# changelog

author: Yifei Liu <yifei.l.liu@oracle.com> [4.14.35-2047.533.2.el7uek]
changelog:
  - LTS version: 4.14.334 (Yifei Liu)   
  - powerpc/ftrace: Fix stack teardown in ftrace_no_trace (Naveen N Rao)   
  - powerpc/ftrace: Create a dummy stackframe to fix stack unwind (Naveen N Rao)   
  - ring-buffer: Fix memory leak of free page (Steven Rostedt (Google))   
  - team: Fix use-after-free when an option instance allocation fails (Florent Revest)   
  - ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS (Baokun Li)   
  - HID: hid-asus: add const to read-only outgoing usb buffer (Denis Benato)   
  - net: usb: qmi_wwan: claim interface 4 for ZTE MF290 (Lech Perczak)   
  - asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation (Linus Torvalds)   
  - HID: multitouch: Add quirk for HONOR GLO-GXXX touchpad (Aoba K)   
  - HID: hid-asus: reset the backlight brightness level on resume (Denis Benato)   
  - platform/x86: intel_telemetry: Fix kernel doc descriptions (Andy Shevchenko)   
  - bcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc() (Coly Li)   
  - blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!" (Ming Lei)   
  - appletalk: Fix Use-After-Free in atalk_ioctl (Hyunwoo Kim)   
  - vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space() (Nikolay Kuratov)   
  - sign-file: Fix incorrect return values check (Yusong Gao)   
  - net: Remove acked SYN flag from packet in the transmit queue correctly (Dong Chenchen)   
  - qed: Fix a potential use-after-free in qed_cxt_tables_alloc (Dinghao Liu)   
  - net/rose: Fix Use-After-Free in rose_ioctl (Hyunwoo Kim)   
  - atm: Fix Use-After-Free in do_vcc_ioctl (Hyunwoo Kim)   
  - atm: solos-pci: Fix potential deadlock on &tx_queue_lock (Chengfeng Ye)   
  - atm: solos-pci: Fix potential deadlock on &cli_queue_lock (Chengfeng Ye)   
  - qca_spi: Fix reset behavior (Stefan Wahren)   
  - qca_debug: Fix ethtool -G iface tx behavior (Stefan Wahren)   
  - qca_debug: Prevent crash on TX ring changes (Stefan Wahren)   
  - LTS version: 4.14.333 (Yifei Liu)   
  - drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group (Ido Schimmel)   
  - psample: Require 'CAP_NET_ADMIN' when joining "packets" group (Ido Schimmel)   
  - genetlink: add CAP_NET_ADMIN test for multicast bind (Ido Schimmel)   
  - netlink: don't call ->netlink_bind with table lock held (Ido Schimmel)   
  - nilfs2: fix missing error check for sb_set_blocksize call (Ryusuke Konishi)   
  - KVM: s390/mm: Properly reset no-dat (Claudio Imbrenda)   
  - serial: 8250_omap: Add earlycon support for the AM654 UART controller (Ronald Wahl)   
  - serial: sc16is7xx: address RX timeout interrupt errata (Daniel Mack)   
  - parport: Add support for Brainboxes IX/UC/PX parallel cards (Cameron Williams)   
  - packet: Move reference count in packet_sock to atomic_long_t (Daniel Borkmann)   
  - tracing: Fix a possible race when disabling buffered events (Petr Pavlu)   
  - tracing: Fix incomplete locking when disabling buffered events (Petr Pavlu)   
  - tracing: Always update snapshot buffer size (Steven Rostedt (Google))   
  - nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage() (Ryusuke Konishi)   
  - ALSA: pcm: fix out-of-bounds in snd_pcm_state_names (Jason Zhang)   
  - scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle() (Dinghao Liu)   
  - tracing: Fix a warning when allocating buffered events fails (Petr Pavlu)   
  - hwmon: (acpi_power_meter) Fix 4.29 MW bug (Armin Wolf)   
  - RDMA/bnxt_re: Correct module description string (Kalesh AP)   
  - tcp: do not accept ACK of bytes we never sent (Eric Dumazet)   
  - net: hns: fix fake link up on xge port (Yonglong Liu)   
  - drm/amdgpu: correct chunk_ptr to a pointer to chunk. (YuanShang)   
  - tg3: Increment tx_dropped in tg3_tso_bug() (Alex Pakhunov)   
  - tg3: Move the [rt]x_dropped counters to tg3_napi (Alex Pakhunov)   
  - LTS version: 4.14.332 (Yifei Liu)   
  - driver core: Release all resources during unbind before updating device links (Saravana Kannan)   
  - net: ravb: Start TX queues after HW initialization succeeded (Claudiu Beznea)   
  - ravb: Fix races between ravb_tx_timeout_work() and net related ops (Yoshihiro Shimoda)   
  - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet (Zhengchao Shao)   
  - btrfs: send: ensure send_fd is writable (Jann Horn)   
  - btrfs: fix off-by-one when checking chunk map includes logical address (Filipe Manana)   
  - powerpc: Don't clobber f0/vs0 during fp|altivec register save (Timothy Pearson)   
  - dm verity: don't perform FEC for failed readahead IO (Wu Bo)   
  - dm-verity: align struct dm_verity_fec_io properly (Mikulas Patocka)   
  - firewire: core: fix possible memory leak in create_units() (Yang Yingliang)   
  - pinctrl: avoid reload of p state in list iteration (Maria Yu)   
  - usb: dwc3: set the dma max_seg_size (Ricardo Ribalda)   
  - USB: serial: option: don't claim interface 4 for ZTE MF290 (Lech Perczak)   
  - USB: serial: option: fix FM101R-GL defines (Puliang Lu)   
  - USB: serial: option: add Fibocom L7xx modules (Victor Fragoso)   
  - bcache: prevent potential division by zero error (Rand Deeb)   
  - bcache: check return value from btree_node_alloc_replacement() (Coly Li)   
  - USB: serial: option: add Luat Air72*U series products (Asuna Yang)   
  - s390/dasd: protect device queue against concurrent access (Jan Höppner)   
  - mtd: rawnand: brcmnand: Fix ecc chunk calculation for erased page bitfips (Claire Lin)   
  - net: axienet: Fix check for partial TX checksum (Samuel Holland)   
  - amd-xgbe: propagate the correct speed and duplex status (Raju Rangoju)   
  - amd-xgbe: handle corner-case during sfp hotplug (Raju Rangoju)   
  - arm/xen: fix xen_vcpu_info allocation alignment (Stefano Stabellini)   
  - net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez)   
  - ipv4: Correct/silence an endian warning in __ip_do_redirect (Kunwu Chan)   
  - drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP full (Jonas Karlman)   
  - ata: pata_isapnp: Add missing error check for devm_ioport_map() (Chen Ni)   
  - drm/panel: simple: Fix Innolux G101ICE-L01 timings (Marek Vasut)   
  - RDMA/irdma: Prevent zero-length STAG registration (Christopher Bednarz) [Orabug: 36155615] {CVE-2023-25775}
  - LTS version: 4.14.331 (Yifei Liu)   
  - net: sched: fix race condition in qdisc_graft() (Eric Dumazet) [Orabug: 35250826] {CVE-2023-0590}
  - scsi: virtio_scsi: limit number of hw queues by nr_cpu_ids (Dongli Zhang)   
  - ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks (Kemeng Shi)   
  - ext4: correct return value of ext4_convert_meta_bg (Kemeng Shi)   
  - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Kemeng Shi)   
  - ext4: apply umask if ACL support is disabled (Max Kellermann)   
  - media: venus: hfi: fix the check to handle session buffer requirement (Vikash Garodia)   
  - media: sharp: fix sharp encoding (Sean Young)   
  - i2c: i801: fix potential race in i801_block_transaction_byte_by_byte (Heiner Kallweit)   
  - net: dsa: lan9303: consequently nested-lock physical MDIO (Alexander Sverdlin)   
  - ALSA: info: Fix potential deadlock at disconnection (Takashi Iwai)   
  - parisc/pgtable: Do not drop upper 5 address bits of physical address (Helge Deller)   
  - parisc: Prevent booting 64-bit kernels on PA1.x machines (Helge Deller)   
  - mcb: fix error handling for different scenarios when parsing (Sanjuán García, Jorge)   
  - jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev (Zhihao Cheng)   
  - genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware (Herve Codina)   
  - mmc: meson-gx: Remove setting of CMD_CFG_ERROR (Rong Chen)   
  - PM: hibernate: Clean up sync_read handling in snapshot_write_next() (Brian Geffon)   
  - PM: hibernate: Use __get_safe_page() rather than touching the list (Brian Geffon)   
  - mmc: vub300: fix an error code (Dan Carpenter)   
  - PCI/sysfs: Protect driver's D3cold preference from user space (Lukas Wunner)   
  - hvc/xen: fix error path in xen_hvc_init() to always register frontend driver (David Woodhouse)   
  - audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare() (Paul Moore)   
  - audit: don't take task_lock() in audit_exe_compare() code path (Paul Moore)   
  - KVM: x86: Ignore MSR_AMD64_TW_CFG access (Maciej S. Szmigiero)   
  - randstruct: Fix gcc-plugin performance mode to stay in group (Kees Cook)   
  - media: venus: hfi: add checks to perform sanity on queue pointers (Vikash Garodia)   
  - pwm: Fix double shift bug (Dan Carpenter)   
  - gfs2: ignore negated quota changes (Bob Peterson)   
  - media: vivid: avoid integer overflow (Hans Verkuil)   
  - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Rajeshwar R Shinde)   
  - i2c: sun6i-p2wi: Prevent potential division by zero (Axel Lin)   
  - tty: vcc: Add check for kstrdup() in vcc_probe() (Yi Yang)   
  - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (Wenchao Hao)   
  - atm: iphase: Do PCI error checks on own line (Ilpo Järvinen)   
  - ALSA: hda: Fix possible null-ptr-deref when assigning a stream (Cezary Rojewski)   
  - jfs: fix array-index-out-of-bounds in diAlloc (Manas Ghandat)   
  - jfs: fix array-index-out-of-bounds in dbFindLeaf (Manas Ghandat)   
  - fs/jfs: Add validity check for db_maxag and db_agpref (Juntong Deng)   
