# changelog

author: Dan Walsh <dwalsh@fedoraproject.org> - 2.76-1
changelog:
  - Allow containers to use fuse file systems by default
  - Allow containers to sendto dgram socket of container runtimes
  - Needed to run container runtimes in notify socket unit files.


author: Olcne-Builder Jenkins <olcne-builder_us@oracle.com> - 1.10.2-1
changelog:
  - Address CVE-2021-28683, CVE-2021-28682, CVE-2021-29258, CVE-2021-31920, CVE-2021-31921, CVE-2021-34824


author: michthom <michael.a.thompson@oracle.com> - 1.10.4-2
changelog:
  - Bump release, addresses the following envoy CVEs,
    CVE-2021-32777, CVE-2021-32778, CVE-2021-32779, CVE-2021-32780 & CVE-2021-32781


author: Thomas Tanaka <thomas.tanaka@oracle.com> - 1.9.6-2
changelog:
  - Fix iptables issue when running on OL7 host using OL8 image
  - Added istio-mixs and istio-mixc to Obsoletes list


author: Durai Govindasamy <durai.vattakalvalasu.govindas@oracle.com> - 1.12.1-1
changelog:
  - Updated to kata 1.12.1
  - Updated guest kernel (kernel-uek-container) minimum version to UEK6U2 (5.4.17-2102.200.7)


author: Jack Vogel <jack.vogel@oracle.com> - 5.4.17-2050.el7
changelog:
  - random: remove kernel.random.read_wakeup_threshold (Andy Lutomirski)  [Orabug: 32182241] 
  - random: delete code to pull data into pools (Andy Lutomirski)  [Orabug: 32182241] 
  - random: remove the blocking pool (Andy Lutomirski)  [Orabug: 32182241] 
  - random: make /dev/random be almost like /dev/urandom (Andy Lutomirski)  [Orabug: 32182241] 
  - random: ignore GRND_RANDOM in getentropy(2) (Andy Lutomirski)  [Orabug: 32182241] 
  - random: add GRND_INSECURE to return best-effort non-cryptographic bytes (Andy Lutomirski)  [Orabug: 32182241] 
  - random: Add a urandom_read_nowait() for random APIs that don't warn (Andy Lutomirski)  [Orabug: 32182241] 
  - random: Don't wake crng_init_wait when crng_init == 1 (Andy Lutomirski)  [Orabug: 32182241] 
  - hv_netvsc: make recording RSS hash depend on feature flag (Stephen Hemminger)  [Orabug: 32215160] 
  - hv_netvsc: record hardware hash in skb (Stephen Hemminger)  [Orabug: 32215160] 
  - scsi: lpfc: Update lpfc version to 12.8.0.5 (James Smart)  [Orabug: 32092645] 
  - scsi: lpfc: Reject CT request for MIB commands (James Smart)  [Orabug: 32092645] 
  - scsi: lpfc: Add FDMI Vendor MIB support (James Smart)  [Orabug: 32092645] 
  - scsi: lpfc: Enlarge max_sectors in scsi host templates (James Smart)  [Orabug: 32092645] 
  - scsi: lpfc: Fix duplicate wq_create_version check (James Smart)  [Orabug: 32092645] 
  - scsi: lpfc: Removed unused macros in lpfc_attr.c (James Smart)  [Orabug: 32092645] 
  - scsi: lpfc: Re-fix use after free in lpfc_rq_buf_free() (James Smart)  [Orabug: 32092645] 
  - scsi: lpfc: Fix scheduling call while in softirq context in lpfc_unreg_rpi (Himanshu Gupta)  [Orabug: 32092645] 
  - scsi: lpfc: Fix invalid sleeping context in lpfc_sli4_nvmet_alloc() (James Smart)  [Orabug: 32092645] 
  - scsi: Remove unneeded break statements (Tom Rix)  [Orabug: 32092645] 
  - scsi: lpfc: Remove unneeded variable 'status' in lpfc_fcp_cpu_map_store() (Ye Bin)  [Orabug: 32092645] 
  - scsi: lpfc: Drop nodelist reference on error in lpfc_gen_req() (Hannes Reinecke)  [Orabug: 32092645] 
  - scsi: lpfc: Remove set but not used 'qp' (Ye Bin)  [Orabug: 32092645] 
  - scsi: lpfc: Update lpfc version to 12.8.0.4 (James Smart)  [Orabug: 32092645] 
  - scsi: lpfc: Extend the RDF FPIN Registration descriptor for additional events (James Smart)  [Orabug: 32092645] 
  - scsi: lpfc: Fix setting IRQ affinity with an empty CPU mask (James Smart)  [Orabug: 32092645] 
  - scsi: lpfc: Fix spelling mistake "Cant" -> "Can't" (Colin Ian King)  [Orabug: 32092645] 
  - treewide: Use fallthrough pseudo-keyword (Himanshu Gupta)  [Orabug: 32092645] 
  - scsi: fc: Add 256GBit speed setting to SCSI FC transport (James Smart)  [Orabug: 31965482] 
  - perf/x86/intel/uncore: Add box_offsets for free-running counters (Kan Liang)  [Orabug: 32230497] 
  - perf/x86/intel/uncore: Factor out __snr_uncore_mmio_init_box (Kan Liang)  [Orabug: 32230497] 
  - perf/x86/intel/uncore: Add Ice Lake server uncore support (Kan Liang)  [Orabug: 32230497] 
  - Linux 5.4.81 (Greg Kroah-Hartman)  
  - ASoC: Intel: Skylake: Automatic DMIC format configuration according to information from NHLT (Mateusz Gorski)  
  - ASoC: Intel: Multiple I/O PCM format support for pipe (Mateusz Gorski)  
  - ASoC: Intel: Skylake: Await purge request ack on CNL (Cezary Rojewski)  
  - ASoC: Intel: Allow for ROM init retry on CNL platforms (Cezary Rojewski)  
  - ASoC: Intel: Skylake: Shield against no-NHLT configurations (Cezary Rojewski)  
  - ASoC: Intel: Skylake: Enable codec wakeup during chip init (Cezary Rojewski)  
  - ASoC: Intel: Skylake: Select hda configuration permissively (Cezary Rojewski)  
  - ASoC: Intel: Skylake: Remove superfluous chip initialization (Cezary Rojewski)  
  - USB: core: Fix regression in Hercules audio card (Alan Stern)  
  - x86/resctrl: Add necessary kernfs_put() calls to prevent refcount leak (Xiaochen Shen)  
  - x86/resctrl: Remove superfluous kernfs_get() calls to prevent refcount leak (Xiaochen Shen)  
  - x86/speculation: Fix prctl() when spectre_v2_user={seccomp,prctl},ibpb (Anand K Mistry)  
  - x86/mce: Do not overwrite no_way_out if mce_end() fails (Gabriele Paoloni)  
  - irqchip/exiu: Fix the index of fwspec for IRQ type (Chen Baozi)  
  - usb: gadget: Fix memleak in gadgetfs_fill_super (Zhang Qilong)  
  - USB: quirks: Add USB_QUIRK_DISCONNECT_SUSPEND quirk for Lenovo A630Z TIO built-in usb-audio card (penghao)  
  - usb: gadget: f_midi: Fix memleak in f_midi_alloc (Zhang Qilong)  
  - USB: core: Change %pK for __user pointers to %px (Alan Stern)  
  - spi: bcm2835aux: Restore err assignment in bcm2835aux_spi_probe (Nathan Chancellor)  
  - perf probe: Fix to die_entrypc() returns error correctly (Masami Hiramatsu)  
  - perf stat: Use proper cpu for shadow stats (Namhyung Kim)  
  - can: m_can: fix nominal bitiming tseg2 min for version >= 3.1 (Marc Kleine-Budde)  
  - can: m_can: m_can_open(): remove IRQF_TRIGGER_FALLING from request_threaded_irq()'s flags (Marc Kleine-Budde)  
  - RDMA/hns: Bugfix for memory window mtpt configuration (Yixian Liu)  
  - RDMA/hns: Fix retry_cnt and rnr_cnt when querying QP (Wenpeng Liang)  
  - platform/x86: toshiba_acpi: Fix the wrong variable assignment (Kaixu Xia)  
  - platform/x86: thinkpad_acpi: Send tablet mode switch at wakeup time (Benjamin Berg)  
  - can: gs_usb: fix endianess problem with candleLight firmware (Marc Kleine-Budde)  
  - efi: EFI_EARLYCON should depend on EFI (Geert Uytterhoeven)  
  - efivarfs: revert "fix memory leak in efivarfs_create()" (Ard Biesheuvel)  
  - arm64: tegra: Wrong AON HSP reg property size (Dipen Patel)  
  - optee: add writeback to valid memory type (Rui Miguel Silva)  
  - ibmvnic: fix NULL pointer dereference in ibmvic_reset_crq (Lijun Pan)  
  - ibmvnic: fix NULL pointer dereference in reset_sub_crq_queues (Lijun Pan)  
  - net: ena: set initial DMA width to avoid intel iommu issue (Shay Agroskin)  
  - nfc: s3fwrn5: use signed integer for parsing GPIO numbers (Krzysztof Kozlowski)  
  - i40e: Fix removing driver while bare-metal VFs pass traffic (Sylwester Dziedziuch)  
  - IB/mthca: fix return value of error branch in mthca_init_cq() (Xiongfeng Wang)  
  - powerpc/64s: Fix allnoconfig build since uaccess flush (Stephen Rothwell)  
  - ibmvnic: notify peers when failover and migration happen (Lijun Pan)  
  - ibmvnic: fix call_netdevice_notifiers in do_reset (Lijun Pan)  
  - s390/qeth: fix tear down of async TX buffers (Julian Wiedmann)  
  - s390/qeth: fix af_iucv notification race (Julian Wiedmann)  
  - s390/qeth: make af_iucv TX notification call more robust (Julian Wiedmann)  
  - cxgb4: fix the panic caused by non smac rewrite (Raju Rangoju)  
  - bnxt_en: Release PCI regions when DMA mask setup fails during probe. (Michael Chan)  
  - video: hyperv_fb: Fix the cache type when mapping the VRAM (Dexuan Cui)  
  - bnxt_en: fix error return code in bnxt_init_board() (Zhang Changzhong)  
  - bnxt_en: fix error return code in bnxt_init_one() (Zhang Changzhong)  
  - scsi: ufs: Fix race between shutdown and runtime resume flow (Stanley Chu)  
  - ARM: dts: dra76x: m_can: fix order of clocks (Marc Kleine-Budde)  
  - arch: pgtable: define MAX_POSSIBLE_PHYSMEM_BITS where needed (Arnd Bergmann)  
  - batman-adv: set .owner to THIS_MODULE (Taehee Yoo)  
  - iwlwifi: mvm: write queue_sync_state only for sync (Avraham Stern)  
  - phy: tegra: xusb: Fix dangling pointer on probe failure (Marc Zyngier)  
  - ARM: OMAP2+: Manage MPU state properly for omap_enter_idle_coupled() (Tony Lindgren)  
  - bus: ti-sysc: Fix bogus resetdone warning on enable for cpsw (Tony Lindgren)  
  - net: dsa: mv88e6xxx: Wait for EEPROM done after HW reset (Andrew Lunn)  
  - xtensa: uaccess: Add missing __user to strncpy_from_user() prototype (Laurent Pinchart)  
  - perf/x86: fix sysfs type mismatches (Sami Tolvanen)  
  - scsi: target: iscsi: Fix cmd abort fabric stop race (Mike Christie)  
  - scsi: libiscsi: Fix NOP race condition (Lee Duncan)  
  - dmaengine: pl330: _prep_dma_memcpy: Fix wrong burst size (Sugar Zhang)  
  - nvme: free sq/cq dbbuf pointers when dbbuf set fails (Minwoo Im)  
  - proc: don't allow async path resolution of /proc/self components (Jens Axboe)  
  - HID: Add Logitech Dinovo Edge battery quirk (Hans de Goede)  
  - HID: logitech-hidpp: Add HIDPP_CONSUMER_VENDOR_KEYS quirk for the Dinovo Edge (Hans de Goede)  
  - x86/xen: don't unbind uninitialized lock_kicker_irq (Brian Masney)  
  - dmaengine: xilinx_dma: use readl_poll_timeout_atomic variant (Marc Ferland)  
  - HID: add HID_QUIRK_INCREMENT_USAGE_ON_DUPLICATE for Gamevice devices (Chris Ye)  
  - staging: ralink-gdma: fix kconfig dependency bug for DMA_RALINK (Necip Fazil Yildiran)  
  - HID: hid-sensor-hub: Fix issue with devices with no report ID (Pablo Ceballos)  
  - Input: i8042 - allow insmod to succeed on devices without an i8042 controller (Hans de Goede)  
  - HID: add support for Sega Saturn (Jiri Kosina)  
  - HID: cypress: Support Varmilo Keyboards' media hotkeys (Frank Yang)  
  - HID: ite: Replace ABS_MISC 120/121 events with touchpad on/off keypresses (Hans de Goede)  
  - HID: uclogic: Add ID for Trust Flex Design Tablet (Martijn van de Streek)  
  - arm64: pgtable: Ensure dirty bit is preserved across pte_wrprotect() (Will Deacon)  
  - arm64: pgtable: Fix pte_accessible() (Will Deacon)  
  - trace: fix potenial dangerous pointer (Hui Su)  
  - KVM: x86: Fix split-irqchip vs interrupt injection window request (Paolo Bonzini)  
  - KVM: x86: handle !lapic_in_kernel case in kvm_cpu_*_extint (Paolo Bonzini)  
  - KVM: arm64: vgic-v3: Drop the reporting of GICR_TYPER.Last for userspace (Zenghui Yu)  
  - KVM: PPC: Book3S HV: XIVE: Fix possible oops when accessing ESB page (Cédric Le Goater)  
  - cifs: fix a memleak with modefromsid (Namjae Jeon)  
  - smb3: Handle error case during offload read path (Rohith Surabattula)  
  - smb3: Avoid Mid pending list corruption (Rohith Surabattula)  
  - smb3: Call cifs reconnect from demultiplex thread (Rohith Surabattula)  
  - wireless: Use linux/stddef.h instead of stddef.h (Hauke Mehrtens)  
  - btrfs: fix lockdep splat when reading qgroup config on mount (Filipe Manana)  
  - btrfs: don't access possibly stale fs_info data for printing duplicate device (Johannes Thumshirn)  
  - btrfs: tree-checker: add missing returns after data_ref alignment checks (David Sterba)  
  - btrfs: tree-checker: add missing return after error in root_item (Daniel Xu)  
  - netfilter: clear skb->next in NF_HOOK_LIST() (Cong Wang)  
  - ipv4: use IS_ENABLED instead of ifdef (Florian Klink)  
  - spi: bcm2835: Fix use-after-free on unbind (Lukas Wunner)  
  - spi: bcm-qspi: Fix use-after-free on unbind (Lukas Wunner)


