregation actions as non-data recording actions.  (Eugene Loh)
  - Load string constant table into the 'strtab' BPF map.
  - Load probe description data into the 'probes' BPF map.
  - Consolidate all string hash functions into a single hash function.
  - Implement variable length integer support.
  - Store the length of each string as a variable length integer inline with its
    character stream.
  - Improve memcpy() internal BPF function.
  - Testsuite improvements.  (Eugene Loh)


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.7
changelog:
  - Consolidated developent of newly ported features. [Orabug: 33334517]
  - Implement argument retrieval for SDT probes. [Orabug: 33072438]
  - Introduce 'bpflog' runtime option to request BPF verifier log.
  - Implementation improvements for memry copy operations.
  - Fix type alignment handling for enums.
  - Fix ERROR-in-BEGIN probe handling.
  - Transition from variable-length string size to 2-byte string size.
  - Fix size of string data in the trace output buffer.
  - Fix data size for value copy.
  - Add support for strjoin() subroutine.
  - Add support for substr() subroutine.


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.1-1
changelog:
  - Implement FBT probes with fentry/fexit tracepoints
  - Provide argument info for FBT probes.
  - Provide pre-generated translator files sets. [Orabug: 36504847]


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.2-1
changelog:
  - Translators to support kernels 6.10 and later.
  - FBT return probe argument support.
  - The print() action is augmented with type information.  (Alan Maguire)
  - Support to discover and trace USDT probes after a tracing session has
    started.  (Eugene Loh, Nick Alcock)
  - USDT probe argument support (translated types, mapping).  (Nick Alcock)
  - Installation locations are now configurable.  (Nick Alcock)
  - Valgrind is no longer a required build dependency.  (Nick Alcock)
  - Self-grabs have been improved.  (Nick Alcock)
  - New provider: rawfbt.  (Kris Van Hees)
  - Various bug fixes.  (Nick Alcock, Eugene Loh, Alan Maguire, Kris Van Hees)
  - Various testsuite fixes and improvements.
    (Nick Alcock, Sam James, Eugene Loh, Kris Van Hees)
  - Various code improvements.  (Nick Alcock, Eugene Loh, Kris Van Hees)
    [Orabug: 37274251]


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.3-1
changelog:
  - This is only released on OL10.
  - Redesigned USDT support to work for LTO compilations.  [Orabug: 38011704]
  - New builtin variable: execargs.
  - Offset probes in pid provider.  (Eugene Loh)
  - Various bug fixes.  (Nick Alcock, Eugene Loh, Kris Van Hees)
  - Various testsuite fixes and improvements.
    (Nick Alcock, Sam James, Eugene Loh, Kris Van Hees)


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.13
changelog:
  - Full support for is-enabled USDT probes. (Nick Alcock)
  - Report error on programs that exceed aggsize or dynvarsize.
  - Support for drop counters for principal, speculation, and aggregation buffers
    and for dynamic variables.
  - Implement probe: proc:::signal-clear.
  - Implement provider: sched (partial implementation).
  - Implement provider: lockstat (for kernels >= 5.10.0 and UEK6 with fix).
  - Support NULL strings. (Eugene Loh)
  - Support uregs[] on older kernels. (Eugene Loh)
  - New option: lonknommap. (Nick Alcock)
  - Support for USDT probes in programs in different fs namespaces. (Nick Alcock)
  - Support for USDT probes in non-PIE executables. (Nick Alcock)
  - Fix dtprobed to support DOF that exceeds 64KiB. (Nick Alcock)
    [Orabug: 35411920]
  - Do not modify input files with dtrace -G if unchanged. (Steven Sistare)
    [Orabug: 35417184]
  - Various testsuite fixes and improvements.
    (Nick Alcock, Eugene Loh, Kris Van Hees) [Orabug: 35435195]
  - Various code improvements.  (Nick Alcock, Eugene Loh, Kris Van Hees)
    [Orabug: 35435195]


author: Eugene Loh <eugene.loh@oracle.com> - 2.0.4-1
changelog:
  - TCP, UDP, and stapsdt providers implemented.  (Alan Maguire)
  - New learning materials:  the User's Guide in Markdown format,
    example scripts, and a context file for LLMs.
    (Eugene Loh, Bruce McCulloch, Ruud van der Pas, Elena Zannoni).
  - Allow [u]stack() to be used as a variable value.  (Kris Van Hees)
    [Orabug: 37950533]
  - Comments using // are now supported.  (Kris Van Hees)
  - Scalability improvements.  (Kris Van Hees)
  - Error injection via return() action.  (Kris Van Hees)
  - Improved string handling.  (Kris Van Hees)
  - Various bug fixes.  (Eugene Loh, Kris Van Hees)
  - Fix dyn vars overwriting one another.  [Orabug: 37994729]
  - Fix regression:  list fbt probes by default.  [Orabug: 38249511]
  - Various testsuite fixes and improvements.
    (Nick Alcock, Eugene Loh, Alan Maguire, Kris Van Hees)
  - Add test for preprocessor definitions.  [Orabug: 28763074]
  - Fix some stack tests.  [Orabug: 37459289]


author: Eugene Loh <eugene.loh@oracle.com> - 2.0.5-1
changelog:
  - Implement PID-specific uprobes.  (Kris Van Hees)
  - Allocate the buffers BPF map to fit highest CPU id.  (Kris Van Hees)
  - Fix argument handling for multi-location user probes.
    (Kris Van Hees) [Orabug: 38922360]
  - Change the "stack skip" to 3 for fbt (fprobe) and rawtp providers.
    [Orabug: 38776929]
  - Fix prvname so that both rawfbt and fbt probes are seen.
    [Orabug: 38842114]
  - Do not convert "__" to "-" for stapsdt provider names.
  - Fix printf formatting with non-monetary grouping chars.
    [Orabug: 30430270]
  - Discontinue -xversion=V as an option.  (Kris Van Hees) [Orabug: 38615307]
  - Add the DTrace Tutorial to the git repo and install package.
  - Add missing documentation:  trunc(), stapsdt, usdt.h include path.
  - Update LLM context files to forbid "if" statements.
  - Test suite weakly pulls in kernel-uek-tools to get perf.  (Nick Alcock)
    [Orabug: 38064413]


author: Josef Ridky <jridky@redhat.com> - 1:0.4-0.1.b45
changelog:
  - New upstream release 0.4b45 (#1361495)
  - Fix issue with bad UUID error message (#1048548)
  - Spec file has been updated


author: Lukas Czerner <lczerner@redhat.com> 1.45.4-1
changelog:
  - Rebase to the release 1.45.4 (#1783777)
  - provide rhel6/7 compatible fs_type in mke2fs.conf (#1780279)
  - fix crafted ext4 partition leads to out-of-bounds write (#1768709)
  - include note about supported rhel8 features and options (#1788573)


author: Darrick J. Wong <darrick.wong@oracle.com> 1.45.4-3.0.1
changelog:
  - Integrate patches from the "upstream" 1.45.4 package.
  - Fix the version number to match Oracle standards.
  - Re-integrate the multiarch build kludge from RH.
  - Enable e2scrub package for OL8 only
  - Start building newer package for UEK6


author: Darrick J. Wong <darrick.wong@oracle.com> 1.45.4-3.0.3
changelog:
  - Fix build scripts to generate i386 builds
  - Re-integrate ext2_types.h multiarch compatibility fixes.


author: Lukas Czerner <lczerner@redhat.com> 1.45.6-5
changelog:
  - Update e2fsprogs with upstream fixes and improvements (#2083621)
  - Fix out-of-bounds read/write via crafter filesystem (#2073548)


author: Peter Jones <pjones@redhat.com> - 3-2
changelog:
  - Always provide macros for efi_arch and efi_alt_arch (and their _upper
    variants), and make efi_has_arch and efi_has_alt_arch 0 when they will be
    wrong.  This ensures everything can always expand when we're on a non-efi
    architecture.


author: Peter Jones <pjones@redhat.com> - 15-1
changelog:
  - Update to efibootmgr 15
  - Make efibootmgr use EFIDIR / efibootmgr.efidir like fwupdate does
  - make --loader default build-time configurable
  - sanitize set_mirror()/get_mirror()
  - Add support for parsing loader options as UCS2
  - GCC 7 fixes
  - Don't use -fshort-wchar since we don't run on EFI machines.
  - Also rebuild for efivar-31-1.fc26 to get symbol versioning right.
    Resolves: rhbz#1468841


author: Peter Jones <pjones@redhat.com> - 32-1
changelog:
  - efivar 32
  - lots of coverity fixes; mostly leaked memory and fds and the like
  - fix sysfs pci path formats
  - handle device paths for dns, nfit, bluetooth, wifi, emmc, btle.
  - improved abi checking on releases
  - Fix failures on EDIT_WRITE in edit_variable() when the variable doesn't exist
  - Add efi_guid_ux_capsule_guid to our guids
  - Now with %check


author: Peter Jones <pjones@redhat.com> - 35-1
changelog:
  - Update to efivar 35
  - fixes for older compilers
  - efi_get_variable_exists()
  - Lots of stuff to make CI work.
  - use usleep() to avoid hitting the kernel rate limiter on efivarfs
  - better EFI_GUID macro
  - add efi_guid_fwupdate (0abba7dc-e516-4167-bbf5-4d9d1c739416)


author: Peter Jones <pjones@redhat.com> - 36-1
changelog:
  - Update to efivar 36 (and some change)
    Resolves: rhbz#1635019
  - Add NVDIMM support
  - Re-written linux interface parser to handle how devices are
    partitioned better, and for cleaner code, with one file per device
    type.
  - lots of verbosity updates
  - better CI
  - analysis with clang's analyzer as well as coverity
  - Better handling of immutable bits in sysfs
  - LIBEFIVAR_OPS=help
  - lots of code cleanups.
  - Add emmc device support
  - Add SAS port expander support
  - Support for ACPI root nodes that are less common
    (i.e. ACPI Generic Container and Embedded Controller PNP nodes)
  - Make abbreviated device paths if we can't parse a device's info
  - Don't require NVME to have an EUI


author: Mark Wielaard <mjw@redhat.com> - 0.174-1
changelog:
  - New upstream release (#1614972)
    - libelf, libdw and all tools now handle extended shnum and shstrndx
      correctly
    - elfcompress: Don't rewrite input file if no section data needs
      updating.  Try harder to keep same file mode bits (suid) on rewrite.
    - strip: Handle mixed (out of order) allocated/non-allocated sections.
    - unstrip: Handle SHT_GROUP sections.
    - backends: RISCV and M68K now have backend implementations to
      generate CFI based backtraces.
    - Fixes CVE-2018-16062, CVE-2018-16402 and CVE-2018-16403
      (#1623754, #1625052, #1625057).


author: Mark Wielaard <mjw@redhat.com> - 0.174-4
changelog:
  - Add elfutils-0.174-size-rec-ar.patch
    CVE-2018-18520 (#1646479)
  - Add elfutils-0.174-ar-sh_entsize-zero.patch
    CVE-2018-18521 (#1646484)


author: Mark Wielaard <mjw@redhat.com> - 0.174-5
changelog:
  - Add elfutils-0.174-x86_64_unwind.patch (#1650114).
  - Add elfutils-0.174-gnu-property-note.patch (#1650120).
  - Add elfutils-0.174-version-note.patch.
  - Add elfutils-0.174-gnu-attribute-note.patch (#1650125).


author: Mark Wielaard <mjw@fedoraproject.org> - 0.176-1
changelog:
  - New upstream release.
    - backends: riscv improved core file and return value location support.
    - Fixes CVE-2019-7146, CVE-2019-7148, CVE-2019-7149, CVE-2019-7150,
            CVE-2019-7664, CVE-2019-7665.


author: Mark Wielaard <mjw@redhat.com> - 0.178-2
changelog:
  - New upstream release.
    - debuginfod: New server, client tool and library to index and fetch
                  ELF/DWARF files addressed by build-id through HTTP.
    - doc: There are now some manual pages for functions and tools.
    - backends: The libebl libraries are no longer dynamically loaded
                through dlopen, but are now compiled into libdw.so directly.
    - readelf: -n, --notes now takes an optional "SECTION" argument.
               -p and -x now also handle section numbers.
               New option --dyn-sym to show just the dynamic symbol table.
    - libcpu: Add RISC-V disassembler.
    - libdw: Abbrevs and DIEs can now be read concurrently by multiple
             threads through the same Dwarf handle.
    - libdwfl: Will try to use debuginfod when installed as fallback to
               retrieve ELF and DWARF debug data files by build-id.
  - Fix libdebuginfod file list for debuginfo-client[-devel].


author: Mark Wielaard <mjw@redhat.com> - 0.178-4
changelog:
  - Add elfutils-debuginfod-client Provides and Requires with depsuffix
    to get multilib dependencies correct. Add %{version}-%{release} to
    keep subpackages in sync.


author: Mark Wielaard <mjw@redhat.com> - 0.182-1
changelog:
  - Upgrade to upstream 0.182
    - backends: Support for tilegx has been removed.
    - config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
    - debuginfod: More efficient package traversal, tolerate various
      errors during scanning, grooming progress is more visible and
      interruptible, more prometheus metrics.
    - debuginfod-client: Now supports compressed (kernel) ELF images.
    - libdwfl: Add ZSTD compression support.


author: Mark Wielaard <mjw@redhat.com> - 0.186-1
changelog:
  - Upgrade to upstream 0.186
    - debuginfod-client: Default $DEBUGINFOD_URLS is computed from
      drop-in files /etc/debuginfod/*.urls rather than
      hardcoded into the /etc/profile.d/debuginfod*
      scripts.
      Add $DEBUGINFOD_MAXSIZE and $DEBUGINFOD_MAXTIME settings
      for skipping large/slow transfers.
      Add $DEBUGINFOD_RETRY for retrying aborted lookups.
    - debuginfod: Supply extra HTTP response headers, describing
      archive/file names that satisfy the requested buildid content.
      Support -d :memory: option for in-memory databases.
      Protect against loops in federated server configurations.
      Add -r option to use -I/-X regexes for grooming stale files.
      Protect against wasted CPU from duplicate concurrent requests.
      Limit the duration of groom ops roughly to rescan (-t) times.
      Add --passive mode for serving from read-only database.
      Several other performance improvements & prometheus metrics.
    - libdw: Support for the NVIDIA Cuda line map extensions.
      DW_LNE_NVIDIA_inlined_call and DW_LNE_NVIDIA_set_function_name
      are defined in dwarf.h. New functions dwarf_linecontext and
      dwarf_linefunctionname.
    - translations: Update Japanese translation.


author: Mark Wielaard <mjw@redhat.com> - 0.187-4
changelog:
  - Upgrade to elfutils 0.187
    - debuginfod: Support -C option for connection thread pooling.
    - debuginfod-client: Negative cache file are now zero sized instead
      of no-permission files.
    - addr2line: The -A, --absolute option, which shows file names
      includingthe full compilation directory is now the
      default.  To get theold behavior use the new option --relative.
    - readelf, elflint: Recognize FDO Packaging Metadata ELF notes
    - libdw, debuginfo-client: Load libcurl lazily only when files need
      to be fetched remotely. libcurl is now never loaded when
      DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set,
      libcurl is only loaded when the debuginfod_begin function is
      called.
  - Add elfutils-0.187-csh-profile.patch
  - Add elfutils-0.187-debuginfod-client-fd-leak.patch
  - Add elfutils-0.187-mhd_no_dual_stack.patch
  - Add elfutils-0.187-mhd_epoll.patch
  - Add an explicit versioned requires from elfutils-debuginfod-client
    on elfutils-libs and elfutils-libelf.
  - Remove brew testsuite workarounds


author: Mark Wielaard <mjw@redhat.com> - 0.189-3
changelog:
  - Add elfutils-0.189-elf_getdata_rawchunk.patch
  - Add elfutils-0.189-debuginfod_config_cache-double-close.patch


author: Mark Wielaard <mjw@redhat.com> - 0.190-1
changelog:
  - Upgrade to upstream elfutils 0.190
  - Add eu-srcfiles
  - Drop upstreamed patches
    elfutils-0.189-debuginfod_config_cache-double-close.patch
    elfutils-0.189-elf_getdata_rawchunk.patch
    elfutils-0.189-elfcompress.patch
  - Only package debuginfod-client-config.7 manpage for debuginfod-client


author: Jacek Migacz <jmigacz@redhat.com> - 1:26.1-10
changelog:
  - Fix etags local command injection vulnerability (#2175189)
  - Fix htmlfontify.el command injection vulnerability (#2175178)
  - Fix ob-latex.el command injection vulnerability (#2180587)


author: Jacek Migacz <jmigacz@redhat.com> - 1:26.1-12
changelog:
  - org-file-contents: Consider all remote files unsafe (CVE-2024-30205)
  - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)
  - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203)
  - Disable xwidgets (RHEL-14549)


author: Jan Synáček <jsynacek@redhat.com> - 4.0.0-2
changelog:
  - Fix 4.0.0 BuildRequires and Requires (#1503408)
    + Big thanks to Xavier Delaruelle for a spec patch!
  - Fix installing manpages as alternatives


author: Jan Synáček <jsynacek@redhat.com> - 4.1.1-1
changelog:
  - Update to 4.1.1 (#1546450, #1139165, #1545369)
    + Big thanks to Xavier Delaruelle for a spec patch!