  - fs/jfs: Add check for negative db_l2nbperpage (Juntong Deng)   
  - RDMA/hfi1: Use FIELD_GET() to extract Link Width (Ilpo Järvinen)   
  - crypto: pcrypt - Fix hungtask for PADATA_RESET (Lu Jialin)   
  - selftests/efivarfs: create-read: fix a resource leak (zhujun2)   
  - drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga (Mario Limonciello)   
  - drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 (Mario Limonciello)   
  - net: annotate data-races around sk->sk_dst_pending_confirm (Eric Dumazet)   
  - wifi: ath10k: fix clang-specific fortify warning (Dmitry Antipov)   
  - wifi: ath9k: fix clang-specific fortify warnings (Dmitry Antipov)   
  - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Ping-Ke Shih)   
  - x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size (Mike Rapoport (IBM))   
  - clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware (Ronald Wahl)   
  - clocksource/drivers/timer-imx-gpt: Fix potential memory leak (Jacky Bai)   
  - locking/ww_mutex/test: Fix potential workqueue corruption (John Stultz)   
  - LTS version: 4.14.330 (Yifei Liu)   
  - btrfs: use u64 for buffer sizes in the tree search ioctls (Filipe Manana)   
  - fbdev: fsl-diu-fb: mark wr_reg_wa() static (Arnd Bergmann)   
  - netfilter: xt_recent: fix (increase) ipv6 literal buffer length (Maciej Żenczykowski)   
  - tg3: power down device only on SYSTEM_POWER_OFF (George Shuklin)   
  - dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses. (Kuniyuki Iwashima)   
  - dccp: Call security_inet_conn_request() after setting IPv4 addresses. (Kuniyuki Iwashima)   
  - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Shigeru Yoshida)   
  - llc: verify mac len before reading mac header (Willem de Bruijn)   
  - pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume (Florian Fainelli)   
  - media: s3c-camif: Avoid inappropriate kfree() (Katya Orlova)   
  - pcmcia: ds: fix possible name leak in error path in pcmcia_device_add() (Yang Yingliang)   
  - pcmcia: ds: fix refcount leak in pcmcia_device_add() (Yang Yingliang)   
  - pcmcia: cs: fix possible hung task and memory leak pccardd() (Yang Yingliang)   
  - dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc() (Christophe JAILLET)   
  - USB: usbip: fix stub_dev hub disconnect (Jonas Blixt)   
  - misc: st_core: Do not call kfree_skb() under spin_lock_irqsave() (Jinjie Ruan)   
  - dmaengine: ti: edma: handle irq_of_parse_and_map() errors (Dan Carpenter)   
  - usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (Jia-Ju Bai)   
  - tty: tty_jobctrl: fix pid memleak in disassociate_ctty() (Yi Yang)   
  - mfd: dln2: Fix double put in dln2_probe (Dinghao Liu)   
  - ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails (Cezary Rojewski)   
  - sh: bios: Revive earlyprintk support (Geert Uytterhoeven)   
  - RDMA/hfi1: Workaround truncation compilation error (Leon Romanovsky)   
  - ext4: move 'ix' sanity check to corrent position (Gou Hao)   
  - ARM: 9321/1: memset: cast the constant byte to unsigned char (Kursad Oney)   
  - hwrng: geode - fix accessing registers (Jonas Gorski)   
  - firmware: ti_sci: Mark driver as non removable (Dhruva Gole)   
  - ARM: dts: qcom: mdm9615: populate vsdcc fixed regulator (Krzysztof Kozlowski)   
  - drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe() (Christophe JAILLET)   
  - drm/radeon: possible buffer overflow (Konstantin Meskhidze)   
  - drm/rockchip: vop: Fix reset of state in duplicate state crtc funcs (Jonas Karlman)   
  - platform/x86: wmi: Fix probe failure when failing to register WMI devices (Armin Wolf)   
  - clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data (Jiasheng Jiang)   
  - clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data (Jiasheng Jiang)   
  - clk: keystone: pll: fix a couple NULL vs IS_ERR() checks (Dan Carpenter)   
  - clk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies (Devi Priya)   
  - ipv6: avoid atomic fragment on GSO packets (Yan Zhai)   
  - ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias() (Christophe JAILLET)   
  - thermal: core: prevent potential string overflow (Dan Carpenter)   
  - wifi: rtlwifi: fix EDCA limit set by BT coexistence (Dmitry Antipov)   
  - tcp_metrics: do not create an entry from tcp_init_metrics() (Eric Dumazet)   
  - tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics() (Eric Dumazet)   
  - i40e: fix potential memory leaks in i40e_remove() (Andrii Staikov)   
  - LTS version: 4.14.329 (Yifei Liu)   
  - tty: 8250: Add support for Intashield IS-100 (Cameron Williams)   
  - tty: 8250: Add support for Brainboxes UP cards (Cameron Williams)   
  - tty: 8250: Add support for additional Brainboxes UC cards (Cameron Williams)   
  - tty: 8250: Remove UC-257 and UC-431 (Cameron Williams)   
  - usb: storage: set 1.50 as the lower bcdDevice for older "Super Top" compatibility (LihaSika)   
  - PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device (Vicki Pfau)   
  - remove the sx8 block driver (Christoph Hellwig)   
  - ata: ahci: fix enum constants for gcc-13 (Arnd Bergmann)   
  - net: chelsio: cxgb4: add an error code check in t4_load_phy_fw (Su Hui)   
  - platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e (Hans de Goede)   
  - scsi: mpt3sas: Fix in error path (Tomas Henzl)   
  - fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit() (Jorge Maidana)   
  - ASoC: rt5650: fix the wrong result of key button (Shuming Fan)   
  - netfilter: nfnetlink_log: silence bogus compiler warning (Florian Westphal)   
  - fbdev: atyfb: only use ioremap_uc() on i386 and ia64 (Arnd Bergmann)   
  - Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport (Dmitry Torokhov)   
  - dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe (Zhang Shurong)   
  - irqchip/stm32-exti: add missing DT IRQ flag translation (Ben Wolsieffer)   
  - ASoC: simple-card: fixup asoc_simple_probe() error handling (Kuninori Morimoto)   
  - x86: Fix .brk attribute in linker script (Juergen Gross)   
  - rpmsg: Fix possible refcount leak in rpmsg_register_device_override() (Hangyu Hua)   
  - rpmsg: glink: Release driver_override (Bjorn Andersson)   
  - rpmsg: Fix calling device_lock() on non-initialized device (Krzysztof Kozlowski)   
  - rpmsg: Fix kfree() of static memory on setting driver_override (Krzysztof Kozlowski)   
  - driver: platform: Add helper for safer setting of driver_override (Krzysztof Kozlowski)   
  - x86/mm: Fix RESERVE_BRK() for older binutils (Josh Poimboeuf)   
  - x86/mm: Simplify RESERVE_BRK() (Josh Poimboeuf) [Orabug: 34335626] {CVE-2022-23816} {CVE-2022-29901}
  - x86/i8259: Skip probing when ACPI/MADT advertises PCAT compatibility (Thomas Gleixner)   
  - nfsd: lock_rename() needs both directories to live on the same fs (Al Viro)   
  - f2fs: fix to do sanity check on inode type during garbage collection (Chao Yu)   
  - kobject: Fix slab-out-of-bounds in fill_kobj_path() (Wang Hai) [Orabug: 35924075] {CVE-2023-45863}
  - drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() (Lukasz Majczak)   
  - ARM: 8933/1: replace Sun/Solaris style flag on section directive (Nick Desaulniers)   
  - i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node() (Herve Codina)   
  - i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node() (Herve Codina)   
  - i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node() (Herve Codina)   
  - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (Ivan Vecera)   
  - gtp: uapi: fix GTPA_MAX (Pablo Neira Ayuso)   
  - tcp: fix wrong RTO timeout when received SACK reneging (Fred Chen)   
  - r8152: Increase USB control msg timeout to 5000ms as per spec (Douglas Anderson)   
  - igb: Fix potential memory leak in igb_add_ethtool_nfc_entry (Mateusz Palczewski)   
  - treewide: Spelling fix in comment (Kunwu Chan)   
  - virtio_balloon: Fix endless deflation and inflation on arm64 (Gavin Shan)   
  - mcb-lpc: Reallocate memory region to avoid memory overlapping (Rodríguez Barbarin, José Javier)   
  - mcb: Return actual parsed size when reading chameleon table (Rodríguez Barbarin, José Javier)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.534.1.el7uek]
changelog:
  -  LTS version: 4.14.336 (Yifei Liu)   
  - mmc: core: Cancel delayed work before releasing host (Geert Uytterhoeven)   
  - mmc: rpmb: fixes pause retune on all RPMB partitions. (Jorge Ramirez-Ortiz)   
  - firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines and ASM108x/VT630x PCIe cards (Takashi Sakamoto)   
  - i40e: fix use-after-free in i40e_aqc_add_filters() (Ke Xiao)   
  - net: bcmgenet: Fix FCS generation for fragmented skbuffs (Adrian Cinal)   
  - net: sched: em_text: fix possible memory leak in em_text_destroy() (Hangyu Hua)   
  - nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local (Siddh Raman Pant)   
  - LTS version: 4.14.335 (Yifei Liu)   
  - block: Don't invalidate pagecache for invalid falloc modes (Sarthak Kukreti)   
  - dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata() (Mikulas Patocka)   
  - net: 9p: avoid freeing uninit memory in p9pdu_vreadf (Fedor Pchelkin)   
  - Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent (Luiz Augusto von Dentz)   
  - USB: serial: option: add Quectel RM500Q R13 firmware support (Reinhard Speyerer)   