author: Jack Vogel <jack.vogel@oracle.com> - 5.4.17-2051.el7
changelog:
  - futex: Fix inode life-time issue (Peter Zijlstra)  [Orabug: 32233513]  {CVE-2020-14381}
  - uek-rpm: Add nvme-tcp and nvme-rdma to ol7 and ol8 nano kernels (Alan Adamson)  [Orabug: 32230382] 
  - intel_idle: Customize IceLake server support (Chen Yu)  [Orabug: 32218857] 
  - dm crypt: Allow unaligned bio buffer lengths for skcipher devices (Sudhakar Panneerselvam)  [Orabug: 32210420] 
  - uek-rpm: enable VDPA subsystem and drivers (Si-Wei Liu)  [Orabug: 32121107] 
  - vdpa/mlx5: Fix dependency on MLX5_CORE (Eli Cohen)  [Orabug: 32121107] 
  - vdpa/mlx5: should keep avail_index despite device status (Si-Wei Liu)  [Orabug: 32121107] 
  - vdpa/mlx5: Avoid warnings about shifts on 32-bit platforms (Nathan Chancellor)  [Orabug: 32121107] 
  - vdpa/mlx5: fix up endian-ness for mtu (Michael S. Tsirkin)  [Orabug: 32121107] 
  - vdpa/mlx5: Fix pointer math in mlx5_vdpa_get_config() (Dan Carpenter)  [Orabug: 32121107] 
  - vdpa/mlx5: fix memory allocation failure checks (Colin Ian King)  [Orabug: 32121107] 
  - vdpa/mlx5: Fix uninitialised variable in core/mr.c (Alex Dewar)  [Orabug: 32121107] 
  - vdpa/mlx5: Add VDPA driver for supported mlx5 devices (Eli Cohen)  [Orabug: 32121107] 
  - vdpa/mlx5: Add shared memory registration code (Eli Cohen)  [Orabug: 32121107] 
  - vdpa/mlx5: Add support library for mlx5 VDPA implementation (Eli Cohen)  [Orabug: 32121107] 
  - vdpa/mlx5: Add hardware descriptive header file (Eli Cohen)  [Orabug: 32121107] 
  - net/mlx5: Add interface changes required for VDPA (Eli Cohen)  [Orabug: 32121107] 
  - net/mlx5: Expose vDPA emulation device capabilities (Yishai Hadas)  [Orabug: 32121107] 
  - net/mlx5: Add Virtio Emulation related device capabilities (Yishai Hadas)  [Orabug: 32121107] 
  - net/mlx5: Add VDPA interface type to supported enumerations (Eli Cohen)  [Orabug: 32121107] 
  - net/mlx5: Support setting access rights of dma addresses (Eli Cohen)  [Orabug: 32121107] 
  - net/mlx5: Provide simplified command interfaces (Leon Romanovsky)  [Orabug: 32121107] 
  - vhost-vdpa: fix page pinning leakage in error path (rework) (Si-Wei Liu)  [Orabug: 32121107] 
  - vhost-vdpa: fix vhost_vdpa_map() on error condition (Si-Wei Liu)  [Orabug: 32121107] 
  - vhost: Don't call log_access_ok() when using IOTLB (Greg Kurz)  [Orabug: 32121107] 
  - vhost vdpa: fix vhost_vdpa_open error handling (Mike Christie)  [Orabug: 32121107] 
  - vhost-vdpa: fix backend feature ioctls (Jason Wang)  [Orabug: 32121107] 
  - vhost: Fix documentation (Eli Cohen)  [Orabug: 32121107] 
  - vhost-iotlb: fix vhost_iotlb_itree_next() documentation (Stefano Garzarella)  [Orabug: 32121107] 
  - vdpa: Fix pointer math bug in vdpasim_get_config() (Dan Carpenter)  [Orabug: 32121107] 
  - vdpa_sim: init iommu lock (Michael S. Tsirkin)  [Orabug: 32121107] 
  - vdpa: Modify get_vq_state() to return error code (Eli Cohen)  [Orabug: 32121107] 
  - net/vdpa: Use struct for set/get vq state (Eli Cohen)  [Orabug: 32121107] 
  - vdpa: remove hard coded virtq num (Max Gurtovoy)  [Orabug: 32121107] 
  - vdpasim: support batch updating (Jason Wang)  [Orabug: 32121107] 
  - vhost-vdpa: support IOTLB batching hints (Jason Wang)  [Orabug: 32121107] 
  - vhost-vdpa: support get/set backend features (Jason Wang)  [Orabug: 32121107] 
  - vhost: generialize backend features setting/getting (Jason Wang)  [Orabug: 32121107] 
  - vhost-vdpa: refine ioctl pre-processing (Jason Wang)  [Orabug: 32121107] 
  - vDPA: dont change vq irq after DRIVER_OK (Zhu Lingshan)  [Orabug: 32121107] 
  - irqbypass: do not start cons/prod when failed connect (Zhu Lingshan)  [Orabug: 32121107] 
  - vhost_vdpa: implement IRQ offloading in vhost_vdpa (Zhu Lingshan)  [Orabug: 32121107] 
  - vDPA: add get_vq_irq() in vdpa_config_ops (Zhu Lingshan)  [Orabug: 32121107] 
  - kvm: detect assigned device via irqbypass manager (Zhu Lingshan)  [Orabug: 32121107] 
  - vhost: introduce vhost_vring_call (Zhu Lingshan)  [Orabug: 32121107] 
  - vdpasim: protect concurrent access to iommu iotlb (Max Gurtovoy)  [Orabug: 32121107] 
  - vhost: vdpa: remove per device feature whitelist (Jason Wang)  [Orabug: 32121107] 
  - virtio_net: use LE accessors for speed/duplex (Michael S. Tsirkin)  [Orabug: 32121107] 
  - virtio-iommu: convert to LE accessors (Michael S. Tsirkin)  [Orabug: 32121107] 
  - drm/virtio: convert to LE accessors (Michael S. Tsirkin)  [Orabug: 32121107] 
  - virtio_pmem: convert to LE accessors (Michael S. Tsirkin)  [Orabug: 32121107] 
  - virtio_crypto: convert to LE accessors (Michael S. Tsirkin)  [Orabug: 32121107] 
  - virtio_fs: convert to LE accessors (Michael S. Tsirkin)  [Orabug: 32121107] 
  - virtio_input: convert to LE accessors (Michael S. Tsirkin)  [Orabug: 32121107] 
  - virtio_balloon: use LE config space accesses (Michael S. Tsirkin)  [Orabug: 32121107] 
  - virtio_config: rewrite LE accessors without _Generic (Si-Wei Liu)  [Orabug: 32121107] 
  - virtio_config: fix up warnings on parisc (Michael S. Tsirkin)  [Orabug: 32121107] 
  - virtio_config: add virtio_cread_le_feature (Michael S. Tsirkin)  [Orabug: 32121107] 
  - virtio_caif: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] 
  - virtio_config: LE config space accessors (Michael S. Tsirkin)  [Orabug: 32121107] 
  - virtio_config: cread/write cleanup (Michael S. Tsirkin)  [Orabug: 32121107] 
  - vdpa_sim: fix endian-ness of config space (Michael S. Tsirkin)  [Orabug: 32121107] 
  - virtio_vdpa: legacy features handling (Michael S. Tsirkin)  [Orabug: 32121107] 
  - vhost/vdpa: switch to new helpers (Michael S. Tsirkin)  [Orabug: 32121107] 
  - vdpa: make sure set_features is invoked for legacy (Michael S. Tsirkin)  [Orabug: 32121107] 
  - mlxbf-tmfifo: sparse tags for config access (Michael S. Tsirkin)  [Orabug: 32121107] 
  - virtio_scsi: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] 
  - virtio_pmem: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] 
  - virtio_net: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] 
  - virtio_input: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] 
  - virtio_gpu: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] 
  - virtio_fs: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] 
  - virtio_crypto: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] 
  - virtio_console: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] 
  - virtio_blk: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] 
  - virtio_balloon: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] 
  - virtio_9p: correct tags for config space fields (Michael S. Tsirkin)  [Orabug: 32121107] 
  - virtio: allow __virtioXX, __leXX in config space (Michael S. Tsirkin)  [Orabug: 32121107] 
  - virtio_ring: sparse warning fixup (Michael S. Tsirkin)  [Orabug: 32121107] 
  - virtio: VIRTIO_F_IOMMU_PLATFORM -> VIRTIO_F_ACCESS_PLATFORM (Michael S. Tsirkin)  [Orabug: 32121107] 
  - vhost_vdpa: Fix potential underflow in vhost_vdpa_mmap() (Dan Carpenter)  [Orabug: 32121107] 
  - vdpa: fix typos in the comments for __vdpa_alloc_device() (Jason Wang)  [Orabug: 32121107] 
  - vhost_vdpa: Support config interrupt in vdpa (Zhu Lingshan)  [Orabug: 32121107] 
  - vdpasim: Fix some coccinelle warnings (Samuel Zou)  [Orabug: 32121107] 
  - vhost_vdpa: disable doorbell mapping for !MMU (Michael S. Tsirkin)  [Orabug: 32121107] 
  - vhost_vdpa: support doorbell mapping via mmap (Jason Wang)  [Orabug: 32121107] 
  - vdpa: introduce get_vq_notification method (Jason Wang)  [Orabug: 32121107] 