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.5-5
changelog:
  - Fix multiple CVEs
  - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
  - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
  - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
  - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
  - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
  - CVE-2022-22825 Integer overflow in lookup in xmlparse.c
  - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
  - CVE-2022-22823 Integer overflow in build_model in xmlparse.c
  - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
  - Resolves: CVE-2022-23852
  - Resolves: CVE-2021-45960
  - Resolves: CVE-2021-46143
  - Resolves: CVE-2022-22827
  - Resolves: CVE-2022-22826
  - Resolves: CVE-2022-22825
  - Resolves: CVE-2022-22824
  - Resolves: CVE-2022-22823
  - Resolves: CVE-2022-22822


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.5-6
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.5-10.1
changelog:
  - CVE-2022-43680 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate
  - Resolves: CVE-2022-43680


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.5-14
changelog:
  - Fix multiple CVEs
  - Fix CVE-2024-45492 integer overflow
  - Fix CVE-2024-45491 Integer Overflow or Wraparound
  - Fix CVE-2024-45490 Negative Length Parsing Vulnerability
  - Resolves: RHEL-57505
  - Resolves: RHEL-57493
  - Resolves: RHEL-56751


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.5-4.2
changelog:
  - Fix multiple CVEs
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Chris Leech <cleech@redhat.com> - 1.0.32-6
changelog:
  - remove fcoe from SUPPORTED_DRIVERS in /etc/sysconfig/fcoe
  - add qedf to SUPPORTED_DRIVERS in /etc/sysconf/fcoe
  - added upstream fix for large fcoe ctrl numbers


author: Kamil Dudka <kdudka@redhat.com> - 5.33-4
changelog:
  - do not classify shared libraries as pie executables (#1581343)
  - seccomp: fix build failure due to missing syscalls


author: Kamil Dudka <kdudka@redhat.com> - 5.33-7
changelog:
  - show details about ppc swap partition (#1224668)
  - support longer version strings for clamav database (#1539107)


author: Kamil Dudka <kdudka@redhat.com> - 5.33-11
changelog:
  - improve documentation of --apple in file(1) man page (#1677442)
  - improve parsing of ppc core files (#1658171)


author: Miro Hrončok <mhroncok@redhat.com> - 5.33-3
changelog:
  - Update Python macros to new packaging standards
    (See https://fedoraproject.org/wiki/Changes/Avoid_usr_bin_python_in_RPM_Build)


author: Ondrej Vasik <ovasik@redhat.com> - 3.6-1
changelog:
  - own /usr/share/bash-completion{,/completions,/helpers} (#1504616)
  - create and own /usr/lib/debug/.dwz dir to prevent
    dangling symlink (#1508610)


author: Ondrej Vasik <ovasik@redhat.com> - 3.7-1
changelog:
  - own /usr/share/locale and /usr/lib/modules
  - own /usr/lib/sysimage
  - improve filesystem content file to include symlinks and rootdir


author: Tomas Mraz <tmraz@redhat.com> - 1.2.0-1
changelog:
  - add lib subpackage to avoid multilib on the base package
  - add ability to compute hmacs on multiple files at once
  - improved debugging with FIPSCHECK_DEBUG


author: Eric Garver <egarver@redhat.com> - 0.6.1-4
changelog:
  - backports for new failed state if startup fails
  - backports to use explicit RETURN on user defined ebtables chains
  - backports to fix nftables AUDIT log support


author: Eric Garver <egarver@redhat.com> - 0.6.1-5
changelog:
  - python3-firewalld can get by with python3-gobject-base
  - firewall-config can get by with python3-qt5-base


author: Eric Garver <egarver@redhat.com> - 0.6.3-4
changelog:
  - backport recent stable fixes
  - backport fix for lost NM interfaces during reload
  - backport rich rule priorities
  - backport fix for set entries not applied
  - update translations


author: Eric Garver <egarver@redhat.com> - 0.7.0-3
changelog:
  - backport patch to show service includes in service output
  - backport patches to fix dbus API break


author: Edward Leung <edward.leung@oracle.com> - 0.7.0-5.0.1
changelog:
  - discard empty RH-Satellite-6.xml [Orabug: 30328734]
  - Red Hat Satellite and Red Hat high availaibility reference found in cockpit UI
    [Orabug: 30257573]


author: Eric Garver <egarver@redhat.com> - 0.8.2-2
changelog:
  - fix(cli): add ipset type hash:mac is incompatible with the family parameter
  - fix(cli): add --zone is an invalid option with --direct
  - fix: update dynamic DCE RPC ports in freeipa-trust service
  - fix: core: rich: Catch ValueError on non-numeric priority values
  - fix(rich): icmptypes with one family
  - fix(direct): rule in a zone chain
  - plus additional upstream stable fixes


author: Eric Garver <egarver@redhat.com> - 0.8.2-3
changelog:
  - fix(nftables): packet marks with masks
  - fix(nftables): icmp types with code == 0
  - fix(rich icmptype): verify rule and icmptype families
  - fix(zone): cache rule_str for rich rules
  - improvement(service): IPsec: Update description and add TCP port 4500
  - feat(service): add collectd service
  - feat(service): Add rpc-rquotad.service


author: Eric Garver <egarver@redhat.com> - 0.9.3-12
changelog:
  - feat(config): add CleanupModulesOnExit configuration option
  - change default CleanupModulesOnExit=yes


author: EL Errata <el-errata_ww@oracle.com> - 0.9.11-1.0.1
changelog:
  - Remove capsule file as well, since it references removed config [Orabug: 33513329]
  - discard empty RH-Satellite-6.xml [Orabug: 30328734]
  - Red Hat Satellite and Red Hat high availaibility reference found in cockpit UI [Orabug: 30257573]


author: EL Errata <el-errata_ww@oracle.com> - 0.9.3-7.0.2
changelog:
  - Remove capsule file as well, since it references removed config [Orabug: 33513329]
  - discard empty RH-Satellite-6.xml [Orabug: 30328734]
  - Red Hat Satellite and Red Hat high availaibility reference found in cockpit UI
    [Orabug: 30257573]


author: Akira TAGOH <tagoh@redhat.com> - 2.13.0-6
changelog:
  - Add Suggests: dejavu-sans-fonts to address pulling the unpredicted
    font package as dependency. (#1321551)


author: Akira TAGOH <tagoh@redhat.com> - 2.13.1-3
changelog:
  - Stop cleaning up .uuid file even when a directory is empty.
    resolves: rhbz#1653171
  - Use Rachana instead of Meera for serif subsitution.
    resolves: rhbz#1650491


author: Josef Ridky <jridky@redhat.com> - 1.5.6-1
changelog:
  - New upstream release 1.5.6 (#1468062)
  - Fix issue with capital letters in commands in manpage (#1468984)


author: Pavel Cahyna <pcahyna@redhat.com> - 1.6.14-2
changelog:
  - Apply upstream patch 41d0d70f
    ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type


author: John Mcwalters <john.mcwalters@oracle.com> - 2.9.7-12.0.1
changelog:
  - Import patches from 2.9.4-1.0.7:
    Security Update based on ELSA-2018-3324 fuse: bypass of the "user_allow_other"
    restriction when SELinux is active. [CVE-2018-10906]

    When SELinux is active, fusermount is vulnerable to a restriction bypass. This allows
    non-root users to mount a FUSE file system with the 'allow_other' mount option
    regardless of whether 'user_allow_other' is set in the fuse configuration.

    When checking whether allow_other/allow_root are allowed, fusermount lets users escape
    commas, even when the mount options do not permit backslashes. This allows a malicious
    user to hide options forbidden by fusermount. By using specially crafted values in the
    `context` mount option interpreted by SELinux, it is possible to use a backslash and
    smuggle the `allow_other` mount option.

    added patches:
    fuse-0002-fusermount-refuse-unknown-options.patch


author: Gautham Ananthakrishna <gautham.ananthakrishna@oracle.com> - 2.9.7-12.0.2
changelog:
  - libfuse: refcount fuse_chan objects
  - libfuse: get ref for req
  - libfuse: add clone_fd option
  - libfuse: Convert numa to clone_fd
  - [Orabug: 31436872]


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.9.7-15.0.1
changelog:
  - libfuse: refcount fuse_chan objects [Orabug: 31436872]
  - libfuse: get ref for req [Orabug: 31436872]
  - libfuse: add clone_fd option [Orabug: 31436872]
  - libfuse: Convert numa to clone_fd [Orabug: 31436872]
  - libfuse: fix API compatibility [Orabug: 32415707]


author: Pavel Reichl <preichl@redhat.com> - 2.9.7-16
changelog:
  - Back-port max_pages support,
  - caching symlinks in kernel page cache,
  - and in-kernel readdir caching
  - Fixed rhbz#2080000


author: EL Errata <el-errata_ww@oracle.com> - 2.9.7-16.0.1
changelog:
  - Fixing segault in fuse_session_remove_chan function [Orabug: 34051427]
  - libfuse: refcount fuse_chan objects [Orabug: 31436872]
  - libfuse: get ref for req [Orabug: 31436872]
  - libfuse: add clone_fd option [Orabug: 31436872]
  - libfuse: Convert numa to clone_fd [Orabug: 31436872]
  - libfuse: fix API compatibility [Orabug: 32415707]


author: Richard Hughes <richard@hughsie.com> 1.1.3-1
changelog:
  - New upstream release
  - Adds support for an upcoming Dell USB-C dock
  - Don't use an obsolete font when building the UEFI images
  - Resolves: #1607842


author: Richard Hughes <richard@hughsie.com> 1.1.4-1
changelog:
  - New upstream release
  - Use HTTPS_PROXY if set
  - Make the dell-dock plugin more robust in several ways
  - Adjust EVB board handling
  - Resolves: #1647557


author: EL Errata <el-errata_ww@oracle.com> - 1.1.4-7.0.1.el8_2
changelog:
  - Build with the updated Oracle certificate
  - Use oraclesecureboot301 as certdir [Orabug: 29881368]
  - Use new signing certificate (Alex Burmashev)


author: Richard Hughes <richard@hughsie.com> 1.4.2-1
changelog:
  - New upstream release
  - Backport a patch to fix the synaptics fingerprint reader update.
  - Resolves: #1775277


author: Richard Hughes <richard@hughsie.com> 1.5.4-1
changelog:
  - Rebase package to include support for latest OEM hardware and to
    support deploying UEFI SecureBoot dbx updates.
  - Resolves: #1870811


author: Richard Hughes <richard@hughsie.com> 1.5.5-2
changelog:
  - Do not invalidate all remote timestamps during package install to fix rpm -V.
  - Backport some important high priority fixes from upstream.
  - Resolves: #1926382


author: Richard Hughes <richard@hughsie.com> 1.5.9-3
changelog:
  - Rebase to include the SBAT metadata section to allow fixing BootHole
  - Resolves: rhbz#1933012
  - Resolves: rhbz#1932953
  - Resolves: rhbz#1932909
  - Resolves: rhbz#1932882
  - Resolves: rhbz#1932579
  - Resolves: rhbz#1932553
  - Resolves: rhbz#1932423


author: Richard Hughes <richard@hughsie.com> 1.5.9-1
changelog:
  - Rebase to include the SBAT metadata section to allow fixing BootHole
  - Resolves: rhbz#1933010
  - Resolves: rhbz#1932951
  - Resolves: rhbz#1932907
  - Resolves: rhbz#1932880
  - Resolves: rhbz#1932578
  - Resolves: rhbz#1932552
  - Resolves: rhbz#1932422


author: Richard Hughes <richard@hughsie.com> 1.7.1-1
changelog:
  - New upstream release
  - Backport upstream changes
  - Include support for Dell TBT4 Docking stations
  - Resolves: rhbz#1969472
  - Resolves: rhbz#1976408


author: Richard Hughes <richard@hughsie.com> 1.7.1-2
changelog:
  - Disable the Logitech bulkcontroller plugin to avoid adding a dep to protobuf-c
    which lives in AppStream, not BaseOS.
  - Resolves: rhbz#2029333


author: Richard Hughes <richard@hughsie.com> 1.7.4-1
changelog:
  - Include support for Lenovo TBT4 Docking stations
  - Do not cause systemd-modules-load failures
  - Resolves: rhbz#2038258
  - Resolves: rhbz#2037294


author: EL Errata <el-errata_ww@oracle.com> - 1.7.4-2.0.1
changelog:
  - Update SBAT data to include Oracle [Oracle: 33072886]
  - Build with the updated Oracle certificate
  - Use oraclesecureboot301 as certdir [Orabug: 29881368]
  - Use new signing certificate (Alex Burmashev)


author: Alex Burmashev <alexander.burmashev@oracle.com> - 1.7.8-1.0.2
changelog:
  - Enabled signing for aarch64 [Orabug: 35265981]
  - Modify meson.build for fwupd-efi [Orabug: 35265981]


author: Ilya Okomin <ilya.okomin@oracle.com> - 1.7.8-1.0.3
changelog:
  - Align sections to 512 bytes [Orabug: 35265981]
  - Use objcopy to build arm/aarch64 binaries if binutils 2.30-113.0.3 or newer [Orabug: 35265981]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 1.7.8-2.0.1
changelog:
  - Modify %prep to correctly apply downstream patches
  - Align sections to 512 bytes [Orabug: 35265981]
  - Use objcopy to build arm/aarch64 binaries if binutils 2.30-113.0.3 or newer [Orabug: 35265981]
  - Enabled signing for aarch64 [Orabug: 35265981]
  - Modify meson.build for fwupd-efi [Orabug: 35265981]
  - Update SBAT data to include Oracle [Oracle: 33072886]
  - Build with the updated Oracle certificate
  - Use oraclesecureboot301 as certdir [Orabug: 29881368]
  - Use new signing certificate (Alex Burmashev)


author: Peter Jones <pjones@redhat.com> - 10-4
changelog:
  - Roll in some bugfixes that'll be in fwupdate-11 upstream.
    This helps fix a couple of vendors machines.