  - USB: serial: option: add Foxconn T99W265 with new baseline (Slark Xiao)   
  - USB: serial: option: add Quectel EG912Y module support (Alper Ak)   
  - USB: serial: ftdi_sio: update Actisense PIDs constant names (Mark Glover)   
  - wifi: cfg80211: fix certs build to not depend on file order (Johannes Berg)   
  - wifi: cfg80211: Add my certificate (Chen-Yu Tsai)   
  - iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table (Javier Carrasco)   
  - Input: ipaq-micro-keys - add error handling for devm_kmemdup (Haoran Liu)   
  - iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw (Su Hui)   
  - ethernet: atheros: fix a memleak in atl1e_setup_ring_resources (Zhipeng Lu)   
  - net: sched: ife: fix potential use-after-free (Eric Dumazet)   
  - wifi: mac80211: mesh_plink: fix matches_local logic (Johannes Berg)   
  - s390/vx: fix save/restore of fpu kernel context (Heiko Carstens)   
  - ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init (Kunwu Chan)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.534.2.el7uek]
changelog:
  - workqueue: Make sure struct worker is accessible for wq_worker_comm() (Tejun Heo)  [Orabug: 36300552]  
  - workqueue: Show the latest workqueue name in /proc/PID/{comm,stat,status} (Tejun Heo)  [Orabug: 36300552]  
  - workqueue: Set worker->desc to workqueue name by default (Tejun Heo)  [Orabug: 36300552]  
  - workqueue: Make worker_attach/detach_pool() update worker->pool (Tejun Heo)  [Orabug: 36300552]  
  - workqueue: Replace pool->attach_mutex with global wq_pool_attach_mutex (Tejun Heo)  [Orabug: 36300552]


author: Yifei Liu <yifei.l.liu@oracle.com> [4.14.35-2047.534.3.el7uek]
changelog:
  - scsi: megaraid_sas: Correct value passed to scsi_device_lookup() (Guixin Liu)  [Orabug: 36345169]  
  - scsi: megaraid_sas: Update max supported LD IDs to 240 (Chandrakanth Patil)  [Orabug: 36344166]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.534.3.1.el7uek]
changelog:
  - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal)  [Orabug: 36251145]  {CVE-2024-1086}


author: Yifei Liu <yifei.l.liu@oracle.com> [4.14.35-2047.533.2.el7uek]
changelog:
  - LTS version: 4.14.334 (Yifei Liu)   
  - powerpc/ftrace: Fix stack teardown in ftrace_no_trace (Naveen N Rao)   
  - powerpc/ftrace: Create a dummy stackframe to fix stack unwind (Naveen N Rao)   
  - ring-buffer: Fix memory leak of free page (Steven Rostedt (Google))   
  - team: Fix use-after-free when an option instance allocation fails (Florent Revest)   
  - ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS (Baokun Li)   
  - HID: hid-asus: add const to read-only outgoing usb buffer (Denis Benato)   
  - net: usb: qmi_wwan: claim interface 4 for ZTE MF290 (Lech Perczak)   
  - asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation (Linus Torvalds)   
  - HID: multitouch: Add quirk for HONOR GLO-GXXX touchpad (Aoba K)   
  - HID: hid-asus: reset the backlight brightness level on resume (Denis Benato)   
  - platform/x86: intel_telemetry: Fix kernel doc descriptions (Andy Shevchenko)   
  - bcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc() (Coly Li)   
  - blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!" (Ming Lei)   
  - appletalk: Fix Use-After-Free in atalk_ioctl (Hyunwoo Kim)   
  - vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space() (Nikolay Kuratov)   
  - sign-file: Fix incorrect return values check (Yusong Gao)   
  - net: Remove acked SYN flag from packet in the transmit queue correctly (Dong Chenchen)   
  - qed: Fix a potential use-after-free in qed_cxt_tables_alloc (Dinghao Liu)   
  - net/rose: Fix Use-After-Free in rose_ioctl (Hyunwoo Kim)   
  - atm: Fix Use-After-Free in do_vcc_ioctl (Hyunwoo Kim) [Orabug: 36229395] {CVE-2023-51780}
  - atm: solos-pci: Fix potential deadlock on &tx_queue_lock (Chengfeng Ye)   
  - atm: solos-pci: Fix potential deadlock on &cli_queue_lock (Chengfeng Ye)   
  - qca_spi: Fix reset behavior (Stefan Wahren)   
  - qca_debug: Fix ethtool -G iface tx behavior (Stefan Wahren)   
  - qca_debug: Prevent crash on TX ring changes (Stefan Wahren)   
  - LTS version: 4.14.333 (Yifei Liu)   
  - drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group (Ido Schimmel)   
  - psample: Require 'CAP_NET_ADMIN' when joining "packets" group (Ido Schimmel)   
  - genetlink: add CAP_NET_ADMIN test for multicast bind (Ido Schimmel)   
  - netlink: don't call ->netlink_bind with table lock held (Ido Schimmel)   
  - nilfs2: fix missing error check for sb_set_blocksize call (Ryusuke Konishi)   
  - KVM: s390/mm: Properly reset no-dat (Claudio Imbrenda)   
  - serial: 8250_omap: Add earlycon support for the AM654 UART controller (Ronald Wahl)   
  - serial: sc16is7xx: address RX timeout interrupt errata (Daniel Mack)   
  - parport: Add support for Brainboxes IX/UC/PX parallel cards (Cameron Williams)   
  - packet: Move reference count in packet_sock to atomic_long_t (Daniel Borkmann)   
  - tracing: Fix a possible race when disabling buffered events (Petr Pavlu)   
  - tracing: Fix incomplete locking when disabling buffered events (Petr Pavlu)   
  - tracing: Always update snapshot buffer size (Steven Rostedt (Google))   
  - nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage() (Ryusuke Konishi)   
  - ALSA: pcm: fix out-of-bounds in snd_pcm_state_names (Jason Zhang)   
  - scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle() (Dinghao Liu)   
  - tracing: Fix a warning when allocating buffered events fails (Petr Pavlu)   
  - hwmon: (acpi_power_meter) Fix 4.29 MW bug (Armin Wolf)   
  - RDMA/bnxt_re: Correct module description string (Kalesh AP)   
  - tcp: do not accept ACK of bytes we never sent (Eric Dumazet)   
  - net: hns: fix fake link up on xge port (Yonglong Liu)   
  - drm/amdgpu: correct chunk_ptr to a pointer to chunk. (YuanShang)   
  - tg3: Increment tx_dropped in tg3_tso_bug() (Alex Pakhunov)   
  - tg3: Move the [rt]x_dropped counters to tg3_napi (Alex Pakhunov)   
  - LTS version: 4.14.332 (Yifei Liu)   
  - driver core: Release all resources during unbind before updating device links (Saravana Kannan)   
  - net: ravb: Start TX queues after HW initialization succeeded (Claudiu Beznea)   
  - ravb: Fix races between ravb_tx_timeout_work() and net related ops (Yoshihiro Shimoda)   
  - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet (Zhengchao Shao)   
  - btrfs: send: ensure send_fd is writable (Jann Horn)   
  - btrfs: fix off-by-one when checking chunk map includes logical address (Filipe Manana)   
  - powerpc: Don't clobber f0/vs0 during fp|altivec register save (Timothy Pearson)   
  - dm verity: don't perform FEC for failed readahead IO (Wu Bo)   
  - dm-verity: align struct dm_verity_fec_io properly (Mikulas Patocka)   
  - firewire: core: fix possible memory leak in create_units() (Yang Yingliang)   
  - pinctrl: avoid reload of p state in list iteration (Maria Yu)   
  - usb: dwc3: set the dma max_seg_size (Ricardo Ribalda)   
  - USB: serial: option: don't claim interface 4 for ZTE MF290 (Lech Perczak)   
  - USB: serial: option: fix FM101R-GL defines (Puliang Lu)   
  - USB: serial: option: add Fibocom L7xx modules (Victor Fragoso)   
  - bcache: prevent potential division by zero error (Rand Deeb)   
  - bcache: check return value from btree_node_alloc_replacement() (Coly Li)   
  - USB: serial: option: add Luat Air72*U series products (Asuna Yang)   
  - s390/dasd: protect device queue against concurrent access (Jan Höppner)   
  - mtd: rawnand: brcmnand: Fix ecc chunk calculation for erased page bitfips (Claire Lin)   
  - net: axienet: Fix check for partial TX checksum (Samuel Holland)   
  - amd-xgbe: propagate the correct speed and duplex status (Raju Rangoju)   
  - amd-xgbe: handle corner-case during sfp hotplug (Raju Rangoju)   
  - arm/xen: fix xen_vcpu_info allocation alignment (Stefano Stabellini)   
  - net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez)   
  - ipv4: Correct/silence an endian warning in __ip_do_redirect (Kunwu Chan)   
  - drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP full (Jonas Karlman)   
  - ata: pata_isapnp: Add missing error check for devm_ioport_map() (Chen Ni)   
  - drm/panel: simple: Fix Innolux G101ICE-L01 timings (Marek Vasut)   
  - RDMA/irdma: Prevent zero-length STAG registration (Christopher Bednarz) [Orabug: 36155615] {CVE-2023-25775}
  - LTS version: 4.14.331 (Yifei Liu)   
  - net: sched: fix race condition in qdisc_graft() (Eric Dumazet) [Orabug: 35250826] {CVE-2023-0590}
  - scsi: virtio_scsi: limit number of hw queues by nr_cpu_ids (Dongli Zhang)   
  - ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks (Kemeng Shi)   
  - ext4: correct return value of ext4_convert_meta_bg (Kemeng Shi)   
  - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Kemeng Shi)   
  - ext4: apply umask if ACL support is disabled (Max Kellermann)   
  - media: venus: hfi: fix the check to handle session buffer requirement (Vikash Garodia)   
  - media: sharp: fix sharp encoding (Sean Young)   
  - i2c: i801: fix potential race in i801_block_transaction_byte_by_byte (Heiner Kallweit)   
  - net: dsa: lan9303: consequently nested-lock physical MDIO (Alexander Sverdlin)   
  - ALSA: info: Fix potential deadlock at disconnection (Takashi Iwai)   