  - vdpasim: remove unused variable 'ret' (YueHaibing)  [Orabug: 32121107] 
  - vdpa: fix comment of vdpa_register_device() (Jason Wang)  [Orabug: 32121107] 
  - vdpa: make vhost, virtio depend on menu (Michael S. Tsirkin)  [Orabug: 32121107] 
  - vdpa: allow a 32 bit vq alignment (Michael S. Tsirkin)  [Orabug: 32121107] 
  - vdpasim: Return status in vdpasim_get_status (YueHaibing)  [Orabug: 32121107] 
  - vhost: remove set but not used variable 'status' (Jason Yan)  [Orabug: 32121107] 
  - vhost: vdpa: remove unnecessary null check (Gustavo A. R. Silva)  [Orabug: 32121107] 
  - vdpa-sim: depend on HAS_DMA (Michael S. Tsirkin)  [Orabug: 32121107] 
  - vdpa: move to drivers/vdpa (Michael S. Tsirkin)  [Orabug: 32121107] 
  - vdpasim: vDPA device simulator (Jason Wang)  [Orabug: 32121107] 
  - vhost: introduce vDPA-based backend (Tiwei Bie)  [Orabug: 32121107] 
  - virtio: introduce a vDPA based transport (Jason Wang)  [Orabug: 32121107] 
  - vDPA: introduce vDPA bus (Jason Wang)  [Orabug: 32121107] 
  - scsi: mpt3sas: Update driver version to 36.100.00.00 (Suganath Prabu S)  [Orabug: 32242278] 
  - scsi: mpt3sas: Handle trigger page after firmware update (Suganath Prabu S)  [Orabug: 32242278] 
  - scsi: mpt3sas: Add persistent MPI trigger page (Suganath Prabu S)  [Orabug: 32242278] 
  - scsi: mpt3sas: Add persistent SCSI sense trigger page (Suganath Prabu S)  [Orabug: 32242278] 
  - scsi: mpt3sas: Add persistent Event trigger page (Suganath Prabu S)  [Orabug: 32242278] 
  - scsi: mpt3sas: Add persistent Master trigger page (Suganath Prabu S)  [Orabug: 32242278] 
  - scsi: mpt3sas: Add persistent trigger pages support (Suganath Prabu S)  [Orabug: 32242278] 
  - scsi: mpt3sas: Sync time periodically between driver and firmware (Suganath Prabu S)  [Orabug: 32242278] 
  - scsi: mpt3sas: Bump driver version to 35.101.00.00 (Sreekanth Reddy)  [Orabug: 32242278] 
  - scsi: mpt3sas: Add module parameter multipath_on_hba (Sreekanth Reddy)  [Orabug: 32242278] 
  - scsi: mpt3sas: Handle vSES vphy object during HBA reset (Sreekanth Reddy)  [Orabug: 32242278] 
  - scsi: mpt3sas: Add bypass_dirty_port_flag parameter (Sreekanth Reddy)  [Orabug: 32242278] 
  - scsi: mpt3sas: Handling HBA vSES device (Sreekanth Reddy)  [Orabug: 32242278] 
  - scsi: mpt3sas: Set valid PhysicalPort in SMPPassThrough (Sreekanth Reddy)  [Orabug: 32242278] 
  - scsi: mpt3sas: Update hba_port objects after host reset (Sreekanth Reddy)  [Orabug: 32242278] 
  - scsi: mpt3sas: Get sas_device objects using device's rphy (Sreekanth Reddy)  [Orabug: 32242278] 
  - scsi: mpt3sas: Rename transport_del_phy_from_an_existing_port() (Sreekanth Reddy)  [Orabug: 32242278] 
  - scsi: mpt3sas: Get device objects using sas_address & portID (Sreekanth Reddy)  [Orabug: 32242278] 
  - scsi: mpt3sas: Update hba_port's sas_address & phy_mask (Sreekanth Reddy)  [Orabug: 32242278] 
  - scsi: mpt3sas: Rearrange _scsih_mark_responding_sas_device() (Sreekanth Reddy)  [Orabug: 32242278] 
  - scsi: mpt3sas: Allocate memory for hba_port objects (Sreekanth Reddy)  [Orabug: 32242278] 
  - scsi: mpt3sas: Define hba_port structure (Sreekanth Reddy)  [Orabug: 32242278] 
  - scsi: mpt3sas: Fix ioctl timeout (Suganath Prabu S)  [Orabug: 32242278] 
  - kabi: fix issues with slab memory allocator. (Libo Chen)  [Orabug: 32119767] 
  - mm: memcg/slab: uncharge during kmem_cache_free_bulk() (Bharata B Rao)  [Orabug: 32119767] 
  - mm: memcg/slab: fix racy access to page->mem_cgroup in mem_cgroup_from_obj() (Roman Gushchin)  [Orabug: 32119767] 
  - mm: slab: fix potential double free in ___cache_free (Shakeel Butt)  [Orabug: 32119767] 
  - mm: memcontrol: restore proper dirty throttling when memory.high changes (Johannes Weiner)  [Orabug: 32119767] 
  - mm: memcontrol: avoid workload stalls when lowering memory.high (Roman Gushchin)  [Orabug: 32119767] 
  - mm: kmem: switch to static_branch_likely() in memcg_kmem_enabled() (Roman Gushchin)  [Orabug: 32119767] 
  - mm: slab: rename (un)charge_slab_page() to (un)account_slab_page() (Roman Gushchin)  [Orabug: 32119767] 
  - mm: memcg/slab: remove unused argument by charge_slab_page() (Roman Gushchin)  [Orabug: 32119767] 
  - tools/cgroup: add memcg_slabinfo.py tool (Roman Gushchin)  [Orabug: 32119767] 
  - kselftests: cgroup: add kernel memory accounting tests (Roman Gushchin)  [Orabug: 32119767] 
  - mm: memcg/slab: use a single set of kmem_caches for all allocations (Roman Gushchin)  [Orabug: 32119767] 
  - mm: memcg/slab: remove redundant check in memcg_accumulate_slabinfo() (Roman Gushchin)  [Orabug: 32119767] 
  - mm: memcg/slab: deprecate slab_root_caches (Roman Gushchin)  [Orabug: 32119767] 
  - mm: memcg/slab: remove memcg_kmem_get_cache() (Roman Gushchin)  [Orabug: 32119767] 
  - mm: memcg/slab: simplify memcg cache creation (Roman Gushchin)  [Orabug: 32119767] 
  - mm: memcg/slab: use a single set of kmem_caches for all accounted allocations (Roman Gushchin)  [Orabug: 32119767] 
  - mm: memcg/slab: move memcg_kmem_bypass() to memcontrol.h (Roman Gushchin)  [Orabug: 32119767] 
  - mm: memcg/slab: deprecate memory.kmem.slabinfo (Roman Gushchin)  [Orabug: 32119767] 
  - mm: memcg/slab: charge individual slab objects instead of pages (Roman Gushchin)  [Orabug: 32119767] 
  - mm: memcg/slab: save obj_cgroup for non-root slab objects (Roman Gushchin)  [Orabug: 32119767] 
  - mm: memcg/slab: allocate obj_cgroups for non-root slab pages (Roman Gushchin)  [Orabug: 32119767] 
  - mm: memcg/slab: obj_cgroup API (Roman Gushchin)  [Orabug: 32119767] 
  - mm: slub: implement SLUB version of obj_to_index() (Roman Gushchin)  [Orabug: 32119767] 
  - mm: memcg: convert vmstat slab counters to bytes (Roman Gushchin)  [Orabug: 32119767] 
  - mm: memcg: prepare for byte-sized vmstat items (Roman Gushchin)  [Orabug: 32119767] 
  - mm: memcg: factor out memcg- and lruvec-level changes out of __mod_lruvec_state() (Roman Gushchin)  [Orabug: 32119767] 
  - mm: kmem: make memcg_kmem_enabled() irreversible (Roman Gushchin)  [Orabug: 32119767] 
  - mm, slab/slub: improve error reporting and overhead of cache_from_obj() (Vlastimil Babka)  [Orabug: 32119767] 
  - mm, slub: introduce kmem_cache_debug_flags() (Vlastimil Babka)  [Orabug: 32119767] 
  - mm, slab: fix sign conversion problem in memcg_uncharge_slab() (Waiman Long)  [Orabug: 32119767] 
  - memcg: fix memcg_kmem_bypass() for remote memcg charging (Zefan Li)  [Orabug: 32119767] 
  - slub: Remove userspace notifier for cache add/remove (Christoph Lameter)  [Orabug: 32119767] 
  - mm: kmem: rename (__)memcg_kmem_(un)charge_memcg() to __memcg_kmem_(un)charge() (Roman Gushchin)  [Orabug: 32119767] 
  - mm: memcg/slab: cache page number in memcg_(un)charge_slab() (Roman Gushchin)  [Orabug: 32119767] 
  - mm: kmem: switch to nr_pages in (__)memcg_kmem_charge_memcg() (Roman Gushchin)  [Orabug: 32119767] 
  - mm: kmem: rename memcg_kmem_(un)charge() into memcg_kmem_(un)charge_page() (Roman Gushchin)  [Orabug: 32119767] 
  - mm: kmem: cleanup memcg_kmem_uncharge_memcg() arguments (Roman Gushchin)  [Orabug: 32119767] 
  - mm: kmem: cleanup (__)memcg_kmem_charge_memcg() arguments (Roman Gushchin)  [Orabug: 32119767] 
  - mm: memcg/slab: use mem_cgroup_from_obj() (Roman Gushchin)  [Orabug: 32119767] 
  - mm/slub.c: avoid slub allocation while holding list_lock (Yu Zhao)  [Orabug: 32119767] 
  - mm: clean up and clarify lruvec lookup procedure (Johannes Weiner)  [Orabug: 32119767] 