author: EL Errata <el-errata_ww@oracle.com> - 11-3.0.1
changelog:
  - build with the updated Oracle certificate
  - New secure boot signing key
  - Use redhat as efidir to maintain compatibility with RedHat


author: Charles R. Anderson <cra@wpi.edu> - 2008_10_13-10
changelog:
  - Patch to apply CFLAGS/LDFLAGS to final link so RPM_OPT_FLAGS are picked up (rhbz#1548426)
  - Use CC=gcc explicitly
  - Regenerate fxload-noa3load.patch


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 4.1.4-7
changelog:
  - Revert previous change of adding 'awk*' symlinks for info pages (bug #1486924)
  - Added patch to correctly fix the info pages issue (bug #1486924)
  - specfile content refactored for better readability
  - Package now provides its ABI version via gawk(abi)
  - Added test for usage of correct gawk(abi) into %check section


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 4.2.0-1
changelog:
  - Update to latest stable release from upstream [new API version - 2.0]
  - Added latest relevant patches from upstream's gawk-4.2-stable branch


author: David Kaspar [Dee'Kej] <dkaspar@redhat.com> - 4.2.0-2
changelog:
  - 'noarch' removed from *-devel subpackage
  - added arch requirement for *-devel subpackage
  - updated the build process to use %make_build macro


author: Richard Hughes <richard@hughsie.com> - 1.0-1
changelog:
  - New upstream release
  - This fixes the security bug known as CVE-2018-5345
  - Add new API for fwupd
  - Do not encode timezone in generated files
  - Fix countless memory leaks when parsing corrupt files
  - Fix the calculation of the checksum on big endian machines
  - Switch to the Meson buildsystem


author: Marek Polacek <polacek@redhat.com> 8.2.1-1.3
changelog:
  - change the default -march on s390x to z13 with tuning for z14 (#1571124)
  - use --disable-multilib on s390x


author: Jeff Law <law@redhat.com 8.2.1-3.4
changelog:
  - Backport PPC string inlines from trunk which allow for valgrind's
    memcheck to work properly (#1652929)
  - Backport bugfix for clz pattern on s390 affecting jemalloc (#1652016)


author: Qing Zhao <qing.zhao@oracle.com> 8.2.1-3.5.0.1
changelog:
  - Fix Orabug 29599147 - Need -fprofile-dir=%q{VAR} backported to gcc8
    This is the similar GCC PR47618, add the fix from Gcc9:
    gcc9-pr47618.patch
  - Fix Orabug 29457270 - With live patching, still need to obey "inline"
    directive
    This is the similar GCC PR89730, add the fix from Gcc9:
    gcc9-pr89730.patch
  - Fix Orabug 29178534 - SEGV in rdbms with gcc8 running lrgsrgdbcon1 
    lrgsrgdbcon2 lrgsrgdbcone 
    This is the similar GCC PR89595, add the fix from Gcc9:
    gcc9-pr89595.patch
    also fixes GCC PR PR89655 PR89656, add the fix from Gcc9:
    gcc9-pr89655-pr89656.patch
  - Fix Orabug 29272977 - DB SUPPORT: Need way to dump inlining report from GCC 
    Add -fopt-info-inline support from Gcc9:
    gcc9-opt-info-inline.patch
  - Fix Orabug 29273006 - DB SUPPORT: need way to turn off inlining of global functions 
    Add -flive-patching support from Gcc9:
    gcc9-fipa-reference-addressable.patch
    gcc9-fipa-stack-alignment.patch
    gcc9-add-fomit-frame-pointer-to-test.patch
    gcc9-flive-patching.patch
    gcc9-ipa-stack-alignment-386-test.patch
  - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.
  - Backport 17 ampere patches from
  https://git.theobroma-systems.com/ampere-computing/gcc.git/log/?h=gcc-8_2_0-amp3-branch
  e18301133ea622f6d6796ded1d15466e70475cf8: Retpoline (Spectre-V2 mitigation) for
  					  aarch64.
  d735f3ae4712f66362326d179b4d7e9332c79677: Revert "2017-10-24  Richard Biener
  271e2811e59c0c77fc022fa86a7030f20b4cac8e: Correct the maximum shift amount for 
  					  shifted
  0512749950d927de3dd695f2f2aacdfd30cf32fd: Add CPU support for Ampere Computing's
  				    	  eMAG.
  c8b87078f9e0714cb9cab602e12a18ceb12df05a: eMAG/Xgene: Procedural cost-model for
  					  X-Gene
  74610471b3577c5d465c3fd095a65b796b1e074c: Updating cost table for xgene1.
  ddba1553ac412be5596e6e2962c148032c4cf231: [AArch64] Add Xgene1 prefetch tunings.
  b7ebb0a10a8900324074070188a0936ed81b28a4: [AArch64] Fix in xgene1_addrcost_table
  393dc5c50d55d069f91627bf0be5bab812978850: X-Gene: Adapt tuning struct for GCC 8.
  b9136d58824af2118c4969c3edb42cad3318b08f: tree-ssa-list-find-pipeline: 
  					  Add pipelining loads for list finds.
  095496dd8a9491a17a9caec173281ad02e559df5: uncse: Added pass to undo common 
  					  subexpression elimination.
  a7c8dc238e3656e9d2f9256ee76f933c8d7956fb: loop-prefetcher: Adapt defaults for 
  					  X-Gene cores.
  256307f293f1750851576e14c8a42b696eced2da: tree-ssa-cpp: Don't crash on SSA names
  					  without definition stmts.
  6e32f53be4f6733f6bfe267ad2337aecaf4047f6: Introduce new option -funroll-more.
  1ac2485a2fced091a5cce6343fe6a6337f850e73: New option to bypass aliasing-checks.
  66d7d833bece61e58998ad53a609cd32e3ee4fad: cfgloopmanip: Allow forced creation 
  					  of loop preheaders.
  c4f89d50e200538b1ac8889801705300e0b27ef2: Add new pass to optimise loops.


author: Marek Polacek <polacek@redhat.com> 8.3.1-3
changelog:
  - update from Fedora 8.3.1-3 (#1680182)
  - remove load and test FP splitter (#1673116)
  - fix *movsi_from_df (#1677652)
  - add missing headers
  - add support for live patching (#1668903)
  - retire gcc8-rh1612514.patch, gcc8-rh1652016.patch, gcc8-rh1652929-?.patch


author: Marek Polacek <polacek@redhat.com> 8.3.1-4
changelog:
  - update from Fedora 8.3.1-4 (#1680182)
  - drop gcc8-pr60790.patch, gcc8-pr89629.patch, gcc8-rh1668903-4.patch


author: Marek Polacek <polacek@redhat.com> 8.3.1-4.2
changelog:
  - backport the -fuse-ld=lld option (#1670535)
  - TLS model fix (#1678555, PR c++/85400)
  - two small autoFDO fixes (#1686082)
  - libgomp update (#1707568)
  - member template redeclaration fix (#1652704, PR c++/86747)
  - turn libgcc_s.so into a linker script on i?86, x86_64, ppc64le and also on
    ppc and ppc64 for 64-bit multilib (#1708309)
  - avoid using unaligned vsx or lxvd2x/stxvd2x for memcpy/memmove inline
    expansion (#1666977)


author: Marek Polacek <polacek@redhat.com> 8.3.1-4.5
changelog:
  - fix shift count operand printing (#1730380)
  - fix tree-outof-ssa.c ICE with vector types (PR middle-end/90139, #1730454)
  - fix out-of-ssa with unsupported vector types (PR rtl-optimization/90756,
    - fix ICE with template placeholder for TTP (PR c++/86098, #1730454)


author: Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.1
changelog:
  - Fix Orabug 29599147 - Need -fprofile-dir=%q{VAR} backported to gcc8
    This is the similar GCC PR47618, add the fix from GCC9:
    gcc9-pr47618.patch
  - Fix Orabug 29272977 - DB SUPPORT: Need way to dump inlining report from GCC 
    Add -fopt-info-inline support from GCC9:
    gcc9-opt-info-inline.patch
  - Fix Orabug 29273006 - DB SUPPORT: need way to turn off inlining of global functions 
    Add -flive-patching support from GCC9:
    gcc9-fipa-reference-addressable.patch
    gcc9-fipa-stack-alignment.patch
    gcc9-add-fomit-frame-pointer-to-test.patch
    gcc9-extend-live-patching-option-handling.patch
    gcc9-ipa-stack-alignment-386-test.patch
  - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.
  - Backport 17 ampere patches from
  https://git.theobroma-systems.com/ampere-computing/gcc.git/log/?h=gcc-8_2_0-amp3-branch
  e18301133ea622f6d6796ded1d15466e70475cf8: Retpoline (Spectre-V2 mitigation) for
  					  aarch64.
  d735f3ae4712f66362326d179b4d7e9332c79677: Revert "2017-10-24  Richard Biener
  271e2811e59c0c77fc022fa86a7030f20b4cac8e: Correct the maximum shift amount for 
  					  shifted
  0512749950d927de3dd695f2f2aacdfd30cf32fd: Add CPU support for Ampere Computing's
  				    	  eMAG.
  c8b87078f9e0714cb9cab602e12a18ceb12df05a: eMAG/Xgene: Procedural cost-model for
  					  X-Gene
  74610471b3577c5d465c3fd095a65b796b1e074c: Updating cost table for xgene1.
  ddba1553ac412be5596e6e2962c148032c4cf231: [AArch64] Add Xgene1 prefetch tunings.
  b7ebb0a10a8900324074070188a0936ed81b28a4: [AArch64] Fix in xgene1_addrcost_table
  393dc5c50d55d069f91627bf0be5bab812978850: X-Gene: Adapt tuning struct for GCC 8.
  b9136d58824af2118c4969c3edb42cad3318b08f: tree-ssa-list-find-pipeline: 
  					  Add pipelining loads for list finds.
  095496dd8a9491a17a9caec173281ad02e559df5: uncse: Added pass to undo common 
  					  subexpression elimination.
  a7c8dc238e3656e9d2f9256ee76f933c8d7956fb: loop-prefetcher: Adapt defaults for 
  					  X-Gene cores.
  256307f293f1750851576e14c8a42b696eced2da: tree-ssa-cpp: Don't crash on SSA names
  					  without definition stmts.
  6e32f53be4f6733f6bfe267ad2337aecaf4047f6: Introduce new option -funroll-more.
  1ac2485a2fced091a5cce6343fe6a6337f850e73: New option to bypass aliasing-checks.
  66d7d833bece61e58998ad53a609cd32e3ee4fad: cfgloopmanip: Allow forced creation 
  					  of loop preheaders.
  c4f89d50e200538b1ac8889801705300e0b27ef2: Add new pass to optimise loops.


author: Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.2
changelog:
  - Fix Orabug 29968294 -  Heap corruption with fprofile-dir=%p prevents 
    profiling parallel processes, needed for RDBMS:
    Add patch to fix PR86057 from Gcc9:
    gcc9-pr86057.patch
  - Fix Orabug 30044244 - Profile directory concatenated with object file path 
    This is the same bug as gcc upstream PR91971:
    gcc9-pr85759.patch
    gcc10-pr91971.patch


author: Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.3
changelog:
  - CVE-2018-12207 / Intel SKX102
    OL8 gcc: Intel Mitigation for CVE: CVE-2018-12207
  - Allow -flto -Wa,-mbranches-within-32B-boundaries to pass -mbranches-within-32B-boundaries
    to GNU assembler. Without -lfto, -Wa,-mbranches-within-32B-boundaries to pass
    -mbranches-within-32B-boundaries to GNU assembler using existing GCC binaries.
  - Mitigation patch:
    gcc8-Fix-Wa-with-flto.patch


author: Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.4
changelog:
  - Add support for CTF in GCC
  - Fix Orabug 30102948 gcc: Add CTF generation to compiler
  - Fix Orabug 30102949 gcc: Add CTF generation to compiler (aarch64)
    ctf-1-new-function-lang_GNU_GIMPLE.patch
    ctf-2-command-line-options-gtLEVEL.patch
    ctf-3-generation-and-emission-for-a-single-compilation.patch
    ctf-4-update-ctf-testsuite.patch
    ctf-5-handle-ctf-sections-when-lto-enabled.patch


author: Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.5
changelog:
  - Update support for CTF
  - Fix Orabug 30778534 gcc should generate CTF for functions at file-scope only
  - Fix Orabug 30779193 CTF generation fails for some flavors of vla
  - Fix Orabug 30784275 Fix issues wtih CTF generation for typedef constructs
    ctf-3-generation-and-emission-for-a-single-compilation.patch
    ctf-4-update-ctf-testsuite.patch


author: Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.6
changelog:
  - Add 5 patches from gcc9 to support Arm Ares and Neoverse-N1 for Aarch64
    gcc9-add-mtune-support-for-arm-ares.patch
    gcc9-add-vec-reverse.patch
    gcc9-multiple-changes-align.patch
    gcc9-initial-mcpu-ares-tuning.patch
    gcc9-add-support-for-neoverse-n1.patch


author: Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.7
changelog:
  - Update support for CTF
  - Fix Orabug 30833294 GCC generates incorrect CTF for single element arrays
  - Fix Orabug 30808764 CTF generation fails when __attribute__ ((mode (XX))) is
    used


author: Marek Polacek <polacek@redhat.com> 8.3.1-5
changelog:
  - update from Fedora gcc-8.3.1-5 (#1747157)
  - use unspec_volatile for darn (PR target/91481, #1760205, CVE-2019-15847)