  - parisc/pgtable: Do not drop upper 5 address bits of physical address (Helge Deller)   
  - parisc: Prevent booting 64-bit kernels on PA1.x machines (Helge Deller)   
  - mcb: fix error handling for different scenarios when parsing (Sanjuán García, Jorge)   
  - jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev (Zhihao Cheng)   
  - genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware (Herve Codina)   
  - mmc: meson-gx: Remove setting of CMD_CFG_ERROR (Rong Chen)   
  - PM: hibernate: Clean up sync_read handling in snapshot_write_next() (Brian Geffon)   
  - PM: hibernate: Use __get_safe_page() rather than touching the list (Brian Geffon)   
  - mmc: vub300: fix an error code (Dan Carpenter)   
  - PCI/sysfs: Protect driver's D3cold preference from user space (Lukas Wunner)   
  - hvc/xen: fix error path in xen_hvc_init() to always register frontend driver (David Woodhouse)   
  - audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare() (Paul Moore)   
  - audit: don't take task_lock() in audit_exe_compare() code path (Paul Moore)   
  - KVM: x86: Ignore MSR_AMD64_TW_CFG access (Maciej S. Szmigiero)   
  - randstruct: Fix gcc-plugin performance mode to stay in group (Kees Cook)   
  - media: venus: hfi: add checks to perform sanity on queue pointers (Vikash Garodia)   
  - pwm: Fix double shift bug (Dan Carpenter)   
  - gfs2: ignore negated quota changes (Bob Peterson)   
  - media: vivid: avoid integer overflow (Hans Verkuil)   
  - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Rajeshwar R Shinde)   
  - i2c: sun6i-p2wi: Prevent potential division by zero (Axel Lin)   
  - tty: vcc: Add check for kstrdup() in vcc_probe() (Yi Yang)   
  - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (Wenchao Hao)   
  - atm: iphase: Do PCI error checks on own line (Ilpo Järvinen)   
  - ALSA: hda: Fix possible null-ptr-deref when assigning a stream (Cezary Rojewski)   
  - jfs: fix array-index-out-of-bounds in diAlloc (Manas Ghandat)   
  - jfs: fix array-index-out-of-bounds in dbFindLeaf (Manas Ghandat)   
  - fs/jfs: Add validity check for db_maxag and db_agpref (Juntong Deng)   
  - fs/jfs: Add check for negative db_l2nbperpage (Juntong Deng)   
  - RDMA/hfi1: Use FIELD_GET() to extract Link Width (Ilpo Järvinen)   
  - crypto: pcrypt - Fix hungtask for PADATA_RESET (Lu Jialin)   
  - selftests/efivarfs: create-read: fix a resource leak (zhujun2)   
  - drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga (Mario Limonciello)   
  - drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 (Mario Limonciello)   
  - net: annotate data-races around sk->sk_dst_pending_confirm (Eric Dumazet)   
  - wifi: ath10k: fix clang-specific fortify warning (Dmitry Antipov)   
  - wifi: ath9k: fix clang-specific fortify warnings (Dmitry Antipov)   
  - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Ping-Ke Shih)   
  - x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size (Mike Rapoport (IBM))   
  - clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware (Ronald Wahl)   
  - clocksource/drivers/timer-imx-gpt: Fix potential memory leak (Jacky Bai)   
  - locking/ww_mutex/test: Fix potential workqueue corruption (John Stultz)   
  - LTS version: 4.14.330 (Yifei Liu)   
  - btrfs: use u64 for buffer sizes in the tree search ioctls (Filipe Manana)   
  - fbdev: fsl-diu-fb: mark wr_reg_wa() static (Arnd Bergmann)   
  - netfilter: xt_recent: fix (increase) ipv6 literal buffer length (Maciej Żenczykowski)   
  - tg3: power down device only on SYSTEM_POWER_OFF (George Shuklin)   
  - dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses. (Kuniyuki Iwashima)   
  - dccp: Call security_inet_conn_request() after setting IPv4 addresses. (Kuniyuki Iwashima)   
  - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Shigeru Yoshida)   
  - llc: verify mac len before reading mac header (Willem de Bruijn)   
  - pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume (Florian Fainelli)   
  - media: s3c-camif: Avoid inappropriate kfree() (Katya Orlova)   
  - pcmcia: ds: fix possible name leak in error path in pcmcia_device_add() (Yang Yingliang)   
  - pcmcia: ds: fix refcount leak in pcmcia_device_add() (Yang Yingliang)   
  - pcmcia: cs: fix possible hung task and memory leak pccardd() (Yang Yingliang)   
  - dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc() (Christophe JAILLET)   
  - USB: usbip: fix stub_dev hub disconnect (Jonas Blixt)   
  - misc: st_core: Do not call kfree_skb() under spin_lock_irqsave() (Jinjie Ruan)   
  - dmaengine: ti: edma: handle irq_of_parse_and_map() errors (Dan Carpenter)   
  - usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (Jia-Ju Bai)   
  - tty: tty_jobctrl: fix pid memleak in disassociate_ctty() (Yi Yang)   
  - mfd: dln2: Fix double put in dln2_probe (Dinghao Liu)   
  - ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails (Cezary Rojewski)   
  - sh: bios: Revive earlyprintk support (Geert Uytterhoeven)   
  - RDMA/hfi1: Workaround truncation compilation error (Leon Romanovsky)   
  - ext4: move 'ix' sanity check to corrent position (Gou Hao)   
  - ARM: 9321/1: memset: cast the constant byte to unsigned char (Kursad Oney)   
  - hwrng: geode - fix accessing registers (Jonas Gorski)   
  - firmware: ti_sci: Mark driver as non removable (Dhruva Gole)   
  - ARM: dts: qcom: mdm9615: populate vsdcc fixed regulator (Krzysztof Kozlowski)   
  - drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe() (Christophe JAILLET)   
  - drm/radeon: possible buffer overflow (Konstantin Meskhidze)   
  - drm/rockchip: vop: Fix reset of state in duplicate state crtc funcs (Jonas Karlman)   
  - platform/x86: wmi: Fix probe failure when failing to register WMI devices (Armin Wolf)   
  - clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data (Jiasheng Jiang)   
  - clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data (Jiasheng Jiang)   
  - clk: keystone: pll: fix a couple NULL vs IS_ERR() checks (Dan Carpenter)   
  - clk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies (Devi Priya)   
  - ipv6: avoid atomic fragment on GSO packets (Yan Zhai)   
  - ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias() (Christophe JAILLET)   
  - thermal: core: prevent potential string overflow (Dan Carpenter)   
  - wifi: rtlwifi: fix EDCA limit set by BT coexistence (Dmitry Antipov)   
  - tcp_metrics: do not create an entry from tcp_init_metrics() (Eric Dumazet)   
  - tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics() (Eric Dumazet)   
  - i40e: fix potential memory leaks in i40e_remove() (Andrii Staikov)   
  - LTS version: 4.14.329 (Yifei Liu)   
  - tty: 8250: Add support for Intashield IS-100 (Cameron Williams)   
  - tty: 8250: Add support for Brainboxes UP cards (Cameron Williams)   
  - tty: 8250: Add support for additional Brainboxes UC cards (Cameron Williams)   
  - tty: 8250: Remove UC-257 and UC-431 (Cameron Williams)   
  - usb: storage: set 1.50 as the lower bcdDevice for older "Super Top" compatibility (LihaSika)   
  - PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device (Vicki Pfau)   
  - remove the sx8 block driver (Christoph Hellwig)   
  - ata: ahci: fix enum constants for gcc-13 (Arnd Bergmann)   
  - net: chelsio: cxgb4: add an error code check in t4_load_phy_fw (Su Hui)   
  - platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e (Hans de Goede)   
  - scsi: mpt3sas: Fix in error path (Tomas Henzl)   
  - fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit() (Jorge Maidana)   
  - ASoC: rt5650: fix the wrong result of key button (Shuming Fan)   
  - netfilter: nfnetlink_log: silence bogus compiler warning (Florian Westphal)   
  - fbdev: atyfb: only use ioremap_uc() on i386 and ia64 (Arnd Bergmann)   
  - Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport (Dmitry Torokhov)   
  - dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe (Zhang Shurong)   
  - irqchip/stm32-exti: add missing DT IRQ flag translation (Ben Wolsieffer)   
  - ASoC: simple-card: fixup asoc_simple_probe() error handling (Kuninori Morimoto)   
  - x86: Fix .brk attribute in linker script (Juergen Gross)   
  - rpmsg: Fix possible refcount leak in rpmsg_register_device_override() (Hangyu Hua)   
  - rpmsg: glink: Release driver_override (Bjorn Andersson)   
  - rpmsg: Fix calling device_lock() on non-initialized device (Krzysztof Kozlowski)   
  - rpmsg: Fix kfree() of static memory on setting driver_override (Krzysztof Kozlowski)   
  - driver: platform: Add helper for safer setting of driver_override (Krzysztof Kozlowski)   
  - x86/mm: Fix RESERVE_BRK() for older binutils (Josh Poimboeuf)   
  - x86/mm: Simplify RESERVE_BRK() (Josh Poimboeuf) [Orabug: 34335626] {CVE-2022-23816} {CVE-2022-29901}
  - x86/i8259: Skip probing when ACPI/MADT advertises PCAT compatibility (Thomas Gleixner)   
  - nfsd: lock_rename() needs both directories to live on the same fs (Al Viro)   
  - f2fs: fix to do sanity check on inode type during garbage collection (Chao Yu)   
  - kobject: Fix slab-out-of-bounds in fill_kobj_path() (Wang Hai) [Orabug: 35924075] {CVE-2023-45863}
  - drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() (Lukasz Majczak)   
  - ARM: 8933/1: replace Sun/Solaris style flag on section directive (Nick Desaulniers)   