  - mm: memcontrol: try harder to set a new memory.high (Johannes Weiner)  [Orabug: 32119767] 
  - mm/slub.c: clean up validate_slab() (Yu Zhao)  [Orabug: 32119767] 
  - Linux 5.4.83 (Greg Kroah-Hartman)  
  - Revert "geneve: pull IP header before ECN decapsulation" (Jakub Kicinski)  
  - x86/insn-eval: Use new for_each_insn_prefix() macro to loop over prefixes bytes (Masami Hiramatsu)  
  - netfilter: nftables_offload: set address type in control dissector (Pablo Neira Ayuso)  
  - netfilter: nf_tables: avoid false-postive lockdep splat (Florian Westphal)  
  - Input: i8042 - fix error return code in i8042_setup_aux() (Luo Meng)  
  - dm writecache: remove BUG() and fail gracefully instead (Mike Snitzer)  
  - i2c: qup: Fix error return code in qup_i2c_bam_schedule_desc() (Zhihao Cheng)  
  - rtw88: debug: Fix uninitialized memory in debugfs code (Dan Carpenter)  
  - ASoC: wm_adsp: fix error return code in wm_adsp_load() (Luo Meng)  
  - tipc: fix a deadlock when flushing scheduled work (Hoang Huu Le)  
  - netfilter: ipset: prevent uninit-value in hash_ip6_add (Eric Dumazet)  
  - gfs2: check for empty rgrp tree in gfs2_ri_update (Bob Peterson)  
  - can: af_can: can_rx_unregister(): remove WARN() statement from list operation sanity check (Oliver Hartkopp)  
  - lib/syscall: fix syscall registers retrieval on 32-bit platforms (Willy Tarreau)   {CVE-2020-28588}
  - tracing: Fix userstacktrace option for instances (Steven Rostedt (VMware))  
  - iommu/amd: Set DTE[IntTabLen] to represent 512 IRTEs (Suravee Suthikulpanit)  
  - spi: bcm2835: Release the DMA channel if probe fails after dma_init (Peter Ujfalusi)  
  - i2c: imx: Check for I2SR_IAL after every byte (Christian Eggers)  
  - i2c: imx: Fix reset of I2SR_IAL flag (Christian Eggers)  
  - speakup: Reject setting the speakup line discipline outside of speakup (Samuel Thibault)  
  - mm/swapfile: do not sleep with a spin lock held (Qian Cai)  
  - mm: list_lru: set shrinker map bit when child nr_items is not zero (Yang Shi)  
  - coredump: fix core_pattern parse error (Menglong Dong)  
  - x86/uprobes: Do not use prefixes.nbytes when looping over prefixes.bytes (Masami Hiramatsu)  
  - dm: remove invalid sparse __acquires and __releases annotations (Mike Snitzer)  
  - dm: fix bug with RCU locking in dm_blk_report_zones (Sergei Shtepa)  
  - powerpc/pseries: Pass MSI affinity to irq_create_mapping() (Laurent Vivier)  
  - genirq/irqdomain: Add an irq_create_mapping_affinity() function (Laurent Vivier)  
  - powerpc/64s/powernv: Fix memory corruption when saving SLB entries on MCE (Nicholas Piggin)  
  - dm writecache: fix the maximum number of arguments (Mikulas Patocka)  
  - drm/i915/gt: Program mocs:63 for cache eviction on gen9 (Chris Wilson)  
  - thunderbolt: Fix use-after-free in remove_unplugged_switch() (Mika Westerberg)  
  - i2c: imx: Don't generate STOP condition if arbitration has been lost (Christian Eggers)  
  - cifs: fix potential use-after-free in cifs_echo_request() (Paulo Alcantara)  
  - cifs: allow syscalls to be restarted in __smb_send_rqst() (Paulo Alcantara)  
  - ftrace: Fix updating FTRACE_FL_TRAMP (Naveen N. Rao)  
  - ALSA: hda/generic: Add option to enforce preferred_dacs pairs (Takashi Iwai)  
  - ALSA: hda/realtek - Add new codec supported for ALC897 (Kailang Yang)  
  - ALSA: hda/realtek: Enable headset of ASUS UX482EG & B9400CEA with ALC294 (Jian-Hong Pan)  
  - ALSA: hda/realtek: Add mute LED quirk to yet another HP x360 model (Takashi Iwai)  
  - ALSA: hda/realtek: Fix bass speaker DAC assignment on Asus Zephyrus G14 (Takashi Iwai)  
  - tty: Fix ->session locking (Jann Horn)  
  - tty: Fix ->pgrp locking in tiocspgrp() (Jann Horn)  
  - USB: serial: option: fix Quectel BG96 matching (Bjørn Mork)  
  - USB: serial: option: add support for Thales Cinterion EXS82 (Giacinto Cifelli)  
  - USB: serial: option: add Fibocom NL668 variants (Vincent Palatin)  
  - USB: serial: ch341: sort device-id entries (Johan Hovold)  
  - USB: serial: ch341: add new Product ID for CH341A (Jan-Niklas Burfeind)  
  - USB: serial: kl5kusb105: fix memleak on open (Johan Hovold)  
  - usb: gadget: f_fs: Use local copy of descriptors for userspace copy (Vamsi Krishna Samavedam)  
  - Partially revert bpf: Zero-fill re-used per-cpu map element (Sasha Levin)  
  - pinctrl: baytrail: Fix pin being driven low for a while on gpiod_get(..., GPIOD_OUT_HIGH) (Hans de Goede)  
  - pinctrl: baytrail: Replace WARN with dev_info_once when setting direct-irq pin to output (Hans de Goede)  
  - Linux 5.4.82 (Greg Kroah-Hartman)  
  - RDMA/i40iw: Address an mmap handler exploit in i40iw (Shiraz Saleem)  
  - tracing: Remove WARN_ON in start_thread() (Vasily Averin)  
  - Input: i8042 - add ByteSpeed touchpad to noloop table (Po-Hsu Lin)  
  - Input: xpad - support Ardwiino Controllers (Sanjay Govind)  
  - ALSA: usb-audio: US16x08: fix value count for level meters (Hector Martin)  
  - net/mlx5: Fix wrong address reclaim when command interface is down (Eran Ben Elisha)  
  - net/mlx5: DR, Proper handling of unsupported Connect-X6DX SW steering (Yevgeny Kliteynik)  
  - net/sched: act_mpls: ensure LSE is pullable before reading it (Davide Caratti)  
  - net: openvswitch: ensure LSE is pullable before reading it (Davide Caratti)  
  - net: skbuff: ensure LSE is pullable before decrementing the MPLS ttl (Davide Caratti)  
  - net: mvpp2: Fix error return code in mvpp2_open() (Wang Hai)  
  - chelsio/chtls: fix a double free in chtls_setkey() (Dan Carpenter)  
  - vxlan: fix error return code in __vxlan_dev_create() (Zhang Changzhong)  
  - net: pasemi: fix error return code in pasemi_mac_open() (Zhang Changzhong)  
  - cxgb3: fix error return code in t3_sge_alloc_qset() (Zhang Changzhong)  
  - net/x25: prevent a couple of overflows (Dan Carpenter)  
  - net: ip6_gre: set dev->hard_header_len when using header_ops (Antoine Tenart)  
  - inet_ecn: Fix endianness of checksum update when setting ECT(1) (Toke Høiland-Jørgensen)  
  - ibmvnic: Fix TX completion error handling (Thomas Falcon)  
  - ibmvnic: Ensure that SCRQ entry reads are correctly ordered (Thomas Falcon)  
  - chelsio/chtls: fix panic during unload reload chtls (Vinay Kumar Yadav)  
  - dt-bindings: net: correct interrupt flags in examples (Krzysztof Kozlowski)  
  - ipv4: Fix tos mask in inet_rtm_getroute() (Guillaume Nault)  
  - netfilter: bridge: reset skb->pkt_type after NF_INET_POST_ROUTING traversal (Antoine Tenart)  
  - sched/fair: Fix unthrottle_cfs_rq() for leaf_cfs_rq list (Vincent Guittot)  
  - ima: extend boot_aggregate with kernel measurements (Maurizio Drocco)  
  - staging/octeon: fix up merge error (Randy Dunlap)  
  - bonding: wait for sysfs kobject destruction before freeing struct slave (Jamie Iles)  
  - usbnet: ipheth: fix connectivity with iOS 14 (Yves-Alexis Perez)  
  - tun: honor IOCB_NOWAIT flag (Jens Axboe)  
  - tcp: Set INET_ECN_xmit configuration in tcp_reinit_congestion_control (Alexander Duyck)  
  - sock: set sk_err to ee_errno on dequeue from errq (Willem de Bruijn)  
  - rose: Fix Null pointer dereference in rose_send_frame() (Anmol Karn)  
  - net/tls: Protect from calling tls_dev_del for TLS RX twice (Maxim Mikityanskiy)  
  - net/tls: missing received data after fast remote close (Vadim Fedorenko)  
  - net/af_iucv: set correct sk_protocol for child sockets (Julian Wiedmann)  
  - ipv6: addrlabel: fix possible memory leak in ip6addrlbl_net_init (Wang Hai)  
  - devlink: Hold rtnl lock while reading netdev attributes (Parav Pandit)