author: Jose E. Marchesi <jose.marchesi@oracle.com> 8.3.1-5.0.1
changelog:
  - Forward-port Oracle patches from ol8-u1.
  - Apply ares/neoverse support patches only ifarch aarch64.
    (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.6)
  - Add 5 patches from gcc9 to support Arm Ares and Neoverse-N1 for Aarch64
    gcc9-add-mtune-support-for-arm-ares.patch
    gcc9-add-vec-reverse.patch
    gcc9-multiple-changes-align.patch
    gcc9-initial-mcpu-ares-tuning.patch
    gcc9-add-support-for-neoverse-n1.patch
    (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.5)
  - Update support for CTF
  - Fix Orabug 30778534 gcc should generate CTF for functions at file-scope only
  - Fix Orabug 30779193 CTF generation fails for some flavors of vla
  - Fix Orabug 30784275 Fix issues wtih CTF generation for typedef constructs
    ctf-3-generation-and-emission-for-a-single-compilation.patch
    ctf-4-update-ctf-testsuite.patch
    (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.4)
  - Add support for CTF in GCC
  - Fix Orabug 30102948 gcc: Add CTF generation to compiler
  - Fix Orabug 30102949 gcc: Add CTF generation to compiler (aarch64)
    ctf-1-new-function-lang_GNU_GIMPLE.patch
    ctf-2-command-line-options-gtLEVEL.patch
    ctf-3-generation-and-emission-for-a-single-compilation.patch
    ctf-4-update-ctf-testsuite.patch
    ctf-5-handle-ctf-sections-when-lto-enabled.patch
    (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.3)
  - CVE-2018-12207 / Intel SKX102
    OL8 gcc: Intel Mitigation for CVE: CVE-2018-12207
  - Allow -flto -Wa,-mbranches-within-32B-boundaries to pass -mbranches-within-32B-boundaries
    to GNU assembler. Without -lfto, -Wa,-mbranches-within-32B-boundaries to pass
    -mbranches-within-32B-boundaries to GNU assembler using existing GCC binaries.
  - Mitigation patch:
    gcc8-Fix-Wa-with-flto.patch
    (Qing Zhao  <qing.zhao@oracle.com> 8.3.1-4.5.0.2)
  - Fix Orabug 29968294 -  Heap corruption with fprofile-dir=%p prevents 
    profiling parallel processes, needed for RDBMS:
    Add patch to fix PR86057 from Gcc9:
    gcc9-pr86057.patch
  - Fix Orabug 30044244 - Profile directory concatenated with object file path 
    This is the same bug as gcc upstream PR91971:
    gcc9-pr85759.patch
    gcc10-pr91971.patch
     (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.1)
  - Fix Orabug 29599147 - Need -fprofile-dir=%q{VAR} backported to gcc8
    This is the similar GCC PR47618, add the fix from GCC9:
    gcc9-pr47618.patch
  - Fix Orabug 29272977 - DB SUPPORT: Need way to dump inlining report from GCC 
    Add -fopt-info-inline support from GCC9:
    gcc9-opt-info-inline.patch
  - Fix Orabug 29273006 - DB SUPPORT: need way to turn off inlining of global functions 
    Add -flive-patching support from GCC9:
    gcc9-fipa-reference-addressable.patch
    gcc9-fipa-stack-alignment.patch
    gcc9-add-fomit-frame-pointer-to-test.patch
    gcc9-extend-live-patching-option-handling.patch
    gcc9-ipa-stack-alignment-386-test.patch
  - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.
  - Backport 17 ampere patches from
    https://git.theobroma-systems.com/ampere-computing/gcc.git/log/?h=gcc-8_2_0-amp3-branch
    e18301133ea622f6d6796ded1d15466e70475cf8: Retpoline (Spectre-V2 mitigation) for
    					  aarch64.
    d735f3ae4712f66362326d179b4d7e9332c79677: Revert 2017-10-24  Richard Biener
    271e2811e59c0c77fc022fa86a7030f20b4cac8e: Correct the maximum shift amount for 
    					  shifted
    0512749950d927de3dd695f2f2aacdfd30cf32fd: Add CPU support for Ampere Computing's
    				    	  eMAG.
    c8b87078f9e0714cb9cab602e12a18ceb12df05a: eMAG/Xgene: Procedural cost-model for
    					  X-Gene
    74610471b3577c5d465c3fd095a65b796b1e074c: Updating cost table for xgene1.
    ddba1553ac412be5596e6e2962c148032c4cf231: [AArch64] Add Xgene1 prefetch tunings.
    b7ebb0a10a8900324074070188a0936ed81b28a4: [AArch64] Fix in xgene1_addrcost_table
    393dc5c50d55d069f91627bf0be5bab812978850: X-Gene: Adapt tuning struct for GCC 8.
    b9136d58824af2118c4969c3edb42cad3318b08f: tree-ssa-list-find-pipeline: 
    					  Add pipelining loads for list finds.
    095496dd8a9491a17a9caec173281ad02e559df5: uncse: Added pass to undo common 
    					  subexpression elimination.
    a7c8dc238e3656e9d2f9256ee76f933c8d7956fb: loop-prefetcher: Adapt defaults for 
    					  X-Gene cores.
    256307f293f1750851576e14c8a42b696eced2da: tree-ssa-cpp: Don't crash on SSA names
    					  without definition stmts.
    6e32f53be4f6733f6bfe267ad2337aecaf4047f6: Introduce new option -funroll-more.
    1ac2485a2fced091a5cce6343fe6a6337f850e73: New option to bypass aliasing-checks.
    66d7d833bece61e58998ad53a609cd32e3ee4fad: cfgloopmanip: Allow forced creation 
    					  of loop preheaders.
    c4f89d50e200538b1ac8889801705300e0b27ef2: Add new pass to optimise loops.
  - Reviewed by: Elena Zannoni <elena.zannoni@oracle.com>


author: Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.0.3
changelog:
  - Fix Orabug 29838827 - provide an option to adjust the maximum depth of nested #include
    This is the same bug as gcc upstream PR90581 from Gcc9:
    gcc9-pr90581.patch
  - Fix Orabug 29541051 -  confusing error message when there is a problem
    with ASAN_OPTIONS "ERROR: expected '='"
    This is the same bug as gcc upstream PR89832 from Gcc9:
    gcc9-pr89832.patch


author: Jose E. Marchesi <jose.marchesi@oracle.com> 8.3.1-5.0.4
changelog:
  - Fix generation of CTF type records for completed structs referred
    thru pointers.
  - Orabug 31095790.
  - Reviewed-by: Egeyar Bagcioglu <egeyar.bagcioglu@oracle.com>


author: Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.0.5
changelog:
  - Add 8 patches from gcc9,10 to support -moutline-atomics for aarch64
    gcc9-early-clobber-aarch64-store.patch
    gcc9-gen-helper-substituting-iterat.patch
    gcc9-imp-swp-generation.patch
    gcc9-imp-atomic-op-lse.patch
    gcc9-simplify-lse-cas.patch
    gcc9-improve-cas.patch
    gcc9-visibility-to-libfunc.patch
    gcc10-imp-moutline-atomics.patch


author: Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.0.6
changelog:
  - Replace the previous 8 patches in version 0.5 with 19 patches from upstream
    gcc 8 to support -moutline-atomics for aarch64
    moutline-1-add-early-clobber.patch
    moutline-2-simplify-lse-cas.patch
    moutline-3-imp-cas-gen.patch
    moutline-4-imp-swp-gen.patch
    moutline-5-imp-atomic-op-lse.patch
    moutline-6-remove-early-clobber.patch
    moutline-7-extend-R-for-intreg.patch
    moutline-8-imp-TImode-compare-and-swap.patch
    moutline-9-fix-shrinkwrapping-interactions.patch
    moutline-10-tidy-split-compare-and-swap.patch
    moutline-11-out-of-line-for-lse-atomics.patch
    moutline-12-visibility-to-libfunc.patch
    moutline-13-imp-moutline-atomics.patch
    moutline-14-fix-store-exclusive-lse.patch
    moutline-15-configure-for-sys-auxv-libgcc-lse.patch
    moutline-16-fix-compare-and-swphi.patch
    moutline-17-fix-bootstrap-with-old-binutils.patch
    moutline-18-fix-ice-dueto-gen-compare-reg.patch
    moutline-19-re-pr90724.patch


author: Marek Polacek <polacek@redhat.com> 8.3.1-5.1
changelog:
  - consider negative edges in cycle detection (#1817991, PR gcov-profile/91601)
  - fix Fortran debug info for arrays with descriptors (#1655624,
    PR fortran/92775)
  - fix wrong code emitted for movv1qi on s390x (#1784758, PR target/92950)


author: Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.1.0.2
changelog:
  - Fix Orabug 32301371 - bug using gcov with preserve paths option
    This is the same bug as GCC bug PR gcov-profile/88994
    gcc9-pr88994.patch


author: Marek Polacek <polacek@redhat.com> 8.4.1-1
changelog:
  - update from GCC 8.4 release (#1868446)
  - remove symlinks to 32-bit versions of these static libraries: libasan.a,
    libitm.a, libquadmath.a, libubsan.a, libgfortran.a (#1779597)


author: Qing Zhao <qing.zhao@oracle.com> 8.4.1-1.0.1
changelog:
  - Merge the following oracle patches to OL8.4 beta:
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>

  - Fix Orabug 32301371 - bug using gcov with preserve paths option
    This is the same bug as GCC bug PR gcov-profile/88994
    gcc9-pr88994.patch
    (Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.1.0.2)
  - Fix generation of CTF type records for completed structs referred
    thru pointers.
    Orabug 31095790.
    (Jose E. Marchesi <jose.marchesi@oracle.com> 8.3.1-5.0.4)
  - Fix Orabug 29838827 - provide an option to adjust the maximum depth 
    of nested #include
    This is the same bug as gcc upstream PR90581 from Gcc9:
    gcc9-pr90581.patch
  - Fix Orabug 29541051 -  confusing error message when there is a problem
    with ASAN_OPTIONS "ERROR: expected '='"
    This is the same bug as gcc upstream PR89832 from Gcc9:
    gcc9-pr89832.patch
    (Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.0.3)
  - Update support for CTF
    Fix Orabug 30833294 GCC generates incorrect CTF for single element arrays
    Fix Orabug 30808764 CTF generation fails when __attribute__ ((mode (XX))) is
    used
    (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-5.0.2)
  - Apply ares/neoverse support patches only ifarch aarch64.
    (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.6)
  - Add 4 patches from gcc9 to support Arm Ares and Neoverse-N1 for Aarch64
    gcc9-add-vec-reverse.patch
    gcc9-multiple-changes-align.patch
    gcc9-initial-mcpu-ares-tuning.patch
    gcc9-add-support-for-neoverse-n1.patch
    (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.5)
  - Update support for CTF
    Fix Orabug 30778534 gcc should generate CTF for functions at file-scope only
    Fix Orabug 30779193 CTF generation fails for some flavors of vla
    Fix Orabug 30784275 Fix issues wtih CTF generation for typedef constructs
    ctf-3-generation-and-emission-for-a-single-compilation.patch
    ctf-4-update-ctf-testsuite.patch
    (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.4)
  - Add support for CTF in GCC
    Fix Orabug 30102948 gcc: Add CTF generation to compiler
    Fix Orabug 30102949 gcc: Add CTF generation to compiler (aarch64)
    ctf-1-new-function-lang_GNU_GIMPLE.patch
    ctf-2-command-line-options-gtLEVEL.patch
    ctf-3-generation-and-emission-for-a-single-compilation.patch
    ctf-4-update-ctf-testsuite.patch
    ctf-5-handle-ctf-sections-when-lto-enabled.patch
    (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.3)
  - CVE-2018-12207 / Intel SKX102
    OL8 gcc: Intel Mitigation for CVE: CVE-2018-12207
  - Allow -flto -Wa,-mbranches-within-32B-boundaries to pass -mbranches-within-32B-boundaries
    to GNU assembler. Without -lfto, -Wa,-mbranches-within-32B-boundaries to pass
    -mbranches-within-32B-boundaries to GNU assembler using existing GCC binaries.
  - Mitigation patch:
    gcc8-Fix-Wa-with-flto.patch
    (Qing Zhao  <qing.zhao@oracle.com> 8.3.1-4.5.0.2)
  - Fix Orabug 29968294 -  Heap corruption with fprofile-dir=%p prevents
    profiling parallel processes, needed for RDBMS:
    Add patch to fix PR86057 from Gcc9:
    gcc9-pr86057.patch
  - Fix Orabug 30044244 - Profile directory concatenated with object file path
    This is the same bug as gcc upstream PR91971:
    gcc9-pr85759.patch
    gcc10-pr91971.patch
    (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.1)
  - Fix Orabug 29599147 - Need -fprofile-dir=%q{VAR} backported to gcc8
    This is the similar GCC PR47618, add the fix from GCC9:
    gcc9-pr47618.patch
  - Fix Orabug 29272977 - DB SUPPORT: Need way to dump inlining report from GCC
    Add -fopt-info-inline support from GCC9:
    gcc9-opt-info-inline.patch
  - Fix Orabug 29273006 - DB SUPPORT: need way to turn off inlining of global functions
    Add -flive-patching support from GCC9:
    gcc9-fipa-reference-addressable.patch
    gcc9-fipa-stack-alignment.patch
    gcc9-add-fomit-frame-pointer-to-test.patch
    gcc9-extend-live-patching-option-handling.patch
    gcc9-ipa-stack-alignment-386-test.patch
  - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.
  - Backport 17 ampere patches from
    https://git.theobroma-systems.com/ampere-computing/gcc.git/log/?h=gcc-8_2_0-amp3-branch
    e18301133ea622f6d6796ded1d15466e70475cf8: Retpoline (Spectre-V2 mitigation) for
                                            aarch64.
    d735f3ae4712f66362326d179b4d7e9332c79677: Revert 2017-10-24  Richard Biener
    271e2811e59c0c77fc022fa86a7030f20b4cac8e: Correct the maximum shift amount for
                                            shifted
    0512749950d927de3dd695f2f2aacdfd30cf32fd: Add CPU support for Ampere Computing's
                                            eMAG.
    c8b87078f9e0714cb9cab602e12a18ceb12df05a: eMAG/Xgene: Procedural cost-model for
                                            X-Gene
    74610471b3577c5d465c3fd095a65b796b1e074c: Updating cost table for xgene1.
    ddba1553ac412be5596e6e2962c148032c4cf231: [AArch64] Add Xgene1 prefetch tunings.
    b7ebb0a10a8900324074070188a0936ed81b28a4: [AArch64] Fix in xgene1_addrcost_table
    393dc5c50d55d069f91627bf0be5bab812978850: X-Gene: Adapt tuning struct for GCC 8.
    b9136d58824af2118c4969c3edb42cad3318b08f: tree-ssa-list-find-pipeline:
                                            Add pipelining loads for list finds.
    095496dd8a9491a17a9caec173281ad02e559df5: uncse: Added pass to undo common
                                            subexpression elimination.
    a7c8dc238e3656e9d2f9256ee76f933c8d7956fb: loop-prefetcher: Adapt defaults for
                                            X-Gene cores.
    256307f293f1750851576e14c8a42b696eced2da: tree-ssa-cpp: Don't crash on SSA names
                                            without definition stmts.
    6e32f53be4f6733f6bfe267ad2337aecaf4047f6: Introduce new option -funroll-more.
    1ac2485a2fced091a5cce6343fe6a6337f850e73: New option to bypass aliasing-checks.
    66d7d833bece61e58998ad53a609cd32e3ee4fad: cfgloopmanip: Allow forced creation
                                            of loop preheaders.
    c4f89d50e200538b1ac8889801705300e0b27ef2: Add new pass to optimise loops.