  - i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node() (Herve Codina)   
  - i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node() (Herve Codina)   
  - i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node() (Herve Codina)   
  - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (Ivan Vecera)   
  - gtp: uapi: fix GTPA_MAX (Pablo Neira Ayuso)   
  - tcp: fix wrong RTO timeout when received SACK reneging (Fred Chen)   
  - r8152: Increase USB control msg timeout to 5000ms as per spec (Douglas Anderson)   
  - igb: Fix potential memory leak in igb_add_ethtool_nfc_entry (Mateusz Palczewski)   
  - treewide: Spelling fix in comment (Kunwu Chan)   
  - virtio_balloon: Fix endless deflation and inflation on arm64 (Gavin Shan)   
  - mcb-lpc: Reallocate memory region to avoid memory overlapping (Rodríguez Barbarin, José Javier)   
  - mcb: Return actual parsed size when reading chameleon table (Rodríguez Barbarin, José Javier)


author: Yifei Liu <yifei.l.liu@oracle.com> [4.14.35-2047.535.1.el7uek]
changelog:
  - mm: avoid conflict between MADV_DOEXEC and upstream advice values (Anthony Yznaga)  [Orabug: 36334310]  
  - net/rds: print PPID/COMM of process doing user reset on RDS connection (Juan Garcia)  [Orabug: 36248431]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.535.2.el7uek]
changelog:
  - Fix null ptr in rds_tcp_recv_path (Allison Henderson)  [Orabug: 33499812]  
  - LTS version: v4.14.338 (Saeed Mirzamohammadi)   
  - crypto: scompress - initialize per-CPU variables on each CPU (Sebastian Andrzej Siewior)   
  - Revert "NFSD: Fix possible sleep during nfsd4_release_lockowner()" (Greg Kroah-Hartman)   
  - i2c: s3c24xx: fix transferring more than one message in polling mode (Marek Szyprowski)   
  - i2c: s3c24xx: fix read transfers in polling mode (Marek Szyprowski)   
  - kdb: Fix a potential buffer overflow in kdb_local() (Christophe JAILLET)   
  - kdb: Censor attempts to set PROMPT without ENABLE_MEM_READ (Daniel Thompson)   
  - ipvs: avoid stat macros calls from preemptible context (Fedor Pchelkin)   
  - net: ravb: Fix dma_addr_t truncation in error case (Nikita Yushchenko)   
  - serial: imx: Correct clock error message in function probe() (Christoph Niedermaier)   
  - apparmor: avoid crash when parsed profile name is empty (Fedor Pchelkin)   
  - MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup() (Christophe JAILLET)   
  - MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup() (Christophe JAILLET)   
  - HID: wacom: Correct behavior when processing some confidence == false touches (Jason Gerecke)   
  - wifi: mwifiex: configure BSSID consistently when starting AP (David Lin)   
  - wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors (Ilpo Järvinen)   
  - wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code (Ilpo Järvinen)   
  - fbdev: flush deferred work in fb_deferred_io_fsync() (Nam Cao)   
  - ALSA: oxygen: Fix right channel of capture volume mixer (Takashi Iwai)   
  - usb: mon: Fix atomicity violation in mon_bin_vma_fault (Gui-Dong Han)   
  - usb: chipidea: wait controller resume finished for wakeup irq (Xu Yang)   
  - usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart (Uttkarsh Aggarwal)   
  - usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host() (Xu Yang)   
  - tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug (Heiko Carstens)   
  - binder: fix unused alloc->free_async_space (Carlos Llamas)   
  - binder: fix race between mmput() and do_exit() (Carlos Llamas)   
  - Input: atkbd - use ab83 as id when skipping the getid command (Hans de Goede)   
  - binder: fix async space check for 0-sized buffers (Carlos Llamas)   
  - watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling (Stefan Wahren)   
  - watchdog: set cdev owner before adding (Curtis Klein)   
  - gpu/drm/radeon: fix two memleaks in radeon_vm_init (Zhipeng Lu)   
  - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Zhipeng Lu)   
  - drm/amd/pm: fix a double-free in si_dpm_init (Zhipeng Lu)   
  - media: dvbdev: drop refcount on error path in dvb_device_open() (Dan Carpenter)   
  - media: cx231xx: fix a memleak in cx231xx_init_isoc (Zhipeng Lu)   
  - drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table (Zhipeng Lu)   
  - drm/radeon/dpm: fix a memleak in sumo_parse_power_table (Zhipeng Lu)   
  - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Yang Yingliang)   
  - drm/drv: propagate errors from drm_modeset_register_all() (Dmitry Baryshkov)   
  - drm/msm/mdp4: flush vblank event on disable (Dmitry Baryshkov)   
  - ASoC: cs35l34: Fix GPIO name and drop legacy include (Linus Walleij)   
  - ASoC: cs35l33: Fix GPIO name and drop legacy include (Linus Walleij)   
  - drm/radeon: check return value of radeon_ring_lock() (Nikita Zhandarovich)   
  - drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check() (Nikita Zhandarovich)   
  - drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg() (Nikita Zhandarovich)   
  - f2fs: fix to avoid dirent corruption (Chao Yu)   
  - drm/bridge: Fix typo in post_disable() description (Dario Binacchi)   
  - media: pvrusb2: fix use after free on context disconnection (Ricardo B. Marliere)   
  - RDMA/usnic: Silence uninitialized symbol smatch warnings (Leon Romanovsky)   
  - ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (Eric Dumazet)   
  - Bluetooth: Fix bogus check for re-auth no supported with non-ssp (Luiz Augusto von Dentz)   
  - wifi: rtlwifi: rtl8192se: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: rtl8192ee: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: rtl8192de: using calculate_bit_shift() (Su Hui)   
  - rtlwifi: rtl8192de: make arrays static const, makes object smaller (Colin Ian King)   
  - wifi: rtlwifi: rtl8192ce: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: rtl8192cu: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: rtl8192c: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: add calculate_bit_shift() (Su Hui)   
  - wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior (Su Hui)   
  - rtlwifi: Use ffs in <foo>_phy_calculate_bit_shift (Joe Perches)   
  - firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create() (Christophe JAILLET)   
  - net/ncsi: Fix netlink major/minor version numbers (Peter Delevoryas)   
  - ncsi: internal.h: Fix a spello (Bhaskar Chowdhury)   
  - wifi: libertas: stop selecting wext (Arnd Bergmann)   
  - bpf, lpm: Fix check prefixlen before walking trie (Florian Lehner)   
  - NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT (Trond Myklebust)   
  - crypto: scomp - fix req->dst buffer overflow (Chengming Zhou)   
  - crypto: scompress - Use per-CPU struct instead multiple variables (Sebastian Andrzej Siewior)   
  - crypto: scompress - return proper error code for allocation failure (Sebastian Andrzej Siewior)   
  - crypto: sahara - do not resize req->src when doing hash operations (Ovidiu Panait)   
  - crypto: sahara - fix processing hash requests with req->nbytes < sg->length (Ovidiu Panait)   
  - crypto: sahara - improve error handling in sahara_sha_process() (Ovidiu Panait)   
  - crypto: sahara - fix wait_for_completion_timeout() error handling (Ovidiu Panait)   
  - crypto: sahara - fix ahash reqsize (Ovidiu Panait)   
  - crypto: virtio - Wait for tasklet to complete on device remove (wangyangxin)   
  - pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() (Sergey Shtylyov)   
  - crypto: sahara - fix error handling in sahara_hw_descriptor_create() (Ovidiu Panait)   
  - crypto: sahara - fix processing requests with cryptlen < sg->length (Ovidiu Panait)   
  - crypto: sahara - fix ahash selftest failure (Ovidiu Panait)   
  - crypto: sahara - remove FLAGS_NEW_KEY logic (Ovidiu Panait)   
  - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu)   
  - crypto: ccp - fix memleak in ccp_init_dm_workarea (Dinghao Liu)   
  - crypto: virtio - Handle dataq logic with tasklet (Gonglei (Arei))   
  - mtd: Fix gluebi NULL pointer dereference caused by ftl notifier (ZhaoLong Wang)   
  - calipso: fix memory leak in netlbl_calipso_add_pass() (Gavrilov Ilia)   
  - netlabel: remove unused parameter in netlbl_netlink_auditinfo() (Zheng Yejian)   
  - net: netlabel: Fix kerneldoc warnings (Andrew Lunn)   
  - ACPI: video: check for error while searching for backlight device parent (Nikita Kiryushin)   
  - mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response (Ronald Monthero)   
  - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Kunwu Chan)   
  - powerpc/powernv: Add a null pointer check in opal_event_init() (Kunwu Chan)   
  - selftests/powerpc: Fix error handling in FPU/VMX preemption tests (Michael Ellerman)   
  - powerpc/pseries/memhp: Fix access beyond end of drmem array (Nathan Lynch)   
  - powerpc/pseries/memhotplug: Quieten some DLPAR operations (Laurent Dufour)   
  - powerpc/44x: select I2C for CURRITUCK (Randy Dunlap)   
  - powerpc: remove redundant 'default n' from Kconfig-s (Bartlomiej Zolnierkiewicz)   
  - powerpc: add crtsavres.o to always-y instead of extra-y (Masahiro Yamada)   
  - EDAC/thunderx: Fix possible out-of-bounds string access (Arnd Bergmann)   
  - x86/lib: Fix overflow when counting digits (Colin Ian King)   
  - coresight: etm4x: Fix width of CCITMIN field (James Clark)   