author: Jack Vogel <jack.vogel@oracle.com> - 5.4.17-2102.200.0.el7
changelog:
  - lockd: don't use interval-based rebinding over TCP (Calum Mackay)  [Orabug: 32337714] 
  - tools: update header files in the tools directory (Thomas Tai)  [Orabug: 32316504] 
  - perf: Fix a kABI breakage in perf_event.h (Thomas Tai)  [Orabug: 32316504] 
  - perf/x86: Fix n_metric for cancelled txn (Peter Zijlstra)  [Orabug: 32316504] 
  - perf/x86: Fix n_pair for cancelled txn (Peter Zijlstra)  [Orabug: 32316504] 
  - perf/x86/intel: Check perf metrics feature for each CPU (Kan Liang)  [Orabug: 32316504] 
  - perf/x86/intel: Support per-thread RDPMC TopDown metrics (Kan Liang)  [Orabug: 32316504] 
  - perf/x86/intel: Support TopDown metrics on Ice Lake (Kan Liang)  [Orabug: 32316504] 
  - perf/x86: Use event_base_rdpmc for the RDPMC userspace support (Kan Liang)  [Orabug: 32316504] 
  - perf/x86: Add a macro for RDPMC offset of fixed counters (Kan Liang)  [Orabug: 32316504] 
  - perf/x86/intel: Generic support for hardware TopDown metrics (Kan Liang)  [Orabug: 32316504] 
  - perf/core: Add a new PERF_EV_CAP_SIBLING event capability (Kan Liang)  [Orabug: 32316504] 
  - perf/core: Unify {pinned,flexible}_sched_in() (Peter Zijlstra)  [Orabug: 32316504] 
  - perf/x86/intel: Use switch in intel_pmu_disable/enable_event (Kan Liang)  [Orabug: 32316504] 
  - perf/x86: Keep LBR records unchanged in host context for guest usage (Like Xu)  [Orabug: 32316504] 
  - perf/x86/intel: Fix the name of perf METRICS (Kan Liang)  [Orabug: 32316504] 
  - perf/x86/intel: Move BTS index to 47 (Kan Liang)  [Orabug: 32316504] 
  - perf/x86/intel: Introduce the fourth fixed counter (Kan Liang)  [Orabug: 32316504] 
  - perf/x86/intel: Name the global status bit in NMI handler (Kan Liang)  [Orabug: 32316504] 
  - perf/x86: Add constraint to create guest LBR event without hw counter (Like Xu)  [Orabug: 32316504] 
  - perf/x86/lbr: Add interface to get LBR information (Like Xu)  [Orabug: 32316504] 
  - perf/x86/core: Refactor hw->idx checks and cleanup (Like Xu)  [Orabug: 32316504] 
  - perf/x86/intel: Avoid unnecessary PEBS_ENABLE MSR access in PMI (Kan Liang)  [Orabug: 32316504] 
  - perf/x86: Provide stubs of KVM helpers for non-Intel CPUs (Sean Christopherson)  [Orabug: 32316504] 
  - partitions/efi: Enable no warning option for the GPT warnings related to alternative header (Saeed Mirzamohammadi)  [Orabug: 32302135] 
  - xen-blkback: set ring->xenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz)  [Orabug: 32260251]  {CVE-2020-29569}
  - Revert "cpu/hotplug: avoid race between cpuset_hotplug_workfn and later hotplug" (Daniel Jordan)  [Orabug: 32295228] 
  - cpuset: fix race between hotplug work and later CPU offline (Daniel Jordan)  [Orabug: 32295228] 
  - uek-rpm: aarch64: update PMU configs for Altra (Dave Kleikamp)  [Orabug: 32290042] 
  - driver/perf: Add PMU driver for the ARM DMC-620 memory controller (Tuan Phan)  [Orabug: 32290042] 
  - perf: arm-cmn: Fix conversion specifiers for node type (Will Deacon)  [Orabug: 32290042] 
  - perf: arm-cmn: Fix unsigned comparison to less than zero (Will Deacon)  [Orabug: 32290042] 
  - perf: Add Arm CMN-600 PMU driver (Robin Murphy)  [Orabug: 32290042] 
  - perf: Add Arm CMN-600 DT binding (Robin Murphy)  [Orabug: 32290042] 
  - perf: arm_dsu: Support DSU ACPI devices (Tuan Phan)  [Orabug: 32290042] 
  - ACPI: APEI: Kick the memory_failure() queue for synchronous errors (James Morse)  [Orabug: 32290042] 
  - iommu/arm-smmu-v3: Don't reserve implementation defined register space (Jean-Philippe Brucker)  [Orabug: 32290042] 
  - Revert "BACKPORT: perf: Add Arm CMN-600 DT binding" (Dave Kleikamp)  [Orabug: 32290042] 
  - Revert "BACKPORT: WIP: perf: Add Arm CMN-600 PMU driver" (Dave Kleikamp)  [Orabug: 32290042] 
  - Revert "BACKPORT: WIP: perf/arm-cmn: Add ACPI support" (Dave Kleikamp)  [Orabug: 32290042] 
  - Revert "perf: Add ARM DMC-620 PMU driver." (Dave Kleikamp)  [Orabug: 32290042] 
  - Revert "BACKPORT: ACPI / APEI: Kick the memory_failure() queue for synchronous errors" (Dave Kleikamp)  [Orabug: 32290042] 
  - Revert "Perf: arm-cmn: Allow irq to be shared." (Dave Kleikamp)  [Orabug: 32290042] 
  - Revert "perf: arm_cmn: improve and make it work on 2P." (Dave Kleikamp)  [Orabug: 32290042] 
  - Revert "perf: arm_dsu: Allow IRQ to be shared among devices." (Dave Kleikamp)  [Orabug: 32290042] 
  - Revert "perf: arm_dsu: Support ACPI mode." (Dave Kleikamp)  [Orabug: 32290042] 
  - Revert "perf: arm_dmc620: Update ACPI ID." (Dave Kleikamp)  [Orabug: 32290042] 
  - Revert "perf: avoid breaking KABI by reusing enum" (Dave Kleikamp)  [Orabug: 32290042] 
  - Revert "perf/smmuv3: Allow sharing MMIO registers with the SMMU driver" (Dave Kleikamp)  [Orabug: 32290042] 
  - xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park)  [Orabug: 32253408]  {CVE-2020-29568}
  - xen/xenbus: Count pending messages for each watch (SeongJae Park)  [Orabug: 32253408]  {CVE-2020-29568}
  - xen/xenbus/xen_bus_type: Support will_handle watch callback (SeongJae Park)  [Orabug: 32253408]  {CVE-2020-29568}
  - xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path() (SeongJae Park)  [Orabug: 32253408]  {CVE-2020-29568}
  - xen/xenbus: Allow watches discard events before queueing (SeongJae Park)  [Orabug: 32253408]  {CVE-2020-29568}