author: Patrick.McGehearty <patrick.mcgehearty@oracle.com> 8.4.1-1.0.2
changelog:
  - Add complex divide improvement
    backport of upstream commit 54f0224d55a1b56dde092460ddf76913670e6efc
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Indu Bhagat <indu.bhagat@oracle.com> 8.4.1-1.0.3
changelog:
  - Fix Orabug 33281392 Update CTF and BTF support in OL8 GCC
    This commit brings the support for CTF/BTF debug formats at par with
    upstream.  GCC now generates the CTF/BTF debug information by using the
    internal DWARF representation.
    For backward compatibility reasons, OL8 GCC continues to support -gt
    command line option.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Indu Bhagat <indu.bhagat@oracle.com> 8.4.1-1.0.4
changelog:
  - Fix Orabug 33451471 and backport CTF/BTF enhancements
      ctfc: Free CTF container elements in ctfc_delete_container ()
      ctf: Do not warn for CTF not supported for GNU GIMPLE
      ICE in btf_finalize when compiling with -gbtf (PR debug/102507, Orabug
      33451471)
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Qing Zhao <qing.zhao@oracle.com> 8.5.0-4.0.2
changelog:
  - Add patches to support marvell on Arm:
    gcc9-add-support-for-profile-extension.patch
    gcc10-add-initial-octeontx2-support.patch
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.0.2
changelog:
  - Fix Orabug 34066706 only in OL GCC.
    report error when there is no PROGRAM_SUMMARY section in .gcda file.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.1.0.1
changelog:
  - Merge oracle patches with gcc-8.5.0-10.1.el8_6.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Marek Polacek <polacek@redhat.com> 8.5.0-13
changelog:
  - require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
  - backport Default widths with -fdec-format-defaults patch (#2074614)


author: Qing Zhao <qing.zhao@oracle.com> 8.5.0-15.0.2
changelog:
  - Fix Orabug 34679540 - PROFILE COLLECT BUILD AND WORK LOAD TEST
    ISSUES IN LINUX ARM64.
    Removing the buggy patch that has been removed from upstream gcc too:
    gcc10-pr91971.patch


author: Jose E. Marchesi <jose.marchesi@oracle.com> 8.5.0-16.0.2
changelog:
  - Support for -mpreserve-args in aarch64.
  - Fix Orabug 25853011.
  - Reviewed-by: Qing Zhao <qing.zhao@oracle.com>.


author: Marek Polacek <polacek@redhat.com> 8.5.0-17
changelog:
  - fix deserialization for std::normal_distribution (#2130392,
    PR libstdc++/105502)
  - initialize std::normal_distribution::_M_saved (PR libstdc++/99536)
  - reject std::make_shared<T[]> (PR libstdc++/99006)


author: Jose E. Marchesi <jose.marchesi@oracle.com> 8.5.0-18.0.2
changelog:
  - Support for -mpreserve-args in aarch64.
  - Orabug 35065765.
  Reviewed-by: Qing Zhao <qing.zhao@oracle.com>.


author: Qing Zhao <qing.zhao@oracle.com> 8.5.0-18.0.5
changelog:
  - CVE-2023-4039 GCC mitigation.
    Orabug 35751743.
    Includes removal of aarch64-preserve-args.patch.  
  - CVE-2022-40982 "Intel Downfall" mitigation.
    Orabug 35751810.
    Add two patches originally from GCC upstream releases/gcc-11 branch.
    with major adjustment.
    gcc11-downfall-disable-gather-in-vec.patch
    gcc11-downfall-support-mno-gather.patch
  Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> 8.5.0-18.0.6
changelog:
  - Backport additional patches from gcc-9 to fix CVE-2023-4039 patches
    interaction with backported aarch64 -fstack-clash-protection support.
    [Orabug 35843962]
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Marek Polacek <polacek@redhat.com> 8.5.0-20
changelog:
  - fix for TLSLD references (#2213753)
  - fix crash in dynamic_cast<>() on null pointer (PR c++/99074, #2211506)
  - adjust a pattern in s390.md (PR target/87723, #2214847)


author: Jose E. Marchesi <jose.marchesi@oracle.com> 8.5.0-20.0.2
changelog:
  - Restore support for -mpreserve-args in aarch64 targets, adapted to
    new AArch64 stack frame layout.
  - Reviewed-by: Cupertino Miranda <cupertino.miranda@oracle.com>


author: Qing Zhao <qing.zhao@oracle.com> 8.5.0-20.0.3
changelog:
  - Fix Orabug 35283123, i.e, the same bug as GCC PR111407.
    gcc14-pr111407.patch
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Qing Zhao <qing.zhao@oracle.com> 8.5.0-21.0.1
changelog:
  - Merge Oracle patches to 8.5.0-21.
    Oracle history:
    January-19-2024 Qing Zhao <qing.zhao@oracle.com> 8.5.0-20.0.3
    - Fix Orabug 35283123, i.e, the same bug as GCC PR111407.
      gcc14-pr111407.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    January-5-2024 Jose E. Marchesi <jose.marchesi@oracle.com> 8.5.0-20.0.2
    - Restore support for -mpreserve-args in aarch64 targets, adapted to
      new AArch64 stack frame layout.
      Reviewed-by: Cupertino Miranda <cupertino.miranda@oracle.com>
    October-4-2023 David Faust <david.faust@oracle.com> 8.5.0-20.0.1
    - Forward-port Oracle patches
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2023 David Faust <david.faust@oracle.com> 8.5.0-18.0.6
    - Backport additional patches from gcc-9 to fix CVE-2023-4039 patches
      interaction with backported aarch64 -fstack-clash-protection support.
      [Orabug 35843962]
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-31-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-18.0.5
    - CVE-2023-4039 GCC mitigation.
      Orabug 35751743.
      Includes removal of aarch64-preserve-args.patch.
    - CVE-2022-40982 "Intel Downfall" mitigation.
      Orabug 35751810.
      Add two patches originally from GCC upstream releases/gcc-11 branch.
      with major adjustment.
      gcc11-downfall-disable-gather-in-vec.patch
      gcc11-downfall-support-mno-gather.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-11-2023 Jose E. Marchesi <jose.marchesi@oracle.com> 8.5.0-18.0.2
    - Support for -mpreserve-args in aarch64.
      Orabug 35065765.
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>.
    March-28-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-18.0.1
    - Merge Oracle patches with gcc-8.5.0-18.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    January-12-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-16.0.1
    - Merge oracle patches with gcc-8.5.0-16.
    November-30-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-15.0.2
    - Fix Orabug 34679540 - PROFILE COLLECT BUILD AND WORK LOAD TEST
      ISSUES IN LINUX ARM64.
      Removing the buggy patch that has been removed from upstream gcc too:
      gcc10-pr91971.patch
    September-28-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-15.0.1
    - Merge oracle patches with gcc-8.5.0-15.
    June-29-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.1.0.1
    - Merge oracle patches with gcc-8.5.0-10.1.el8_6.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-4-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.0.2
    - Fix Orabug 34066706 only in OL GCC.
      report error when there is no PROGRAM_SUMMARY section in .gcda file.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-27-2022 Marek Polacek <polacek@redhat.com> 8.5.0-10.1
    - backport Default widths with -fdec-format-defaults patch (#2079578)
    March-22-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.0.1
    - Merge with oracle patches.
    January-5-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-4.0.2
    - Add patches to support marvell on Arm:
      gcc9-add-support-for-profile-extension.patch
      gcc10-add-initial-octeontx2-support.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-16-2021 Qing Zhao <qing.zhao@oracle.com> 8.5.0-4.0.1
    - Merge oracle patches to security errata 8.5.0-4.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-14-2021 Indu Bhagat <indu.bhagat@oracle.com> 8.5.0-3.0.2
    - Fix Orabug 33451471 and backport CTF/BTF enhancements
      ctfc: Free CTF container elements in ctfc_delete_container ()
      ctf: Do not warn for CTF not supported for GNU GIMPLE
      ICE in btf_finalize when compiling with -gbtf (PR debug/102507, Orabug
      33451471)
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-5-2021 Qing Zhao <qing.zhao@oracle.com> 8.5.0-3.0.1
    - Merge the following oracle patches to OL8.5 beta:
      - Fix an aarch64 compilation error triggered by the oracle patch
        gcc9-multiple-changes-align.patch on OL8U5 source base.
        gcc-fix-aarch64-tune-params.patch
      - Fix Orabug 33281392 Update CTF and BTF support in OL8 GCC
        This commit brings the support for CTF/BTF debug formats at par with
        upstream.  GCC now generates the CTF/BTF debug information by using the
        internal DWARF representation.
        For backward compatibility reasons, OL8 GCC continues to support -gt
        command line option.
        (Indu Bhagat <indu.bhagat@oracle.com> 8.4.1-1.0.3)
      - Add complex divide improvement
        backport of upstream commit 54f0224d55a1b56dde092460ddf76913670e6efc
        (Patrick.McGehearty <patrick.mcgehearty@oracle.com> 8.4.1-1.0.2)
      - Fix Orabug 32301371 - bug using gcov with preserve paths option
        This is the same bug as GCC bug PR gcov-profile/88994
        gcc9-pr88994.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.1.0.2)
      - Fix generation of CTF type records for completed structs referred
        thru pointers.
        Orabug 31095790.
        (Jose E. Marchesi <jose.marchesi@oracle.com> 8.3.1-5.0.4)
      - Fix Orabug 29838827 - provide an option to adjust the maximum depth
        of nested #include
        This is the same bug as gcc upstream PR90581 from Gcc9:
        gcc9-pr90581.patch
      - Fix Orabug 29541051 -  confusing error message when there is a problem
        with ASAN_OPTIONS "ERROR: expected '='"
        This is the same bug as gcc upstream PR89832 from Gcc9:
        gcc9-pr89832.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.0.3)
      - Update support for CTF
        Fix Orabug 30833294 GCC generates incorrect CTF for single element arrays
        Fix Orabug 30808764 CTF generation fails when __attribute__ ((mode (XX))) is
        used
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-5.0.2)
      - Apply ares/neoverse support patches only ifarch aarch64.
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.6)
      - Add 4 patches from gcc9 to support Arm Ares and Neoverse-N1 for Aarch64
        gcc9-add-vec-reverse.patch
        gcc9-multiple-changes-align.patch
        gcc9-initial-mcpu-ares-tuning.patch
        gcc9-add-support-for-neoverse-n1.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.5)
      - Update support for CTF
        Fix Orabug 30778534 gcc should generate CTF for functions at file-scope only
        Fix Orabug 30779193 CTF generation fails for some flavors of vla
        Fix Orabug 30784275 Fix issues wtih CTF generation for typedef constructs
        ctf-3-generation-and-emission-for-a-single-compilation.patch
        ctf-4-update-ctf-testsuite.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.4)
      - Add support for CTF in GCC
        Fix Orabug 30102948 gcc: Add CTF generation to compiler
        Fix Orabug 30102949 gcc: Add CTF generation to compiler (aarch64)
        ctf-1-new-function-lang_GNU_GIMPLE.patch
        ctf-2-command-line-options-gtLEVEL.patch
        ctf-3-generation-and-emission-for-a-single-compilation.patch
        ctf-4-update-ctf-testsuite.patch
        ctf-5-handle-ctf-sections-when-lto-enabled.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.3)
      - CVE-2018-12207 / Intel SKX102
        OL8 gcc: Intel Mitigation for CVE: CVE-2018-12207
      - Allow -flto -Wa,-mbranches-within-32B-boundaries to pass -mbranches-within-32B-boundaries
        to GNU assembler. Without -lfto, -Wa,-mbranches-within-32B-boundaries to pass
        -mbranches-within-32B-boundaries to GNU assembler using existing GCC binaries.
      - Mitigation patch:
        gcc8-Fix-Wa-with-flto.patch
        (Qing Zhao  <qing.zhao@oracle.com> 8.3.1-4.5.0.2)
      - Fix Orabug 29968294 -      Heap corruption with fprofile-dir=%p prevents
        profiling parallel processes, needed for RDBMS:
        Add patch to fix PR86057 from Gcc9:
        gcc9-pr86057.patch
      - Fix Orabug 30044244 - Profile directory concatenated with object file path
        This is the same bug as gcc upstream PR91971:
        gcc9-pr85759.patch
        gcc10-pr91971.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.1)
      - Fix Orabug 29599147 - Need -fprofile-dir=%q{VAR} backported to gcc8
        This is the similar GCC PR47618, add the fix from GCC9:
        gcc9-pr47618.patch
      - Fix Orabug 29272977 - DB SUPPORT: Need way to dump inlining report from GCC
        Add -fopt-info-inline support from GCC9:
        gcc9-opt-info-inline.patch
      - Fix Orabug 29273006 - DB SUPPORT: need way to turn off inlining of global functions
        Add -flive-patching support from GCC9:
        gcc9-fipa-reference-addressable.patch
        gcc9-fipa-stack-alignment.patch
        gcc9-add-fomit-frame-pointer-to-test.patch
        gcc9-extend-live-patching-option-handling.patch
        gcc9-ipa-stack-alignment-386-test.patch
      - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.
      - Backport 17 ampere patches from
        https://git.theobroma-systems.com/ampere-computing/gcc.git/log/?h=gcc-8_2_0-amp3-branch
        e18301133ea622f6d6796ded1d15466e70475cf8: Retpoline (Spectre-V2 mitigation) for
                                                  aarch64.
        d735f3ae4712f66362326d179b4d7e9332c79677: Revert 2017-10-24  Richard Biener
        271e2811e59c0c77fc022fa86a7030f20b4cac8e: Correct the maximum shift amount for
                                                  shifted
        0512749950d927de3dd695f2f2aacdfd30cf32fd: Add CPU support for Ampere Computing's
                                                  eMAG.
        c8b87078f9e0714cb9cab602e12a18ceb12df05a: eMAG/Xgene: Procedural cost-model for
                                                  X-Gene
        74610471b3577c5d465c3fd095a65b796b1e074c: Updating cost table for xgene1.
        ddba1553ac412be5596e6e2962c148032c4cf231: [AArch64] Add Xgene1 prefetch tunings.
        b7ebb0a10a8900324074070188a0936ed81b28a4: [AArch64] Fix in xgene1_addrcost_table
        393dc5c50d55d069f91627bf0be5bab812978850: X-Gene: Adapt tuning struct for GCC 8.
        b9136d58824af2118c4969c3edb42cad3318b08f: tree-ssa-list-find-pipeline:
                                                  Add pipelining loads for list finds.
        095496dd8a9491a17a9caec173281ad02e559df5: uncse: Added pass to undo common
                                                  subexpression elimination.
        a7c8dc238e3656e9d2f9256ee76f933c8d7956fb: loop-prefetcher: Adapt defaults for
                                                  X-Gene cores.
        256307f293f1750851576e14c8a42b696eced2da: tree-ssa-cpp: Don't crash on SSA names
                                                  without definition stmts.
        6e32f53be4f6733f6bfe267ad2337aecaf4047f6: Introduce new option -funroll-more.
        1ac2485a2fced091a5cce6343fe6a6337f850e73: New option to bypass aliasing-checks.
        66d7d833bece61e58998ad53a609cd32e3ee4fad: cfgloopmanip: Allow forced creation
                                                  of loop preheaders.
        c4f89d50e200538b1ac8889801705300e0b27ef2: Add new pass to optimise loops.