  - uio: Fix use-after-free in uio_open (Guanghui Feng)   
  - binder: fix comment on binder_alloc_new_buf() return value (Carlos Llamas)   
  - drm/crtc: fix uninitialized variable use (Jani Nikula)   
  - Input: xpad - add Razer Wolverine V2 support (Luca Weiss)   
  - ARC: fix spare error (Vineet Gupta)   
  - s390/scm: fix virtual vs physical address confusion (Vineeth Vijayan)   
  - Input: atkbd - skip ATKBD_CMD_GETID in translated mode (Hans de Goede)   
  - reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning (Krzysztof Kozlowski)   
  - ring-buffer: Do not record in NMI if the arch does not support cmpxchg in NMI (Steven Rostedt (Google))   
  - tracing: Add size check when printing trace_marker output (Steven Rostedt (Google))   
  - tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing (Steven Rostedt (Google))   
  - drm/crtc: Fix uninit-value bug in drm_mode_setcrtc (Ziqi Zhao)   
  - jbd2: correct the printing of write_flags in jbd2_write_superblock() (Zhang Yi)   
  - clk: rockchip: rk3128: Fix HCLK_OTG gate register (Weihao Li)   
  - drm/exynos: fix a potential error pointer dereference (Xiang Yang)   
  - ASoC: da7219: Support low DC impedance headset (David Rau)   
  - net/tg3: fix race condition in tg3_reset_task() (Thinh Tran)   
  - ASoC: rt5650: add mutex to avoid the jack detection failure (Shuming Fan)   
  - ASoC: cs43130: Fix incorrect frame delay configuration (Maciej Strozek)   
  - ASoC: cs43130: Fix the position of const qualifier (Maciej Strozek)   
  - f2fs: explicitly null-terminate the xattr list (Eric Biggers)   
  - LTS version: v4.14.337 (Saeed Mirzamohammadi)   
  - ipv6: remove max_size check inline with ipv4 (Saeed Mirzamohammadi)   
  - ipv6: make ip6_rt_gc_expire an atomic_t (Saeed Mirzamohammadi)   
  - net/dst: use a smaller percpu_counter batch for dst entries accounting (Eric Dumazet)   
  - net: add a route cache full diagnostic message (Peter Oskolkov)   
  - netfilter: nf_tables: Reject tables of unsupported family (Phil Sutter) [Orabug: 36192153] {CVE-2023-6040}
  - fuse: nlookup missing decrement in fuse_direntplus_link (ruanmeisi)   
  - mm: fix unmap_mapping_range high bits shift bug (Jiajun Xie)   
  - mm/memory-failure: check the mapcount of the precise page (Matthew Wilcox (Oracle))   
  - bnxt_en: Remove mis-applied code from bnxt_cfg_ntp_filters() (Michael Chan)   
  - asix: Add check for usbnet_get_endpoints (Chen Ni)   
  - net/qla3xxx: fix potential memleak in ql_alloc_buffer_queues (Dinghao Liu)   
  - net/qla3xxx: switch from 'pci_' to 'dma_' API (Christophe JAILLET)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.535.2.1.el7uek]
changelog:
  - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal)  [Orabug: 36467681]  {CVE-2024-1086}


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.536.2.el7uek]
changelog:
  - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal)  [Orabug: 36466544]  {CVE-2024-1086} 
  - RDMA/cm: add timeout to cm_destroy_id wait (Manjunath Patil)  [Orabug: 36280065]  
  - mm: avoid heavy swap lock contention when unmapping with ktask (Anthony Yznaga)  [Orabug: 36201622]  
  - mm: use less threads when unmapping some large VMAs (Anthony Yznaga)  [Orabug: 36201622]  
  - LTS version: v4.14.341 (Yifei Liu)   
  - gpio: 74x164: Enable output pins after registers are reset (Arturas Moskvinas)   
  - cachefiles: fix memory leak in cachefiles_add_cache() (Baokun Li)   
  - mmc: core: Fix eMMC initialization with 1-bit bus connection (Ivan Semenov)   
  - btrfs: dev-replace: properly validate device names (David Sterba)   
  - wifi: nl80211: reject iftype change with mesh ID change (Johannes Berg)   
  - gtp: fix use-after-free and null-ptr-deref in gtp_newlink() (Alexander Ofitserov)   
  - ALSA: Drop leftover snd-rtctimer stuff from Makefile (Takashi Iwai)   
  - power: supply: bq27xxx-i2c: Do not free non existing IRQ (Hans de Goede)   
  - efi/capsule-loader: fix incorrect allocation size (Arnd Bergmann)   
  - Bluetooth: Enforce validation on max value of connection interval (Kai-Heng Feng)   
  - Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST (Luiz Augusto von Dentz)   
  - Bluetooth: Avoid potential use-after-free in hci_error_reset (Ying Hsu)   
  - net: usb: dm9601: fix wrong return value in dm9601_mdio_read (Javier Carrasco)   
  - lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected (Oleksij Rempel)   
  - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter (Ryosuke Yasuoka)   
  - LTS version: v4.14.340 (Yifei Liu)   
  - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio (Bart Van Assche)   
  - KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table() (Oliver Upton)   
  - PCI/MSI: Prevent MSI hardware interrupt number truncation (Vidya Sagar)   
  - s390: use the correct count for __iowrite64_copy() (Jason Gunthorpe)   
  - packet: move from strlcpy with unused retval to strscpy (Wolfram Sang)   
  - ipv6: sr: fix possible use-after-free and null-ptr-deref (Vasiliy Kovalev)   
  - nouveau: fix function cast warnings (Arnd Bergmann)   
  - scsi: jazz_esp: Only build if SCSI core is builtin (Randy Dunlap)   
  - RDMA/srpt: fix function pointer cast warnings (Arnd Bergmann)   
  - RDMA/srpt: Support specifying the srpt_service_guid parameter (Bart Van Assche)   
  - IB/hfi1: Fix a memleak in init_credit_return (Zhipeng Lu)   
  - usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs (Krishna Kurapati)   
  - l2tp: pass correct message length to ip6_append_data (Tom Parkin)   
  - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() (Vasiliy Kovalev)   
  - dm-crypt: don't modify the data when using authenticated encryption (Mikulas Patocka)   
  - mm: memcontrol: switch to rcu protection in drain_all_stock() (Roman Gushchin)   
  - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Alexandra Winter)   
  - virtio-blk: Ensure no requests in virtqueues before deleting vqs. (Yi Sun)   
  - firewire: core: send bus reset promptly on gap count error (Takashi Sakamoto)   
  - hwmon: (coretemp) Enlarge per package core count limit (Zhang Rui)   
  - regulator: pwm-regulator: Add validity checks in continuous .get_voltage (Martin Blumenstingl)   
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Baokun Li)   
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Baokun Li)   
  - ahci: asm1166: correct count of reported ports (Conrad Kostecki)   
  - fbdev: sis: Error out if pixclock equals zero (Fullway Wang)   
  - fbdev: savage: Error out if pixclock equals zero (Fullway Wang)   
  - wifi: mac80211: fix race condition on enabling fast-xmit (Felix Fietkau)   
  - wifi: cfg80211: fix missing interfaces when dumping (Michal Kazior)   
  - dmaengine: shdma: increase size of 'dev_id' (Vinod Koul)   
  - scsi: target: core: Add TMF to tmr_list handling (Dmitry Bogdanov)   
  - sched/rt: Disallow writing invalid values to sched_rt_period_us (Cyril Hrubis)   
  - sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset (Cyril Hrubis)   
  - sched/rt: Fix sysctl_sched_rr_timeslice intial value (Cyril Hrubis)   
  - nilfs2: replace WARN_ONs for invalid DAT metadata block requests (Ryusuke Konishi)   
  - memcg: add refcnt for pcpu stock to avoid UAF problem in drain_all_stock() (GONG, Ruiqi)   
  - net/sched: Retire dsmark qdisc (Jamal Hadi Salim)   
  - net/sched: Retire ATM qdisc (Jamal Hadi Salim)   
  - net/sched: Retire CBQ qdisc (Jamal Hadi Salim)   
  - LTS version: v4.14.339 (Yifei Liu)   
  - PCI: Only override AMD USB controller if required (Guilherme G. Piccoli)   
  - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() (Dan Carpenter)   
  - lsm: new security_file_ioctl_compat() hook (Alfred Piccioni)   
  - nilfs2: fix potential bug in end_buffer_async_write (Ryusuke Konishi)   
  - sched/membarrier: reduce the ability to hammer on sys_membarrier (Linus Torvalds)   
  - Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d" (Junxiao Bi)   
  - pmdomain: core: Move the unused cleanup to a _sync initcall (Konrad Dybcio)   
  - irqchip/irq-brcmstb-l2: Add write memory barrier before exit (Doug Berger)   
  - nfp: use correct macro for LengthSelect in BAR config (Daniel Basilio)   
  - nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() (Ryusuke Konishi)   
  - nilfs2: fix data corruption in dsync block recovery for small block sizes (Ryusuke Konishi)   
  - ALSA: hda/conexant: Add quirk for SWS JS201D (bo liu)   
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Steve Wahl)   
  - staging: iio: ad5933: fix type mismatch regression (David Schiller)   
  - ext4: fix double-free of blocks due to wrong extents moved_len (Baokun Li)   
  - nfc: nci: free rx_data_reassembly skb on NCI device cleanup (Fedor Pchelkin)   
  - firewire: core: correct documentation of fw_csr_string() kernel API (Takashi Sakamoto)   
  - scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock" (Lee Duncan)   
  - usb: f_mass_storage: forbid async queue when shutdown happen (yuan linyu)   
  - USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT (Oliver Neukum)   
  - HID: wacom: Do not register input devices until after hid_hw_start (Jason Gerecke)   
  - HID: wacom: generic: Avoid reporting a serial of '0' to userspace (Tatsunosuke Tobita)   
  - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Zach O'Keefe)   