author: Jack Vogel <jack.vogel@oracle.com> - 5.4.17-2102.200.1.el7
changelog:
  - x86/process: Mark cpu inactive before offlining (Mridula Shastry)  [Orabug: 32361529] 
  - selftests/net: remove rds.h from rds_echo.c (John Donnelly)  [Orabug: 32351408] 
  - mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start (Zhang Xiaohui)  [Orabug: 32349202]  {CVE-2020-36158}
  - add license checking to kABI checker (Dan Duval)  [Orabug: 32355205]


author: Jack Vogel <jack.vogel@oracle.com> - 5.4.17-2102.200.2.el7
changelog:
  - A/A Bonding: Fix a one-byte-off kmalloc (Håkon Bugge)  [Orabug: 32380823] 
  - uek-rpm: Report removed symbols also during kabi check (Somasundaram Krishnasamy)  [Orabug: 32380065] 
  - netfilter: add and use nf_hook_slow_list() (Florian Westphal)  [Orabug: 32372529]  {CVE-2021-20177}
  - net/rds: Fix gfp_t parameter (Hans Westgaard Ry)  [Orabug: 32372157] 
  - scsi: qla2xxx: Do not consume srb greedily (Daniel Wagner)  [Orabug: 32346794] 
  - scsi: qla2xxx: Use constant when it is known (Pavel Machek (CIP))  [Orabug: 32346794] 
  - scsi: qla2xxx: Fix inconsistent format argument type in qla_dbg.c (Ye Bin)  [Orabug: 32346794] 
  - scsi: qla2xxx: Fix inconsistent format argument type in qla_os.c (Ye Bin)  [Orabug: 32346794] 
  - scsi: qla2xxx: Fix inconsistent format argument type in tcm_qla2xxx.c (Ye Bin)  [Orabug: 32346794] 
  - scsi: qla2xxx: Update version to 10.02.00.103-k (Nilesh Javali)  [Orabug: 32346794] 
  - scsi: qla2xxx: Fix point-to-point (N2N) device discovery issue (Arun Easi)  [Orabug: 32346794] 
  - scsi: qla2xxx: Fix reset of MPI firmware (Arun Easi)  [Orabug: 32346794] 
  - scsi: qla2xxx: Fix MPI reset needed message (Arun Easi)  [Orabug: 32346794] 
  - scsi: qla2xxx: Fix buffer-buffer credit extraction error (Quinn Tran)  [Orabug: 32346794] 
  - scsi: qla2xxx: Correct the check for sscanf() return value (Saurav Kashyap)  [Orabug: 32346794] 
  - scsi: qla2xxx: Update version to 10.02.00.102-k (Nilesh Javali)  [Orabug: 32346794] 
  - scsi: qla2xxx: Add SLER and PI control support (Saurav Kashyap)  [Orabug: 32346794] 
  - scsi: qla2xxx: Add IOCB resource tracking (Quinn Tran)  [Orabug: 32346794] 
  - scsi: qla2xxx: Add rport fields in debugfs (Arun Easi)  [Orabug: 32346794] 
  - scsi: qla2xxx: Make tgt_port_database available in initiator mode (Arun Easi)  [Orabug: 32346794] 
  - scsi: qla2xxx: Fix I/O errors during LIP reset tests (Arun Easi)  [Orabug: 32346794] 
  - scsi: qla2xxx: Performance tweak (Quinn Tran)  [Orabug: 32346794] 
  - scsi: qla2xxx: Fix memory size truncation (Quinn Tran)  [Orabug: 32346794] 
  - scsi: qla2xxx: Reduce duplicate code in reporting speed (Quinn Tran)  [Orabug: 32346794] 
  - scsi: qla2xxx: Honor status qualifier in FCP_RSP per spec (Arun Easi)  [Orabug: 32346794] 
  - scsi: qla2xxx: Allow dev_loss_tmo setting for FC-NVMe devices (Arun Easi)  [Orabug: 32346794] 
  - scsi: qla2xxx: Setup debugfs entries for remote ports (Arun Easi)  [Orabug: 32346794] 
  - scsi: qla2xxx: Fix I/O failures during remote port toggle testing (Arun Easi)  [Orabug: 32346794] 
  - scsi: qla2xxx: Remove unneeded variable 'rval' (Jason Yan)  [Orabug: 32346794] 
  - scsi: qla2xxx: Handle incorrect entry_type entries (Daniel Wagner)  [Orabug: 32346794] 
  - scsi: qla2xxx: Log calling function name in qla2x00_get_sp_from_handle() (Daniel Wagner)  [Orabug: 32346794] 
  - scsi: qla2xxx: Simplify return value logic in qla2x00_get_sp_from_handle() (Daniel Wagner)  [Orabug: 32346794] 
  - scsi: qla2xxx: Fix the return value (Xianting Tian)  [Orabug: 32346794] 
  - scsi: qla2xxx: Fix the size used in a 'dma_free_coherent()' call (Christophe JAILLET)  [Orabug: 32346794] 
  - scsi: qla2xxx: Remove pci-dma-compat wrapper API (Suraj Upadhyay)  [Orabug: 32346794] 
  - scsi: qla2xxx: Remove superfluous memset() (Li Heng)  [Orabug: 32346794] 
  - scsi: qla2xxx: Fix regression on sparc64 (René Rebe)  [Orabug: 32346794] 
  - scsi: qla2xxx: Address a set of sparse warnings (Shyam Sundar)  [Orabug: 32346794] 
  - scsi: qla2xxx: SAN congestion management implementation (Shyam Sundar)  [Orabug: 32346794] 
  - scsi: qla2xxx: Change in PUREX to handle FPIN ELS requests (Shyam Sundar)  [Orabug: 32346794] 
  - scsi: qla2xxx: Introduce a function for computing the debug message prefix (Bart Van Assche)  [Orabug: 32346794] 
  - scsi: qla2xxx: Make qla2x00_restart_isp() easier to read (Bart Van Assche)  [Orabug: 32346794] 
  - scsi: qla2xxx: Fix a Coverity complaint in qla2100_fw_dump() (Bart Van Assche)  [Orabug: 32346794] 
  - scsi: qla2xxx: Make __qla2x00_alloc_iocbs() initialize 32 bits of request_t.handle (Bart Van Assche)  [Orabug: 32346794] 
  - scsi: qla2xxx: Remove a superfluous cast (Bart Van Assche)  [Orabug: 32346794] 
  - scsi: qla2xxx: Initialize 'n' before using it (Bart Van Assche)  [Orabug: 32346794] 
  - scsi: qla2xxx: Make qla82xx_flash_wait_write_finish() easier to read (Bart Van Assche)  [Orabug: 32346794] 
  - scsi: qla2xxx: Remove the __packed annotation from struct fcp_hdr and fcp_hdr_le (Bart Van Assche)  [Orabug: 32346794] 
  - scsi: qla2xxx: Check the size of struct fcp_hdr at compile time (Bart Van Assche)  [Orabug: 32346794] 
  - target: fix XCOPY NAA identifier lookup (David Disseldorp)  [Orabug: 32374281]  {CVE-2020-28374}
  - A/A Bonding: Introduce selective interface name inclusion (Håkon Bugge)  [Orabug: 32350973] 
  - uek-rpm: add nfs_ssc to nano_modules (Calum Mackay)  [Orabug: 32351789]