author: Qing Zhao <qing.zhao@oracle.com> 8.5.0-22.0.1
changelog:
  - Merge Oracle patches to 8.5.0-22.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    March-27-2024 Qing Zhao <qing.zhao@oracle.com> 8.5.0-21.0.1
    - Merge Oracle patches to 8.5.0-21.
    January-19-2024 Qing Zhao <qing.zhao@oracle.com> 8.5.0-20.0.3
    - Fix Orabug 35283123, i.e, the same bug as GCC PR111407.
      gcc14-pr111407.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    January-5-2024 Jose E. Marchesi <jose.marchesi@oracle.com> 8.5.0-20.0.2
    - Restore support for -mpreserve-args in aarch64 targets, adapted to
      new AArch64 stack frame layout.
      Reviewed-by: Cupertino Miranda <cupertino.miranda@oracle.com>
    October-4-2023 David Faust <david.faust@oracle.com> 8.5.0-20.0.1
    - Forward-port Oracle patches
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2023 David Faust <david.faust@oracle.com> 8.5.0-18.0.6
    - Backport additional patches from gcc-9 to fix CVE-2023-4039 patches
      interaction with backported aarch64 -fstack-clash-protection support.
      [Orabug 35843962]
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-31-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-18.0.5
    - CVE-2023-4039 GCC mitigation.
      Orabug 35751743.
      Includes removal of aarch64-preserve-args.patch.
    - CVE-2022-40982 "Intel Downfall" mitigation.
      Orabug 35751810.
      Add two patches originally from GCC upstream releases/gcc-11 branch.
      with major adjustment.
      gcc11-downfall-disable-gather-in-vec.patch
      gcc11-downfall-support-mno-gather.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-11-2023 Jose E. Marchesi <jose.marchesi@oracle.com> 8.5.0-18.0.2
    - Support for -mpreserve-args in aarch64.
      Orabug 35065765.
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>.
    March-28-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-18.0.1
    - Merge Oracle patches with gcc-8.5.0-18.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    January-12-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-16.0.1
    - Merge oracle patches with gcc-8.5.0-16.
    November-30-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-15.0.2
    - Fix Orabug 34679540 - PROFILE COLLECT BUILD AND WORK LOAD TEST
      ISSUES IN LINUX ARM64.
      Removing the buggy patch that has been removed from upstream gcc too:
      gcc10-pr91971.patch
    September-28-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-15.0.1
    - Merge oracle patches with gcc-8.5.0-15.
    June-29-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.1.0.1
    - Merge oracle patches with gcc-8.5.0-10.1.el8_6.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-4-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.0.2
    - Fix Orabug 34066706 only in OL GCC.
      report error when there is no PROGRAM_SUMMARY section in .gcda file.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-27-2022 Marek Polacek <polacek@redhat.com> 8.5.0-10.1
    - backport Default widths with -fdec-format-defaults patch (#2079578)
    March-22-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.0.1
    - Merge with oracle patches.
    January-5-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-4.0.2
    - Add patches to support marvell on Arm:
      gcc9-add-support-for-profile-extension.patch
      gcc10-add-initial-octeontx2-support.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-16-2021 Qing Zhao <qing.zhao@oracle.com> 8.5.0-4.0.1
    - Merge oracle patches to security errata 8.5.0-4.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-14-2021 Indu Bhagat <indu.bhagat@oracle.com> 8.5.0-3.0.2
    - Fix Orabug 33451471 and backport CTF/BTF enhancements
      ctfc: Free CTF container elements in ctfc_delete_container ()
      ctf: Do not warn for CTF not supported for GNU GIMPLE
      ICE in btf_finalize when compiling with -gbtf (PR debug/102507, Orabug
      33451471)
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-5-2021 Qing Zhao <qing.zhao@oracle.com> 8.5.0-3.0.1
    - Merge the following oracle patches to OL8.5 beta:
      - Fix an aarch64 compilation error triggered by the oracle patch
        gcc9-multiple-changes-align.patch on OL8U5 source base.
        gcc-fix-aarch64-tune-params.patch
      - Fix Orabug 33281392 Update CTF and BTF support in OL8 GCC
        This commit brings the support for CTF/BTF debug formats at par with
        upstream.  GCC now generates the CTF/BTF debug information by using the
        internal DWARF representation.
        For backward compatibility reasons, OL8 GCC continues to support -gt
        command line option.
        (Indu Bhagat <indu.bhagat@oracle.com> 8.4.1-1.0.3)
      - Add complex divide improvement
        backport of upstream commit 54f0224d55a1b56dde092460ddf76913670e6efc
        (Patrick.McGehearty <patrick.mcgehearty@oracle.com> 8.4.1-1.0.2)
      - Fix Orabug 32301371 - bug using gcov with preserve paths option
        This is the same bug as GCC bug PR gcov-profile/88994
        gcc9-pr88994.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.1.0.2)
      - Fix generation of CTF type records for completed structs referred
        thru pointers.
        Orabug 31095790.
        (Jose E. Marchesi <jose.marchesi@oracle.com> 8.3.1-5.0.4)
      - Fix Orabug 29838827 - provide an option to adjust the maximum depth
        of nested #include
        This is the same bug as gcc upstream PR90581 from Gcc9:
        gcc9-pr90581.patch
      - Fix Orabug 29541051 -  confusing error message when there is a problem
        with ASAN_OPTIONS "ERROR: expected '='"
        This is the same bug as gcc upstream PR89832 from Gcc9:
        gcc9-pr89832.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.0.3)
      - Update support for CTF
        Fix Orabug 30833294 GCC generates incorrect CTF for single element arrays
        Fix Orabug 30808764 CTF generation fails when __attribute__ ((mode (XX))) is
        used
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-5.0.2)
      - Apply ares/neoverse support patches only ifarch aarch64.
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.6)
      - Add 4 patches from gcc9 to support Arm Ares and Neoverse-N1 for Aarch64
        gcc9-add-vec-reverse.patch
        gcc9-multiple-changes-align.patch
        gcc9-initial-mcpu-ares-tuning.patch
        gcc9-add-support-for-neoverse-n1.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.5)
      - Update support for CTF
        Fix Orabug 30778534 gcc should generate CTF for functions at file-scope only
        Fix Orabug 30779193 CTF generation fails for some flavors of vla
        Fix Orabug 30784275 Fix issues wtih CTF generation for typedef constructs
        ctf-3-generation-and-emission-for-a-single-compilation.patch
        ctf-4-update-ctf-testsuite.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.4)
      - Add support for CTF in GCC
        Fix Orabug 30102948 gcc: Add CTF generation to compiler
        Fix Orabug 30102949 gcc: Add CTF generation to compiler (aarch64)
        ctf-1-new-function-lang_GNU_GIMPLE.patch
        ctf-2-command-line-options-gtLEVEL.patch
        ctf-3-generation-and-emission-for-a-single-compilation.patch
        ctf-4-update-ctf-testsuite.patch
        ctf-5-handle-ctf-sections-when-lto-enabled.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.3)
      - CVE-2018-12207 / Intel SKX102
        OL8 gcc: Intel Mitigation for CVE: CVE-2018-12207
      - Allow -flto -Wa,-mbranches-within-32B-boundaries to pass -mbranches-within-32B-boundaries
        to GNU assembler. Without -lfto, -Wa,-mbranches-within-32B-boundaries to pass
        -mbranches-within-32B-boundaries to GNU assembler using existing GCC binaries.
      - Mitigation patch:
        gcc8-Fix-Wa-with-flto.patch
        (Qing Zhao  <qing.zhao@oracle.com> 8.3.1-4.5.0.2)
      - Fix Orabug 29968294 -      Heap corruption with fprofile-dir=%p prevents
        profiling parallel processes, needed for RDBMS:
        Add patch to fix PR86057 from Gcc9:
        gcc9-pr86057.patch
      - Fix Orabug 30044244 - Profile directory concatenated with object file path
        This is the same bug as gcc upstream PR91971:
        gcc9-pr85759.patch
        gcc10-pr91971.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.1)
      - Fix Orabug 29599147 - Need -fprofile-dir=%q{VAR} backported to gcc8
        This is the similar GCC PR47618, add the fix from GCC9:
        gcc9-pr47618.patch
      - Fix Orabug 29272977 - DB SUPPORT: Need way to dump inlining report from GCC
        Add -fopt-info-inline support from GCC9:
        gcc9-opt-info-inline.patch
      - Fix Orabug 29273006 - DB SUPPORT: need way to turn off inlining of global functions
        Add -flive-patching support from GCC9:
        gcc9-fipa-reference-addressable.patch
        gcc9-fipa-stack-alignment.patch
        gcc9-add-fomit-frame-pointer-to-test.patch
        gcc9-extend-live-patching-option-handling.patch
        gcc9-ipa-stack-alignment-386-test.patch
      - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.
      - Backport 17 ampere patches from
        https://git.theobroma-systems.com/ampere-computing/gcc.git/log/?h=gcc-8_2_0-amp3-branch
        e18301133ea622f6d6796ded1d15466e70475cf8: Retpoline (Spectre-V2 mitigation) for
                                                  aarch64.
        d735f3ae4712f66362326d179b4d7e9332c79677: Revert 2017-10-24  Richard Biener
        271e2811e59c0c77fc022fa86a7030f20b4cac8e: Correct the maximum shift amount for
                                                  shifted
        0512749950d927de3dd695f2f2aacdfd30cf32fd: Add CPU support for Ampere Computing's
                                                  eMAG.
        c8b87078f9e0714cb9cab602e12a18ceb12df05a: eMAG/Xgene: Procedural cost-model for
                                                  X-Gene
        74610471b3577c5d465c3fd095a65b796b1e074c: Updating cost table for xgene1.
        ddba1553ac412be5596e6e2962c148032c4cf231: [AArch64] Add Xgene1 prefetch tunings.
        b7ebb0a10a8900324074070188a0936ed81b28a4: [AArch64] Fix in xgene1_addrcost_table
        393dc5c50d55d069f91627bf0be5bab812978850: X-Gene: Adapt tuning struct for GCC 8.
        b9136d58824af2118c4969c3edb42cad3318b08f: tree-ssa-list-find-pipeline:
                                                  Add pipelining loads for list finds.
        095496dd8a9491a17a9caec173281ad02e559df5: uncse: Added pass to undo common
                                                  subexpression elimination.
        a7c8dc238e3656e9d2f9256ee76f933c8d7956fb: loop-prefetcher: Adapt defaults for
                                                  X-Gene cores.
        256307f293f1750851576e14c8a42b696eced2da: tree-ssa-cpp: Don't crash on SSA names
                                                  without definition stmts.
        6e32f53be4f6733f6bfe267ad2337aecaf4047f6: Introduce new option -funroll-more.
        1ac2485a2fced091a5cce6343fe6a6337f850e73: New option to bypass aliasing-checks.
        66d7d833bece61e58998ad53a609cd32e3ee4fad: cfgloopmanip: Allow forced creation
                                                  of loop preheaders.
        c4f89d50e200538b1ac8889801705300e0b27ef2: Add new pass to optimise loops.