  - tracing/trigger: Fix to return error if failed to alloc snapshot (Masami Hiramatsu (Google))   
  - i40e: Fix waiting for queues of all VSIs to be disabled (Ivan Vecera)   
  - MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler (Guenter Roeck)   
  - net: sysfs: Fix /sys/class/net/<iface> path for statistics (Breno Leitao)   
  - Documentation: net-sysfs: describe missing statistics (Julian Wiedmann)   
  - ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work() (Alexey Khoroshilov)   
  - spi: ppc4xx: Drop write-only variable (Uwe Kleine-König)   
  - btrfs: send: return EOPNOTSUPP on unknown flags (David Sterba)   
  - vhost: use kzalloc() instead of kmalloc() followed by memset() (Prathu Baronia)   
  - Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID (Hans de Goede)   
  - USB: serial: cp210x: add ID for IMST iM871A-USB (Leonard Dallmayr)   
  - USB: serial: option: add Fibocom FM101-GL variant (Puliang Lu)   
  - USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e (JackBB Wu)   
  - net/af_iucv: clean up a try_then_request_module() (Julian Wiedmann)   
  - netfilter: nft_compat: restrict match/target protocol to u16 (Pablo Neira Ayuso)   
  - netfilter: nft_compat: reject unused compat flag (Pablo Neira Ayuso)   
  - ppp_async: limit MRU to 64K (Eric Dumazet)   
  - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (Shigeru Yoshida)   
  - rxrpc: Fix response to PING RESPONSE ACKs to a dead call (David Howells)   
  - inet: read sk->sk_family once in inet_recv_error() (Eric Dumazet)   
  - hwmon: (aspeed-pwm-tacho) mutex for tach reading (Loic Prylli)   
  - atm: idt77252: fix a memleak in open_card_ubr0 (Zhipeng Lu)   
  - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Tony Lindgren)   
  - dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV (Frank Li)   
  - bonding: remove print in bond_verify_device_path (Zhengchao Shao)   
  - HID: apple: Add 2021 magic keyboard FN key mapping (Benjamin Berg)   
  - HID: apple: Add support for the 2021 Magic Keyboard (Alex Henrie)   
  - HID: apple: Swap the Fn and Left Control keys on Apple keyboards (free5lot)   
  - net: sysfs: Fix /sys/class/net/<iface> path (Breno Leitao)   
  - af_unix: fix lockdep positive in sk_diag_dump_icons() (Eric Dumazet)   
  - net: ipv4: fix a memleak in ip_setup_cork (Zhipeng Lu)   
  - net: Fix one possible memleak in ip_setup_cork (Gao Feng)   
  - netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger (Pablo Neira Ayuso)   
  - llc: call sock_orphan() at release time (Eric Dumazet)   
  - ipv6: Ensure natural alignment of const ipv6 loopback and router addresses (Helge Deller)   
  - ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550() (Christophe JAILLET)   
  - ixgbe: Refactor overtemp event handling (Jedrzej Jagielski)   
  - ixgbe: Remove non-inclusive language (Piotr Skajewski)   
  - net: remove unneeded break (Tom Rix)   
  - scsi: isci: Fix an error code problem in isci_io_request_build() (Su Hui)   
  - wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update (Edward Adam Davis)   
  - drm/amdgpu: Release 'adev->pm.fw' before return in 'amdgpu_device_need_post()' (Srinivasan Shanmugam)   
  - ceph: fix deadlock or deadcode of misusing dget() (Xiubo Li)   
  - virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings (Zhu Yanjun)   
  - libsubcmd: Fix memory leak in uniq() (Ian Rogers)   
  - usb: hub: Replace hardcoded quirk value with BIT() macro (Hardik Gajjar)   
  - mfd: ti_am335x_tscadc: Fix TI SoC dependencies (Peter Robinson)   
  - um: net: Fix return type of uml_net_start_xmit() (Nathan Chancellor)   
  - um: Don't use vfprintf() for os_info() (Benjamin Berg)   
  - um: Fix naming clash between UML and scheduler (Anton Ivanov)   
  - leds: trigger: panic: Don't register panic notifier if creating the trigger failed (Heiner Kallweit)   
  - clk: mmp: pxa168: Fix memory leak in pxa168_clk_init() (Kuan-Wei Chiu)   
  - clk: hi3620: Fix memory leak in hi3620_mmc_clk_init() (Kuan-Wei Chiu)   
  - media: ddbridge: fix an error code problem in ddb_probe (Su Hui)   
  - IB/ipoib: Fix mcast list locking (Daniel Vacek)   
  - drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time (Douglas Anderson)   
  - ALSA: hda: Intel: add HDA_ARL PCI ID support (Pierre-Louis Bossart)   
  - ALSA: hda: Add Icelake PCI ID (Guneshwor Singh)   
  - PCI: add INTEL_HDA_ARL to pci_ids.h (Pierre-Louis Bossart)   
  - media: stk1160: Fixed high volume of stk1160_dbg messages (Ghanshyam Agrawal)   
  - drm/mipi-dsi: Fix detach call without attach (Tomi Valkeinen)   
  - drm/framebuffer: Fix use of uninitialized variable (Tomi Valkeinen)   
  - drm/drm_file: fix use of uninitialized variable (Tomi Valkeinen)   
  - RDMA/IPoIB: Fix error code return in ipoib_mcast_join (Jack Wang)   
  - fast_dput(): handle underflows gracefully (Al Viro)   
  - ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument (Cristian Ciocaltea)   
  - wifi: cfg80211: free beacon_ies when overridden from hidden BSS (Benjamin Berg)   
  - wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift() (Su Hui)   
  - wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices (Zenm Chen)   
  - md: Whenassemble the array, consult the superblock of the freshest device (Alex Lyakas)   
  - ARM: dts: imx23/28: Fix the DMA controller node name (Fabio Estevam)   
  - ARM: dts: imx23-sansa: Use preferred i2c-gpios properties (Fabio Estevam)   
  - ARM: dts: imx27-apf27dev: Fix LED name (Fabio Estevam)   
  - ARM: dts: imx1: Fix sram node (Fabio Estevam)   
  - ARM: dts: imx27: Fix sram node (Fabio Estevam)   
  - ARM: dts: imx: Use flash@0,0 pattern (Fabio Estevam)   
  - ARM: dts: imx25/27-eukrea: Fix RTC node name (Fabio Estevam)   
  - ARM: dts: rockchip: fix rk3036 hdmi ports node (Johan Jonker)   
  - scsi: libfc: Fix up timeout error in fc_fcp_rec_error() (Hannes Reinecke)   
  - scsi: libfc: Don't schedule abort twice (Hannes Reinecke)   
  - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Hou Tao)   
  - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Minsuk Kang)   
  - ARM: dts: imx7s: Fix nand-controller #size-cells (Alexander Stein)   
  - ARM: dts: imx7s: Fix lcdif compatible (Alexander Stein)   
  - bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk (Zhengchao Shao)   
  - PCI: Add no PM reset quirk for NVIDIA Spectrum devices (Ido Schimmel)   
  - scsi: lpfc: Fix possible file string name overflow when updating firmware (Justin Tee)   
  - ext4: unify the type of flexbg_size to unsigned int (Baokun Li)   
  - SUNRPC: Fix a suspicious RCU usage warning (Anna Schumaker)   
  - KVM: s390: fix setting of fpc register (Heiko Carstens)   
  - s390/ptrace: handle setting of fpc register correctly (Heiko Carstens)   
  - jfs: fix array-index-out-of-bounds in diNewExt (Edward Adam Davis)   
  - rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock() (Oleg Nesterov)   
  - pstore/ram: Fix crash when setting number of cpus to an odd number (Weichen Chen)   
  - jfs: fix uaf in jfs_evict_inode (Edward Adam Davis)   
  - jfs: fix array-index-out-of-bounds in dbAdjTree (Manas Ghandat)   
  - jfs: fix slab-out-of-bounds Read in dtSearch (Manas Ghandat)   
  - UBSAN: array-index-out-of-bounds in dtSplitRoot (Osama Muhammad)   
  - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree (Osama Muhammad)   
  - ACPI: extlog: fix NULL pointer dereference check (Prarit Bhargava)   
  - PNP: ACPI: fix fortify warning (Dmitry Antipov)   
  - ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop (Yuluo Qiu)   
  - audit: Send netlink ACK before setting connection in auditd_set (Chris Riches)   
  - powerpc/lib: Validate size for vector operations (Naveen N Rao)   
  - powerpc/mm: Fix build failures due to arch_reserved_kernel_pages() (Michael Ellerman)   
  - powerpc: Fix build error due to is_valid_bugaddr() (Michael Ellerman)   
  - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Kunwu Chan)   
  - tick/sched: Preserve number of idle sleeps across CPU hotplug events (Tim Chen)   
  - mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan (Xi Ruoyao)   
  - drm/bridge: nxp-ptn3460: simplify some error checking (Dan Carpenter)   
  - drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking (Dan Carpenter)   
  - drm: Don't unref the same fb many times by mistake due to deadlock handling (Ville Syrjälä)   
  - gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04 (Mario Limonciello)   
  - btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args (Qu Wenruo)   
  - btrfs: don't warn if discard range is not aligned to sector (David Sterba)   
  - net: fec: fix the unhandled context fault from smmu (Shenwei Wang)   
  - fjes: fix memleaks in fjes_hw_setup (Zhipeng Lu)   
  - netfilter: nf_tables: restrict anonymous set and map names to 16 bytes (Florian Westphal)   
  - net/mlx5e: fix a double-free in arfs_create_groups (Zhipeng Lu)   
  - net/mlx5: Use kfree(ft->g) in arfs_create_groups() (Denis Efremov)   
  - netlink: fix potential sleeping issue in mqueue_flush_file (Zhengchao Shao)   
  - tcp: Add memory barrier to tcp_push() (Salvatore Dipietro)   
  - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv (Sharath Srinivasan)   
  - llc: Drop support for ETH_P_TR_802_2. (Kuniyuki Iwashima)   