author: Jack Vogel <jack.vogel@oracle.com> - 5.4.17-2102.200.3.el7
changelog:
  - x86/msr: Add a pointer to an URL which contains further details (Borislav Petkov)  [Orabug: 32402424] 
  - x86/msr: Downgrade unrecognized MSR message (Borislav Petkov)  [Orabug: 32402424] 
  - x86/msr: Do not allow writes to MSR_IA32_ENERGY_PERF_BIAS (Borislav Petkov)  [Orabug: 32402424] 
  - x86/msr: Filter MSR writes (Borislav Petkov)  [Orabug: 32402424] 
  - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (Borislav Petkov)  [Orabug: 32402424] 
  - tools/power/turbostat: Read energy_perf_bias from sysfs (Borislav Petkov)  [Orabug: 32402424] 
  - tools/power/cpupower: Read energy_perf_bias from sysfs (Borislav Petkov)  [Orabug: 32402424] 
  - scsi: qla2xxx: Fix return of uninitialized value in rval (Colin Ian King)  [Orabug: 32401797]


author: Jack Vogel <jack.vogel@oracle.com> - 5.4.17-2102.200.4.el7
changelog:
  - Revert "rds: Deregister all FRWR mr with free_mr" (aru kolappan)  [Orabug: 32426609] 
  - thermal: intel_pch_thermal: Add PCI ids for Lewisburg PCH. (Andres Freund)  [Orabug: 32424704] 
  - thermal: intel: intel_pch_thermal: Add Cannon Lake Low Power PCH support (Sumeet Pawnikar)  [Orabug: 32424704] 
  - thermal: intel: intel_pch_thermal: Add Comet Lake (CML) platform support (Gayatri Kammela)  [Orabug: 32424704] 
  - KVM: x86: Expose AVX512_FP16 for supported CPUID (Cathy Zhang)  [Orabug: 32424461] 
  - x86/kvm: Expose TSX Suspend Load Tracking feature (Cathy Zhang)  [Orabug: 32424461] 
  - x86: Expose SERIALIZE for supported cpuid (Paolo Bonzini)  [Orabug: 32424461] 
  - KVM: x86: Expose fast short REP MOV for supported cpuid (Zhenyu Wang)  [Orabug: 32424461] 
  - KVM: x86: Expose AVX512 VP2INTERSECT in cpuid for TGL (Zhenyu Wang)  [Orabug: 32424461] 
  - x86: Enumerate AVX512 FP16 CPUID feature flag (Kyung Min Park)  [Orabug: 32424461] 
  - EDAC/i10nm: Add Intel Sapphire Rapids server support (Qiuxu Zhuo)  [Orabug: 32424461] 
  - EDAC/i10nm: Use readl() to access MMIO registers (Qiuxu Zhuo)  [Orabug: 32424461] 
  - EDAC: Add DDR5 new memory type (Qiuxu Zhuo)  [Orabug: 32424461] 
  - EDAC: Add three new memory types (Qiuxu Zhuo)  [Orabug: 32424461] 
  - x86/cpufeatures: Enumerate ENQCMD and ENQCMDS instructions (Fenghua Yu)  [Orabug: 32424461] 
  - x86/cpufeatures: Enumerate TSX suspend load address tracking instructions (Kyung Min Park)  [Orabug: 32424461] 
  - x86/cpufeatures: Add enumeration for SERIALIZE instruction (Ricardo Neri)  [Orabug: 32424461] 
  - x86/split_lock: Enable the split lock feature on Sapphire Rapids and Alder Lake CPUs (Fenghua Yu)  [Orabug: 32424461] 
  - x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family (Tony Luck)  [Orabug: 32424461] 
  - x86/cpufeatures: Add Architectural LBRs feature bit (Kan Liang)  [Orabug: 32424461] 
  - powercap: intel_rapl: add support for Sapphire Rapids (Zhang Rui)  [Orabug: 32424461] 
  - x86/cpu: Add Sapphire Rapids CPU model number (Tony Luck)  [Orabug: 32424461] 
  - EDAC, {skx,i10nm}: Use CPU stepping macro to pass configurations (Qiuxu Zhuo)  [Orabug: 32424461] 
  - x86/cpu: Add a X86_MATCH_INTEL_FAM6_MODEL_STEPPINGS() macro (Borislav Petkov)  [Orabug: 32424461] 
  - powercap/intel_rapl: Convert to new X86 CPU match macros (Thomas Gleixner)  [Orabug: 32424461] 
  - powercap/intel_rapl: add support for TigerLake Mobile (Zhang Rui)  [Orabug: 32424461] 
  - powercap/intel_rapl: add support for JasperLake (Zhang Rui)  [Orabug: 32424461] 
  - x86/cpufeatures: Add support for fast short REP; MOVSB (Tony Luck)  [Orabug: 32424461] 
  - powercap/intel_rapl: add support for Cometlake desktop (Zhang Rui)  [Orabug: 32424461] 
  - powercap/intel_rapl: add support for CometLake Mobile (Zhang Rui)  [Orabug: 32424461] 
  - crypto: lib/chacha20poly1305 - define empty module exit function (Jason A. Donenfeld)  [Orabug: 32417868] 
  - A/A Bonding: Add synchronized bundle failback (Gerd Rausch)  [Orabug: 32381881]