author: Qing Zhao <qing.zhao@oracle.com> 8.5.0-23.0.1
changelog:
  - Merge Oracle patches to 8.5.0-23.
    Oracle history:
    May-22-2024 Qing Zhao <qing.zhao@oracle.com> 8.5.0-22.0.1
    - Merge Oracle patches to 8.5.0-22.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-27-2024 Qing Zhao <qing.zhao@oracle.com> 8.5.0-21.0.1
    - Merge Oracle patches to 8.5.0-21.
    January-19-2024 Qing Zhao <qing.zhao@oracle.com> 8.5.0-20.0.3
    - Fix Orabug 35283123, i.e, the same bug as GCC PR111407.
      gcc14-pr111407.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    January-5-2024 Jose E. Marchesi <jose.marchesi@oracle.com> 8.5.0-20.0.2
    - Restore support for -mpreserve-args in aarch64 targets, adapted to
      new AArch64 stack frame layout.
      Reviewed-by: Cupertino Miranda <cupertino.miranda@oracle.com>
    October-4-2023 David Faust <david.faust@oracle.com> 8.5.0-20.0.1
    - Forward-port Oracle patches
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2023 David Faust <david.faust@oracle.com> 8.5.0-18.0.6
    - Backport additional patches from gcc-9 to fix CVE-2023-4039 patches
      interaction with backported aarch64 -fstack-clash-protection support.
      [Orabug 35843962]
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-31-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-18.0.5
    - CVE-2023-4039 GCC mitigation.
      Orabug 35751743.
      Includes removal of aarch64-preserve-args.patch.
    - CVE-2022-40982 "Intel Downfall" mitigation.
      Orabug 35751810.
      Add two patches originally from GCC upstream releases/gcc-11 branch.
      with major adjustment.
      gcc11-downfall-disable-gather-in-vec.patch
      gcc11-downfall-support-mno-gather.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-11-2023 Jose E. Marchesi <jose.marchesi@oracle.com> 8.5.0-18.0.2
    - Support for -mpreserve-args in aarch64.
      Orabug 35065765.
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>.
    March-28-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-18.0.1
    - Merge Oracle patches with gcc-8.5.0-18.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    January-12-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-16.0.1
    - Merge oracle patches with gcc-8.5.0-16.
    November-30-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-15.0.2
    - Fix Orabug 34679540 - PROFILE COLLECT BUILD AND WORK LOAD TEST
      ISSUES IN LINUX ARM64.
      Removing the buggy patch that has been removed from upstream gcc too:
      gcc10-pr91971.patch
    September-28-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-15.0.1
    - Merge oracle patches with gcc-8.5.0-15.
    June-29-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.1.0.1
    - Merge oracle patches with gcc-8.5.0-10.1.el8_6.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-4-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.0.2
    - Fix Orabug 34066706 only in OL GCC.
      report error when there is no PROGRAM_SUMMARY section in .gcda file.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-27-2022 Marek Polacek <polacek@redhat.com> 8.5.0-10.1
    - backport Default widths with -fdec-format-defaults patch (#2079578)
    March-22-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.0.1
    - Merge with oracle patches.
    January-5-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-4.0.2
    - Add patches to support marvell on Arm:
      gcc9-add-support-for-profile-extension.patch
      gcc10-add-initial-octeontx2-support.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-16-2021 Qing Zhao <qing.zhao@oracle.com> 8.5.0-4.0.1
    - Merge oracle patches to security errata 8.5.0-4.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-14-2021 Indu Bhagat <indu.bhagat@oracle.com> 8.5.0-3.0.2
    - Fix Orabug 33451471 and backport CTF/BTF enhancements
      ctfc: Free CTF container elements in ctfc_delete_container ()
      ctf: Do not warn for CTF not supported for GNU GIMPLE
      ICE in btf_finalize when compiling with -gbtf (PR debug/102507, Orabug
      33451471)
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-5-2021 Qing Zhao <qing.zhao@oracle.com> 8.5.0-3.0.1
    - Merge the following oracle patches to OL8.5 beta:
      - Fix an aarch64 compilation error triggered by the oracle patch
        gcc9-multiple-changes-align.patch on OL8U5 source base.
        gcc-fix-aarch64-tune-params.patch
      - Fix Orabug 33281392 Update CTF and BTF support in OL8 GCC
        This commit brings the support for CTF/BTF debug formats at par with
        upstream.  GCC now generates the CTF/BTF debug information by using the
        internal DWARF representation.
        For backward compatibility reasons, OL8 GCC continues to support -gt
        command line option.
        (Indu Bhagat <indu.bhagat@oracle.com> 8.4.1-1.0.3)
      - Add complex divide improvement
        backport of upstream commit 54f0224d55a1b56dde092460ddf76913670e6efc
        (Patrick.McGehearty <patrick.mcgehearty@oracle.com> 8.4.1-1.0.2)
      - Fix Orabug 32301371 - bug using gcov with preserve paths option
        This is the same bug as GCC bug PR gcov-profile/88994
        gcc9-pr88994.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.1.0.2)
      - Fix generation of CTF type records for completed structs referred
        thru pointers.
        Orabug 31095790.
        (Jose E. Marchesi <jose.marchesi@oracle.com> 8.3.1-5.0.4)
      - Fix Orabug 29838827 - provide an option to adjust the maximum depth
        of nested #include
        This is the same bug as gcc upstream PR90581 from Gcc9:
        gcc9-pr90581.patch
      - Fix Orabug 29541051 -  confusing error message when there is a problem
        with ASAN_OPTIONS "ERROR: expected '='"
        This is the same bug as gcc upstream PR89832 from Gcc9:
        gcc9-pr89832.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.0.3)
      - Update support for CTF
        Fix Orabug 30833294 GCC generates incorrect CTF for single element arrays
        Fix Orabug 30808764 CTF generation fails when __attribute__ ((mode (XX))) is
        used
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-5.0.2)
      - Apply ares/neoverse support patches only ifarch aarch64.
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.6)
      - Add 4 patches from gcc9 to support Arm Ares and Neoverse-N1 for Aarch64
        gcc9-add-vec-reverse.patch
        gcc9-multiple-changes-align.patch
        gcc9-initial-mcpu-ares-tuning.patch
        gcc9-add-support-for-neoverse-n1.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.5)
      - Update support for CTF
        Fix Orabug 30778534 gcc should generate CTF for functions at file-scope only
        Fix Orabug 30779193 CTF generation fails for some flavors of vla
        Fix Orabug 30784275 Fix issues wtih CTF generation for typedef constructs
        ctf-3-generation-and-emission-for-a-single-compilation.patch
        ctf-4-update-ctf-testsuite.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.4)
      - Add support for CTF in GCC
        Fix Orabug 30102948 gcc: Add CTF generation to compiler
        Fix Orabug 30102949 gcc: Add CTF generation to compiler (aarch64)
        ctf-1-new-function-lang_GNU_GIMPLE.patch
        ctf-2-command-line-options-gtLEVEL.patch
        ctf-3-generation-and-emission-for-a-single-compilation.patch
        ctf-4-update-ctf-testsuite.patch
        ctf-5-handle-ctf-sections-when-lto-enabled.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.3)
      - CVE-2018-12207 / Intel SKX102
        OL8 gcc: Intel Mitigation for CVE: CVE-2018-12207
      - Allow -flto -Wa,-mbranches-within-32B-boundaries to pass -mbranches-within-32B-boundaries
        to GNU assembler. Without -lfto, -Wa,-mbranches-within-32B-boundaries to pass
        -mbranches-within-32B-boundaries to GNU assembler using existing GCC binaries.
      - Mitigation patch:
        gcc8-Fix-Wa-with-flto.patch
        (Qing Zhao  <qing.zhao@oracle.com> 8.3.1-4.5.0.2)
      - Fix Orabug 29968294 -      Heap corruption with fprofile-dir=%p prevents
        profiling parallel processes, needed for RDBMS:
        Add patch to fix PR86057 from Gcc9:
        gcc9-pr86057.patch
      - Fix Orabug 30044244 - Profile directory concatenated with object file path
        This is the same bug as gcc upstream PR91971:
        gcc9-pr85759.patch
        gcc10-pr91971.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.1)
      - Fix Orabug 29599147 - Need -fprofile-dir=%q{VAR} backported to gcc8
        This is the similar GCC PR47618, add the fix from GCC9:
        gcc9-pr47618.patch
      - Fix Orabug 29272977 - DB SUPPORT: Need way to dump inlining report from GCC
        Add -fopt-info-inline support from GCC9:
        gcc9-opt-info-inline.patch
      - Fix Orabug 29273006 - DB SUPPORT: need way to turn off inlining of global functions
        Add -flive-patching support from GCC9:
        gcc9-fipa-reference-addressable.patch
        gcc9-fipa-stack-alignment.patch
        gcc9-add-fomit-frame-pointer-to-test.patch
        gcc9-extend-live-patching-option-handling.patch
        gcc9-ipa-stack-alignment-386-test.patch
      - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.
      - Backport 17 ampere patches from
        https://git.theobroma-systems.com/ampere-computing/gcc.git/log/?h=gcc-8_2_0-amp3-branch
        e18301133ea622f6d6796ded1d15466e70475cf8: Retpoline (Spectre-V2 mitigation) for
                                                  aarch64.
        d735f3ae4712f66362326d179b4d7e9332c79677: Revert 2017-10-24  Richard Biener
        271e2811e59c0c77fc022fa86a7030f20b4cac8e: Correct the maximum shift amount for
                                                  shifted
        0512749950d927de3dd695f2f2aacdfd30cf32fd: Add CPU support for Ampere Computing's
                                                  eMAG.
        c8b87078f9e0714cb9cab602e12a18ceb12df05a: eMAG/Xgene: Procedural cost-model for
                                                  X-Gene
        74610471b3577c5d465c3fd095a65b796b1e074c: Updating cost table for xgene1.
        ddba1553ac412be5596e6e2962c148032c4cf231: [AArch64] Add Xgene1 prefetch tunings.
        b7ebb0a10a8900324074070188a0936ed81b28a4: [AArch64] Fix in xgene1_addrcost_table
        393dc5c50d55d069f91627bf0be5bab812978850: X-Gene: Adapt tuning struct for GCC 8.
        b9136d58824af2118c4969c3edb42cad3318b08f: tree-ssa-list-find-pipeline:
                                                  Add pipelining loads for list finds.
        095496dd8a9491a17a9caec173281ad02e559df5: uncse: Added pass to undo common
                                                  subexpression elimination.
        a7c8dc238e3656e9d2f9256ee76f933c8d7956fb: loop-prefetcher: Adapt defaults for
                                                  X-Gene cores.
        256307f293f1750851576e14c8a42b696eced2da: tree-ssa-cpp: Don't crash on SSA names
                                                  without definition stmts.
        6e32f53be4f6733f6bfe267ad2337aecaf4047f6: Introduce new option -funroll-more.
        1ac2485a2fced091a5cce6343fe6a6337f850e73: New option to bypass aliasing-checks.
        66d7d833bece61e58998ad53a609cd32e3ee4fad: cfgloopmanip: Allow forced creation
                                                  of loop preheaders.
        c4f89d50e200538b1ac8889801705300e0b27ef2: Add new pass to optimise loops.


author: Qing Zhao <qing.zhao@oracle.com> 8.5.0-24.0.1
changelog:
  - Merge Oracle patches to 8.5.0-24.
    Oracle history:
    February-11 2025 Qing Zhao <qing.zhao@oracle.com> 8.5.0-23.0.1
    - Merge Oracle patches to 8.5.0-23.
    May-22-2024 Qing Zhao <qing.zhao@oracle.com> 8.5.0-22.0.1
    - Merge Oracle patches to 8.5.0-22.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-27-2024 Qing Zhao <qing.zhao@oracle.com> 8.5.0-21.0.1
    - Merge Oracle patches to 8.5.0-21.
    January-19-2024 Qing Zhao <qing.zhao@oracle.com> 8.5.0-20.0.3
    - Fix Orabug 35283123, i.e, the same bug as GCC PR111407.
      gcc14-pr111407.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    January-5-2024 Jose E. Marchesi <jose.marchesi@oracle.com> 8.5.0-20.0.2
    - Restore support for -mpreserve-args in aarch64 targets, adapted to
      new AArch64 stack frame layout.
      Reviewed-by: Cupertino Miranda <cupertino.miranda@oracle.com>
    October-4-2023 David Faust <david.faust@oracle.com> 8.5.0-20.0.1
    - Forward-port Oracle patches
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2023 David Faust <david.faust@oracle.com> 8.5.0-18.0.6
    - Backport additional patches from gcc-9 to fix CVE-2023-4039 patches
      interaction with backported aarch64 -fstack-clash-protection support.
      [Orabug 35843962]
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-31-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-18.0.5
    - CVE-2023-4039 GCC mitigation.
      Orabug 35751743.
      Includes removal of aarch64-preserve-args.patch.
    - CVE-2022-40982 "Intel Downfall" mitigation.
      Orabug 35751810.
      Add two patches originally from GCC upstream releases/gcc-11 branch.
      with major adjustment.
      gcc11-downfall-disable-gather-in-vec.patch
      gcc11-downfall-support-mno-gather.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-11-2023 Jose E. Marchesi <jose.marchesi@oracle.com> 8.5.0-18.0.2
    - Support for -mpreserve-args in aarch64.
      Orabug 35065765.
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>.
    March-28-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-18.0.1
    - Merge Oracle patches with gcc-8.5.0-18.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    January-12-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-16.0.1
    - Merge oracle patches with gcc-8.5.0-16.
    November-30-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-15.0.2
    - Fix Orabug 34679540 - PROFILE COLLECT BUILD AND WORK LOAD TEST
      ISSUES IN LINUX ARM64.
      Removing the buggy patch that has been removed from upstream gcc too:
      gcc10-pr91971.patch
    September-28-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-15.0.1
    - Merge oracle patches with gcc-8.5.0-15.
    June-29-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.1.0.1
    - Merge oracle patches with gcc-8.5.0-10.1.el8_6.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-4-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.0.2
    - Fix Orabug 34066706 only in OL GCC.
      report error when there is no PROGRAM_SUMMARY section in .gcda file.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-27-2022 Marek Polacek <polacek@redhat.com> 8.5.0-10.1
    - backport Default widths with -fdec-format-defaults patch (#2079578)
    March-22-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.0.1
    - Merge with oracle patches.
    January-5-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-4.0.2
    - Add patches to support marvell on Arm:
      gcc9-add-support-for-profile-extension.patch
      gcc10-add-initial-octeontx2-support.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-16-2021 Qing Zhao <qing.zhao@oracle.com> 8.5.0-4.0.1
    - Merge oracle patches to security errata 8.5.0-4.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-14-2021 Indu Bhagat <indu.bhagat@oracle.com> 8.5.0-3.0.2
    - Fix Orabug 33451471 and backport CTF/BTF enhancements
      ctfc: Free CTF container elements in ctfc_delete_container ()
      ctf: Do not warn for CTF not supported for GNU GIMPLE
      ICE in btf_finalize when compiling with -gbtf (PR debug/102507, Orabug
      33451471)
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-5-2021 Qing Zhao <qing.zhao@oracle.com> 8.5.0-3.0.1
    - Merge the following oracle patches to OL8.5 beta:
      - Fix an aarch64 compilation error triggered by the oracle patch
        gcc9-multiple-changes-align.patch on OL8U5 source base.
        gcc-fix-aarch64-tune-params.patch
      - Fix Orabug 33281392 Update CTF and BTF support in OL8 GCC
        This commit brings the support for CTF/BTF debug formats at par with
        upstream.  GCC now generates the CTF/BTF debug information by using the
        internal DWARF representation.
        For backward compatibility reasons, OL8 GCC continues to support -gt
        command line option.
        (Indu Bhagat <indu.bhagat@oracle.com> 8.4.1-1.0.3)
      - Add complex divide improvement
        backport of upstream commit 54f0224d55a1b56dde092460ddf76913670e6efc
        (Patrick.McGehearty <patrick.mcgehearty@oracle.com> 8.4.1-1.0.2)
      - Fix Orabug 32301371 - bug using gcov with preserve paths option
        This is the same bug as GCC bug PR gcov-profile/88994
        gcc9-pr88994.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.1.0.2)
      - Fix generation of CTF type records for completed structs referred
        thru pointers.
        Orabug 31095790.
        (Jose E. Marchesi <jose.marchesi@oracle.com> 8.3.1-5.0.4)
      - Fix Orabug 29838827 - provide an option to adjust the maximum depth
        of nested #include
        This is the same bug as gcc upstream PR90581 from Gcc9:
        gcc9-pr90581.patch
      - Fix Orabug 29541051 -  confusing error message when there is a problem
        with ASAN_OPTIONS "ERROR: expected '='"
        This is the same bug as gcc upstream PR89832 from Gcc9:
        gcc9-pr89832.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.0.3)
      - Update support for CTF
        Fix Orabug 30833294 GCC generates incorrect CTF for single element arrays
        Fix Orabug 30808764 CTF generation fails when __attribute__ ((mode (XX))) is
        used
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-5.0.2)
      - Apply ares/neoverse support patches only ifarch aarch64.
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.6)
      - Add 4 patches from gcc9 to support Arm Ares and Neoverse-N1 for Aarch64
        gcc9-add-vec-reverse.patch
        gcc9-multiple-changes-align.patch
        gcc9-initial-mcpu-ares-tuning.patch
        gcc9-add-support-for-neoverse-n1.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.5)
      - Update support for CTF
        Fix Orabug 30778534 gcc should generate CTF for functions at file-scope only
        Fix Orabug 30779193 CTF generation fails for some flavors of vla
        Fix Orabug 30784275 Fix issues wtih CTF generation for typedef constructs
        ctf-3-generation-and-emission-for-a-single-compilation.patch
        ctf-4-update-ctf-testsuite.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.4)
      - Add support for CTF in GCC
        Fix Orabug 30102948 gcc: Add CTF generation to compiler
        Fix Orabug 30102949 gcc: Add CTF generation to compiler (aarch64)
        ctf-1-new-function-lang_GNU_GIMPLE.patch
        ctf-2-command-line-options-gtLEVEL.patch
        ctf-3-generation-and-emission-for-a-single-compilation.patch
        ctf-4-update-ctf-testsuite.patch
        ctf-5-handle-ctf-sections-when-lto-enabled.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.3)
      - CVE-2018-12207 / Intel SKX102
        OL8 gcc: Intel Mitigation for CVE: CVE-2018-12207
      - Allow -flto -Wa,-mbranches-within-32B-boundaries to pass -mbranches-within-32B-boundaries
        to GNU assembler. Without -lfto, -Wa,-mbranches-within-32B-boundaries to pass
        -mbranches-within-32B-boundaries to GNU assembler using existing GCC binaries.
      - Mitigation patch:
        gcc8-Fix-Wa-with-flto.patch
        (Qing Zhao  <qing.zhao@oracle.com> 8.3.1-4.5.0.2)
      - Fix Orabug 29968294 -      Heap corruption with fprofile-dir=%p prevents
        profiling parallel processes, needed for RDBMS:
        Add patch to fix PR86057 from Gcc9:
        gcc9-pr86057.patch
      - Fix Orabug 30044244 - Profile directory concatenated with object file path
        This is the same bug as gcc upstream PR91971:
        gcc9-pr85759.patch
        gcc10-pr91971.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.1)
      - Fix Orabug 29599147 - Need -fprofile-dir=%q{VAR} backported to gcc8
        This is the similar GCC PR47618, add the fix from GCC9:
        gcc9-pr47618.patch
      - Fix Orabug 29272977 - DB SUPPORT: Need way to dump inlining report from GCC
        Add -fopt-info-inline support from GCC9:
        gcc9-opt-info-inline.patch
      - Fix Orabug 29273006 - DB SUPPORT: need way to turn off inlining of global functions
        Add -flive-patching support from GCC9:
        gcc9-fipa-reference-addressable.patch
        gcc9-fipa-stack-alignment.patch
        gcc9-add-fomit-frame-pointer-to-test.patch
        gcc9-extend-live-patching-option-handling.patch
        gcc9-ipa-stack-alignment-386-test.patch
      - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.
      - Backport 17 ampere patches from
        https://git.theobroma-systems.com/ampere-computing/gcc.git/log/?h=gcc-8_2_0-amp3-branch
        e18301133ea622f6d6796ded1d15466e70475cf8: Retpoline (Spectre-V2 mitigation) for
                                                  aarch64.
        d735f3ae4712f66362326d179b4d7e9332c79677: Revert 2017-10-24  Richard Biener
        271e2811e59c0c77fc022fa86a7030f20b4cac8e: Correct the maximum shift amount for
                                                  shifted
        0512749950d927de3dd695f2f2aacdfd30cf32fd: Add CPU support for Ampere Computing's
                                                  eMAG.
        c8b87078f9e0714cb9cab602e12a18ceb12df05a: eMAG/Xgene: Procedural cost-model for
                                                  X-Gene
        74610471b3577c5d465c3fd095a65b796b1e074c: Updating cost table for xgene1.
        ddba1553ac412be5596e6e2962c148032c4cf231: [AArch64] Add Xgene1 prefetch tunings.
        b7ebb0a10a8900324074070188a0936ed81b28a4: [AArch64] Fix in xgene1_addrcost_table
        393dc5c50d55d069f91627bf0be5bab812978850: X-Gene: Adapt tuning struct for GCC 8.
        b9136d58824af2118c4969c3edb42cad3318b08f: tree-ssa-list-find-pipeline:
                                                  Add pipelining loads for list finds.
        095496dd8a9491a17a9caec173281ad02e559df5: uncse: Added pass to undo common
                                                  subexpression elimination.
        a7c8dc238e3656e9d2f9256ee76f933c8d7956fb: loop-prefetcher: Adapt defaults for
                                                  X-Gene cores.
        256307f293f1750851576e14c8a42b696eced2da: tree-ssa-cpp: Don't crash on SSA names
                                                  without definition stmts.
        6e32f53be4f6733f6bfe267ad2337aecaf4047f6: Introduce new option -funroll-more.
        1ac2485a2fced091a5cce6343fe6a6337f850e73: New option to bypass aliasing-checks.
        66d7d833bece61e58998ad53a609cd32e3ee4fad: cfgloopmanip: Allow forced creation
                                                  of loop preheaders.
        c4f89d50e200538b1ac8889801705300e0b27ef2: Add new pass to optimise loops.