author: Jack Vogel <jack.vogel@oracle.com> - 5.4.17-2102.200.5.el7
changelog:
  - vhost scsi: alloc vhost_scsi with kvzalloc() to avoid delay (Dongli Zhang)  [Orabug: 32471659] 
  - arm64: Reserve only 256M on RPi for crashkernel=auto (Vijay Kumar)  [Orabug: 32454711] 
  - nbd: freeze the queue while we're adding connections (Josef Bacik)  [Orabug: 32447284]  {CVE-2021-3348}
  - futex: Handle faults correctly for PI futexes (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347}
  - futex: Simplify fixup_pi_state_owner() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347}
  - futex: Use pi_state_update_owner() in put_pi_state() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347}
  - rtmutex: Remove unused argument from rt_mutex_proxy_unlock() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347}
  - futex: Provide and use pi_state_update_owner() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347}
  - futex: Replace pointless printk in fixup_owner() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347}
  - futex: Ensure the correct return value from futex_lock_pi() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347}
  - uek-rpm: Enable Oracle Pilot BMC module (Eric Snowberg)  [Orabug: 32422661] 
  - hwmon: Add a new Oracle Pilot BMC driver (Eric Snowberg)  [Orabug: 32422661] 
  - rds: avoid crash on IB conn path shutdown prepare (Alan Maguire)  [Orabug: 32466763] 
  - mm/memcontrol: Increase threshold for draining per-cpu stocked bytes (Imran Khan)  [Orabug: 32314559]


author: Jack Vogel <jack.vogel@oracle.com> - 5.4.17-2102.200.6.el7
changelog:
  - selinux: allow reading labels before policy is loaded (Jonathan Lebon)  [Orabug: 32492276] 
  - rds: tracepoints incorrectly reporting valid rds ping as drop (Alan Maguire)  [Orabug: 32490004] 
  - KVM: arm64: Save/restore sp_el0 as part of __guest_enter (Marc Zyngier)  [Orabug: 32488537] 
  - uek-rpm: config-aarch64: enable MEMORY HOTREMOVE (Mihai Carabas)  [Orabug: 32353873] 
  - arm64/mm/hotplug: Ensure early memory sections are all online (Anshuman Khandual)  [Orabug: 32353873] 
  - arm64/mm/hotplug: Enable MEM_OFFLINE event handling (Anshuman Khandual)  [Orabug: 32353873] 
  - arm64/mm/hotplug: Register boot memory hot remove notifier earlier (Anshuman Khandual)  [Orabug: 32353873] 
  - arm64/mm: Enable memory hot remove (Anshuman Khandual)  [Orabug: 32353873] 
  - arm64/mm: Hold memory hotplug lock while walking for kernel page table dump (Anshuman Khandual)  [Orabug: 32353873] 
  - rds: tracepoint-related KASAN: use-after-free Read in rds_send_xmit (Alan Maguire)  [Orabug: 32490030] 
  - inet: do not call sublist_rcv on empty list (Florian Westphal)  [Orabug: 32422895] 
  - net/mlx4_en: Handle TX error CQE (Moshe Shemesh)  [Orabug: 32485133] 
  - net/mlx4_en: Avoid scheduling restart task if it is already running (Moshe Shemesh)  [Orabug: 32485133] 
  - vdpa/mlx5: allow Jumbo MTU config other than standard sized MTU (Si-Wei Liu)  [Orabug: 32480078] 
  - vdpa/mlx5: should exclude header length and fcs from mtu (Si-Wei Liu)  [Orabug: 32480078] 
  - vdpa/mlx5: Fix memory key MTT population (Eli Cohen)  [Orabug: 32480078] 
  - vdpa: Use simpler version of ida allocation (Parav Pandit)  [Orabug: 32480078] 
  - vdpa: Add missing comment for virtqueue count (Parav Pandit)  [Orabug: 32480078] 
  - vdpa/mlx5: Use write memory barrier after updating CQ index (Eli Cohen)  [Orabug: 32480078] 
  - vdpa: remove unnecessary 'default n' in Kconfig entries (Stefano Garzarella)  [Orabug: 32480078] 
  - vhost_vdpa: switch to vmemdup_user() (Tian Tao)  [Orabug: 32480078] 
  - vhost_vdpa: return -EFAULT if copy_to_user() fails (Dan Carpenter)  [Orabug: 32480078] 
  - vdpa: mlx5: fix vdpa/vhost dependencies (Randy Dunlap)  [Orabug: 32480078] 
  - vdpa/mlx5: Setup driver only if VIRTIO_CONFIG_S_DRIVER_OK (Eli Cohen)  [Orabug: 32480078] 
  - vdpa/mlx5: Fix failure to bring link up (Eli Cohen)  [Orabug: 32480078] 
  - vdpa/mlx5: Make use of a specific 16 bit endianness API (Eli Cohen)  [Orabug: 32480078] 
  - vdpasim: fix "mac_pton" undefined error (Laurent Vivier)  [Orabug: 32480078] 
  - vdpasim: allow to assign a MAC address (Laurent Vivier)  [Orabug: 32480078] 
  - vdpasim: fix MAC address configuration (Laurent Vivier)  [Orabug: 32480078] 
  - vdpa: handle irq bypass register failure case (Zhu Lingshan)  [Orabug: 32480078] 
  - vdpa_sim: Fix DMA mask (Laurent Vivier)  [Orabug: 32480078] 
  - vdpa/mlx5: Fix error return in map_direct_mr() (Jing Xiangfeng)  [Orabug: 32480078] 
  - vhost_vdpa: Return -EFAULT if copy_from_user() fails (Dan Carpenter)  [Orabug: 32480078] 
  - vdpa_sim: implement get_iova_range() (Jason Wang)  [Orabug: 32480078] 
  - vhost: vdpa: report iova range (Jason Wang)  [Orabug: 32480078] 
  - vdpa: introduce config op to get valid iova range (Jason Wang)  [Orabug: 32480078] 
  - vhost_vdpa: remove unnecessary spin_lock in vhost_vring_call (Zhu Lingshan)  [Orabug: 32480078] 
  - vhost_vdpa: Fix duplicate included kernel.h (Tian Tao)  [Orabug: 32480078] 
  - rds: CONFIG_RDS_DEBUG + tracepoints breaks rds build (Alan Maguire)  [Orabug: 32442487] 
  - tools/power turbostat: Support additional CPU model numbers (Len Brown)  [Orabug: 32422450] 
  - tools/power turbostat: Support Tiger Lake (Chen Yu)  [Orabug: 32422450]


author: Jack Vogel <jack.vogel@oracle.com> - 5.4.17-2102.200.7.el7
changelog:
  - KVM: arm64: pmu: Don't mark a counter as chained if the odd one is disabled (Eric Auger)  [Orabug: 32504832] 
  - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich)  [Orabug: 32492108]  {CVE-2021-26930}
  - xen-scsiback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492100]  {CVE-2021-26931}
  - xen-netback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492100]  {CVE-2021-26931}
  - xen-blkback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492100]  {CVE-2021-26931}
  - Xen/gntdev: correct error checking in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492092]  {CVE-2021-26932}
  - Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492092]  {CVE-2021-26932}
  - Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492092]  {CVE-2021-26932}
  - Xen/x86: don't bail early from clear_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492092]  {CVE-2021-26932}


author: Tom Cocozzello <tom.cocozzello@oracle.com> 1.2.3-2
changelog:
  - document how to install the restrict external ip webhook application with vault certs
  - fix bug where externalip cidr's can't fully be disabled


author: Murali Annamneni <murali.annamneni@oracle.com> 1.3.0-1
changelog:
  - Kubernetes-1.18.10 to Kubernetes-1.20.6 upgrade
  - Istio-1.7.3 to Istio-1.8.5 upgrade
  - License change from GPLv2+ to GPLv3
  - Fix for the failure of kubernetes restore [Orabug: 32310718]
  - Updated golang to 1.15.9


author: Thomas Tanaka <thomas.tanaka@oracle.com> 1.3.1-2
changelog:
  - Fix iptables issue when running on OL7 host using OL8 image for 1.19.8
  - Fix iptables issue when running on OL7 host using OL8 image
  - Address Istio CVE's CVE-2021-28683, CVE-2021-28682, CVE-2021-29258, CVE-2021-31920, CVE-2021-31921, CVE-2021-34824
  - Fixed yaml file to stop olcne-nginx and keepalived services at uninstall [Orabug: 32296282]
  - Fixed missing double semicolon in registry image helper


author: Murali Annamneni <murali.annamneni@oracle.com> 1.3.2-2
changelog:
  - Turn off default PodDisruptionBudget in istio template to unblock kubernetes module upgrade
  - Update Kubernetes version to 1.20.11 to address CVE-2021-25741
  - Update Istio to 1.9.8, 1.10.4 to address CVE-2021-32777, CVE-2021-32778, CVE-2021-32779, CVE-2021-32780 & CVE-2021-32781
  - Update proxyv2 image to select iptables legacy or latest based on host operating system
  - Fix major.minor k8s version


author: Daniel Krasinski <daniel.krasinski@oracle.com> 1.3.4-1
changelog:
  - Fixed a bug where specifying a port in the container-registry argument
    to the Kubernetes module would result in pods not being able to start.