author: Jose E. Marchesi <jose.marchesi@oracle.com> 8.5.0-26.0.1
changelog:
  - Merge Oracle patches to 8.5.0-26.
    Reviewed-by: David Faust <david.faust@oracle.com>
    Oracle history:
    March-11 2025 Qing Zhao <qing.zhao@oracle.com> 8.5.0-24.0.1
    - Merge Oracle patches to 8.5.0-24.
    February-11 2025 Qing Zhao <qing.zhao@oracle.com> 8.5.0-23.0.1
    - Merge Oracle patches to 8.5.0-23.
    May-22-2024 Qing Zhao <qing.zhao@oracle.com> 8.5.0-22.0.1
    - Merge Oracle patches to 8.5.0-22.
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-27-2024 Qing Zhao <qing.zhao@oracle.com> 8.5.0-21.0.1
    - Merge Oracle patches to 8.5.0-21.
    January-19-2024 Qing Zhao <qing.zhao@oracle.com> 8.5.0-20.0.3
    - Fix Orabug 35283123, i.e, the same bug as GCC PR111407.
      gcc14-pr111407.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    January-5-2024 Jose E. Marchesi <jose.marchesi@oracle.com> 8.5.0-20.0.2
    - Restore support for -mpreserve-args in aarch64 targets, adapted to
      new AArch64 stack frame layout.
      Reviewed-by: Cupertino Miranda <cupertino.miranda@oracle.com>
    October-4-2023 David Faust <david.faust@oracle.com> 8.5.0-20.0.1
    - Forward-port Oracle patches
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2023 David Faust <david.faust@oracle.com> 8.5.0-18.0.6
    - Backport additional patches from gcc-9 to fix CVE-2023-4039 patches
      interaction with backported aarch64 -fstack-clash-protection support.
      [Orabug 35843962]
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-31-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-18.0.5
    - CVE-2023-4039 GCC mitigation.
      Orabug 35751743.
      Includes removal of aarch64-preserve-args.patch.
    - CVE-2022-40982 "Intel Downfall" mitigation.
      Orabug 35751810.
      Add two patches originally from GCC upstream releases/gcc-11 branch.
      with major adjustment.
      gcc11-downfall-disable-gather-in-vec.patch
      gcc11-downfall-support-mno-gather.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-11-2023 Jose E. Marchesi <jose.marchesi@oracle.com> 8.5.0-18.0.2
    - Support for -mpreserve-args in aarch64.
      Orabug 35065765.
      Reviewed-by: Qing Zhao <qing.zhao@oracle.com>.
    March-28-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-18.0.1
    - Merge Oracle patches with gcc-8.5.0-18.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    January-12-2023 Qing Zhao <qing.zhao@oracle.com> 8.5.0-16.0.1
    - Merge oracle patches with gcc-8.5.0-16.
    November-30-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-15.0.2
    - Fix Orabug 34679540 - PROFILE COLLECT BUILD AND WORK LOAD TEST
      ISSUES IN LINUX ARM64.
      Removing the buggy patch that has been removed from upstream gcc too:
      gcc10-pr91971.patch
    September-28-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-15.0.1
    - Merge oracle patches with gcc-8.5.0-15.
    June-29-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.1.0.1
    - Merge oracle patches with gcc-8.5.0-10.1.el8_6.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    May-4-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.0.2
    - Fix Orabug 34066706 only in OL GCC.
      report error when there is no PROGRAM_SUMMARY section in .gcda file.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-27-2022 Marek Polacek <polacek@redhat.com> 8.5.0-10.1
    - backport Default widths with -fdec-format-defaults patch (#2079578)
    March-22-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-10.0.1
    - Merge with oracle patches.
    January-5-2022 Qing Zhao <qing.zhao@oracle.com> 8.5.0-4.0.2
    - Add patches to support marvell on Arm:
      gcc9-add-support-for-profile-extension.patch
      gcc10-add-initial-octeontx2-support.patch
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-16-2021 Qing Zhao <qing.zhao@oracle.com> 8.5.0-4.0.1
    - Merge oracle patches to security errata 8.5.0-4.
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-14-2021 Indu Bhagat <indu.bhagat@oracle.com> 8.5.0-3.0.2
    - Fix Orabug 33451471 and backport CTF/BTF enhancements
      ctfc: Free CTF container elements in ctfc_delete_container ()
      ctf: Do not warn for CTF not supported for GNU GIMPLE
      ICE in btf_finalize when compiling with -gbtf (PR debug/102507, Orabug
      33451471)
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-5-2021 Qing Zhao <qing.zhao@oracle.com> 8.5.0-3.0.1
    - Merge the following oracle patches to OL8.5 beta:
      - Fix an aarch64 compilation error triggered by the oracle patch
        gcc9-multiple-changes-align.patch on OL8U5 source base.
        gcc-fix-aarch64-tune-params.patch
      - Fix Orabug 33281392 Update CTF and BTF support in OL8 GCC
        This commit brings the support for CTF/BTF debug formats at par with
        upstream.  GCC now generates the CTF/BTF debug information by using the
        internal DWARF representation.
        For backward compatibility reasons, OL8 GCC continues to support -gt
        command line option.
        (Indu Bhagat <indu.bhagat@oracle.com> 8.4.1-1.0.3)
      - Add complex divide improvement
        backport of upstream commit 54f0224d55a1b56dde092460ddf76913670e6efc
        (Patrick.McGehearty <patrick.mcgehearty@oracle.com> 8.4.1-1.0.2)
      - Fix Orabug 32301371 - bug using gcov with preserve paths option
        This is the same bug as GCC bug PR gcov-profile/88994
        gcc9-pr88994.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.1.0.2)
      - Fix generation of CTF type records for completed structs referred
        thru pointers.
        Orabug 31095790.
        (Jose E. Marchesi <jose.marchesi@oracle.com> 8.3.1-5.0.4)
      - Fix Orabug 29838827 - provide an option to adjust the maximum depth
        of nested #include
        This is the same bug as gcc upstream PR90581 from Gcc9:
        gcc9-pr90581.patch
      - Fix Orabug 29541051 -  confusing error message when there is a problem
        with ASAN_OPTIONS "ERROR: expected '='"
        This is the same bug as gcc upstream PR89832 from Gcc9:
        gcc9-pr89832.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-5.0.3)
      - Update support for CTF
        Fix Orabug 30833294 GCC generates incorrect CTF for single element arrays
        Fix Orabug 30808764 CTF generation fails when __attribute__ ((mode (XX))) is
        used
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-5.0.2)
      - Apply ares/neoverse support patches only ifarch aarch64.
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.6)
      - Add 4 patches from gcc9 to support Arm Ares and Neoverse-N1 for Aarch64
        gcc9-add-vec-reverse.patch
        gcc9-multiple-changes-align.patch
        gcc9-initial-mcpu-ares-tuning.patch
        gcc9-add-support-for-neoverse-n1.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.5)
      - Update support for CTF
        Fix Orabug 30778534 gcc should generate CTF for functions at file-scope only
        Fix Orabug 30779193 CTF generation fails for some flavors of vla
        Fix Orabug 30784275 Fix issues wtih CTF generation for typedef constructs
        ctf-3-generation-and-emission-for-a-single-compilation.patch
        ctf-4-update-ctf-testsuite.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.4)
      - Add support for CTF in GCC
        Fix Orabug 30102948 gcc: Add CTF generation to compiler
        Fix Orabug 30102949 gcc: Add CTF generation to compiler (aarch64)
        ctf-1-new-function-lang_GNU_GIMPLE.patch
        ctf-2-command-line-options-gtLEVEL.patch
        ctf-3-generation-and-emission-for-a-single-compilation.patch
        ctf-4-update-ctf-testsuite.patch
        ctf-5-handle-ctf-sections-when-lto-enabled.patch
        (Qing Zhao <qing.zhao@oracle.com> 8.3.1-4.5.0.3)
      - CVE-2018-12207 / Intel SKX102
        OL8 gcc: Intel Mitigation for CVE: CVE-2018-12207
      - Allow -flto -Wa,-mbranches-within-32B-boundaries to pass -mbranches-within-32B-boundaries
        to GNU assembler. Without -lfto, -Wa,-mbranches-within-32B-boundaries to pass
        -mbranches-within-32B-boundaries to GNU assembler using existing GCC binaries.
      - Mitigation patch:
        gcc8-Fix-Wa-with-flto.patch
        (Qing Zhao  <qing.zhao@oracle.com> 8.3.1-4.5.0.2)
      - Fix Orabug 29968294 -      Heap corruption with fprofile-dir=%p prevents
        profiling parallel processes, needed for RDBMS:
        Add patch to fix PR86057 from Gcc9:
        gcc9-pr86057.patch
      - Fix Orabug 30044244 - Profile directory concatenated with object file path
        This is the same bug as gcc upstream PR91971:
        gcc9-pr85759.patch
        gcc10-pr91971.patch
        (Indu Bhagat <indu.bhagat@oracle.com> 8.3.1-4.5.0.1)
      - Fix Orabug 29599147 - Need -fprofile-dir=%q{VAR} backported to gcc8
        This is the similar GCC PR47618, add the fix from GCC9:
        gcc9-pr47618.patch
      - Fix Orabug 29272977 - DB SUPPORT: Need way to dump inlining report from GCC
        Add -fopt-info-inline support from GCC9:
        gcc9-opt-info-inline.patch
      - Fix Orabug 29273006 - DB SUPPORT: need way to turn off inlining of global functions
        Add -flive-patching support from GCC9:
        gcc9-fipa-reference-addressable.patch
        gcc9-fipa-stack-alignment.patch
        gcc9-add-fomit-frame-pointer-to-test.patch
        gcc9-extend-live-patching-option-handling.patch
        gcc9-ipa-stack-alignment-386-test.patch
      - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE.
      - Backport 17 ampere patches from
        https://git.theobroma-systems.com/ampere-computing/gcc.git/log/?h=gcc-8_2_0-amp3-branch
        e18301133ea622f6d6796ded1d15466e70475cf8: Retpoline (Spectre-V2 mitigation) for
                                                  aarch64.
        d735f3ae4712f66362326d179b4d7e9332c79677: Revert 2017-10-24  Richard Biener
        271e2811e59c0c77fc022fa86a7030f20b4cac8e: Correct the maximum shift amount for
                                                  shifted
        0512749950d927de3dd695f2f2aacdfd30cf32fd: Add CPU support for Ampere Computing's
                                                  eMAG.
        c8b87078f9e0714cb9cab602e12a18ceb12df05a: eMAG/Xgene: Procedural cost-model for
                                                  X-Gene
        74610471b3577c5d465c3fd095a65b796b1e074c: Updating cost table for xgene1.
        ddba1553ac412be5596e6e2962c148032c4cf231: [AArch64] Add Xgene1 prefetch tunings.
        b7ebb0a10a8900324074070188a0936ed81b28a4: [AArch64] Fix in xgene1_addrcost_table
        393dc5c50d55d069f91627bf0be5bab812978850: X-Gene: Adapt tuning struct for GCC 8.
        b9136d58824af2118c4969c3edb42cad3318b08f: tree-ssa-list-find-pipeline:
                                                  Add pipelining loads for list finds.
        095496dd8a9491a17a9caec173281ad02e559df5: uncse: Added pass to undo common
                                                  subexpression elimination.
        a7c8dc238e3656e9d2f9256ee76f933c8d7956fb: loop-prefetcher: Adapt defaults for
                                                  X-Gene cores.
        256307f293f1750851576e14c8a42b696eced2da: tree-ssa-cpp: Don't crash on SSA names
                                                  without definition stmts.
        6e32f53be4f6733f6bfe267ad2337aecaf4047f6: Introduce new option -funroll-more.
        1ac2485a2fced091a5cce6343fe6a6337f850e73: New option to bypass aliasing-checks.
        66d7d833bece61e58998ad53a609cd32e3ee4fad: cfgloopmanip: Allow forced creation
                                                  of loop preheaders.
        c4f89d50e200538b1ac8889801705300e0b27ef2: Add new pass to optimise loops.