  - llc: make llc_ui_sendmsg() more robust against bonding changes (Eric Dumazet)   
  - vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING (Lin Ma)   
  - drivers: core: fix kernel-doc markup for dev_err_probe() (Mauro Carvalho Chehab)   
  - driver code: print symbolic error code (Michał Mirosław)   
  - Revert "driver core: Annotate dev_err_probe() with __must_check" (Greg Kroah-Hartman)   
  - driver core: Annotate dev_err_probe() with __must_check (Andy Shevchenko)   
  - x86/CPU/AMD: Fix disabling XSAVES on AMD family 0x17 due to erratum (Maciej S. Szmigiero)   
  - powerpc: Use always instead of always-y in for crtsavres.o (Nathan Chancellor)   
  - block: Remove special-casing of compound pages (Matthew Wilcox (Oracle))   
  - parisc/firmware: Fix F-extend for PDC addresses (Helge Deller)   
  - rpmsg: virtio: Free driver_override when rpmsg_remove() (Xiaolei Wang)   
  - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Herbert Xu)   
  - PM: hibernate: Enforce ordering during image compression/decompression (Hongchen Zhang)   
  - crypto: api - Disallow identical driver names (Herbert Xu)   
  - serial: sc16is7xx: add check for unsupported SPI modes during probe (Hugo Villeneuve)   
  - spi: introduce SPI_MODE_X_MASK macro (Oleksij Rempel)   
  - driver core: add device probe log helper (Andrzej Hajda)   
  - serial: sc16is7xx: set safe default SPI clock frequency (Hugo Villeneuve)   
  - units: add the HZ macros (Daniel Lezcano)   
  - units: change from 'L' to 'UL' (Daniel Lezcano)   
  - units: Add Watt units (Daniel Lezcano)   
  - include/linux/units.h: add helpers for kelvin to/from Celsius conversion (Akinobu Mita)   
  - PCI: mediatek: Clear interrupt status before dispatching handler (qizhong cheng)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.536.3.el7uek]
changelog:
  - Revert "net/sched: Retire CBQ qdisc" (Saeed Mirzamohammadi)   
  - Revert "net/sched: Retire ATM qdisc" (Saeed Mirzamohammadi)   
  - Revert "net/sched: Retire dsmark qdisc" (Saeed Mirzamohammadi)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.536.4.el7uek]
changelog:
  - rds/rdma: print connection up/down time while dropping/connecting (Juan Garcia)  [Orabug: 36264661]  
  - bonding: rate-limit bonding driver inspect messages (Praveen Kumar Kannoju)  [Orabug: 36223525]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.536.5.el7uek]
changelog:
  - mmc: core: Fix switch on gp3 partition (Dominique Martinet)   
  - Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"" (Song Liu)   
  - mm/memory-failure: fix an incorrect use of tail pages (Liu Shixin)   
  - Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped." (Ingo Molnar)   
  - sched/fair: More accurate reweight_entity() (Peter Zijlstra)  [Orabug: 36468903]  
  - sched/fair: Introduce {en,de}queue_load_avg() (Peter Zijlstra)  [Orabug: 36468903]  
  - sched/fair: Rename {en,de}queue_entity_load_avg() (Peter Zijlstra)  [Orabug: 36468903]  
  - sched/fair: Move enqueue migrate handling (Peter Zijlstra)  [Orabug: 36468903]  
  - sched/fair: Change update_load_avg() arguments (Peter Zijlstra)  [Orabug: 36468903]  
  - sched/fair: Remove se->load.weight from se->avg.load_sum (Peter Zijlstra)  [Orabug: 36468903]  
  - sched/fair: Cure calc_cfs_shares() vs. reweight_entity() (Peter Zijlstra)  [Orabug: 36468903]  
  - sched/fair: Add comment to calc_cfs_shares() (Peter Zijlstra)  [Orabug: 36468903]  
  - sched/fair: Clean up calc_cfs_shares() (Peter Zijlstra)  [Orabug: 36468903]  
  - rds/rdma: Fix congestion value for userspace consumption (Juan Garcia)  [Orabug: 36264644]  
  - rds: Include transport protocol name in rds-info -k output (Juan Garcia)  [Orabug: 36264644]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.537.1.el7uek]
changelog:
  - igb: free up irq resources in device shutdown path. (Imran Khan)  [Orabug: 36547251]  
  - RDMA/cm: Print the old state when cm_destroy_id gets timeout (Mark Zhang)  [Orabug: 36546697]  
  - exec, elf: ignore malformed note segments (Anthony Yznaga)  [Orabug: 36524978]  
  - LTS version: v4.14.343 (Yifei Liu)   
  - crypto: af_alg - Work around empty control messages without MSG_MORE (Herbert Xu)   
  - crypto: af_alg - Fix regression on empty requests (Herbert Xu)   
  - spi: spi-mt65xx: Fix NULL pointer access in interrupt handler (Fei Shao)   
  - net/bnx2x: Prevent access to a freed page in page_pool (Thinh Tran)   
  - hsr: Handle failures in module init (Felix Maurer)   
  - rds: introduce acquire/release ordering in acquire/release_in_xmit() (Yewon Choi)   
  - hsr: Fix uninit-value access in hsr_get_node() (Shigeru Yoshida)   
  - net: hsr: fix placement of logical operator in a multi-line statement (Murali Karicheri)   
  - usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin (Colin Ian King)   
  - staging: greybus: fix get_channel_from_mode() failure path (Dan Carpenter)   
  - serial: 8250_exar: Don't remove GPIO device on suspend (Andy Shevchenko)   
  - rtc: mt6397: select IRQ_DOMAIN instead of depending on it (Randy Dunlap)   
  - rtc: mediatek: enhance the description for MediaTek PMIC based RTC (Sean Wang)   
  - tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT (Tudor Ambarus)   
  - serial: max310x: fix syntax error in IRQ error message (Hugo Villeneuve)   
  - clk: qcom: gdsc: Add support to update GDSC transition delay (Taniya Das)   
  - NFS: Fix an off by one in root_nfs_cat() (Christophe JAILLET)   
  - net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr() (Christophe JAILLET)   
  - scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn (Arnd Bergmann)   
  - scsi: csiostor: Avoid function pointer casts (Arnd Bergmann)   
  - ALSA: usb-audio: Stop parsing channels bits when all channels are found. (Johan Carlsson)   
  - sparc32: Fix section mismatch in leon_pci_grpci (Sam Ravnborg)   
  - backlight: lp8788: Fully initialize backlight_properties during probe (Daniel Thompson)   
  - backlight: lm3639: Fully initialize backlight_properties during probe (Daniel Thompson)   
  - backlight: da9052: Fully initialize backlight_properties during probe (Daniel Thompson)   
  - backlight: lm3630a: Don't set bl->props.brightness in get_brightness (Luca Weiss)   
  - backlight: lm3630a: Initialize backlight_properties on init (Luca Weiss)   
  - powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc. (Michael Ellerman)   
  - powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks (Kajol Jain)   
  - drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip (Hsin-Yi Wang)   
  - media: go7007: fix a memleak in go7007_load_encoder (Zhipeng Lu)   
  - media: dvb-frontends: avoid stack overflow warnings with clang (Arnd Bergmann)   
  - media: pvrusb2: fix uaf in pvr2_context_set_notify (Edward Adam Davis)   
  - drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int() (Srinivasan Shanmugam)   
  - mtd: rawnand: lpc32xx_mlc: fix irq handler prototype (Arnd Bergmann)   
  - crypto: arm/sha - fix function cast warnings (Arnd Bergmann)   
  - crypto: arm - Rename functions to avoid conflict with crypto/sha256.h (Hans de Goede)   
  - mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref (Peter Griffin)   
  - drm/tegra: put drm_gem_object ref on error in tegra_fb_create (Fedor Pchelkin)   
  - clk: hisilicon: hi3519: Release the correct number of gates in hi3519_clk_unregister() (Christophe JAILLET)   
  - PCI: Mark 3ware-9650SE Root Port Extended Tags as broken (Jörg Wedekind)   
  - drm/mediatek: dsi: Fix DSI RGB666 formats and definitions (AngeloGioacchino Del Regno)   
  - media: pvrusb2: fix pvr2_stream_callback casts (Arnd Bergmann)   
  - media: go7007: add check of return value of go7007_read_addr() (Daniil Dulov)   
  - ALSA: seq: fix function cast warnings (Takashi Iwai)   
  - drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode() (Nikita Zhandarovich)   
  - perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str() (Yang Jihong)   
  - quota: Fix rcu annotations of inode dquot pointers (Jan Kara)   
  - quota: Fix potential NULL pointer dereference (Wang Jianjian)   
  - quota: simplify drop_dquot_ref() (Baokun Li)   
  - quota: check time limit when back out space/inode change (Chengguang Xu)   
  - fs/quota: erase unused but set variable warning (Jiang Biao)   
  - quota: code cleanup for __dquot_alloc_space() (Chengguang Xu)   
  - clk: qcom: reset: Ensure write completion on reset de/assertion (Konrad Dybcio)   
  - clk: qcom: reset: Commonize the de/assert functions (Konrad Dybcio)   
  - clk: qcom: reset: support resetting multiple bits (Robert Marko)   
  - clk: qcom: reset: Allow specifying custom reset delay (Stephan Gerhold)   
  - media: edia: dvbdev: fix a use-after-free (Zhipeng Lu)   
  - media: dvb-core: Fix use-after-free due to race at dvb_register_device() (Hyunwoo Kim)   
  - media: dvbdev: convert DVB device types into an enum (Mauro Carvalho Chehab)   
  - media: dvbdev: fix error logic at dvb_register_device() (Mauro Carvalho Chehab)   
  - media: dvbdev: Fix memleak in dvb_register_device (Dinghao Liu)   
  - media: media/dvb: Use kmemdup rather than duplicating its implementation (Fuqian Huang)   
  - media: dvbdev: remove double-unlock (Mauro Carvalho Chehab)   
  - media: v4l2-tpg: fix some memleaks in tpg_alloc (Zhipeng Lu)   
  - media: em28xx: annotate unchecked call to media_device_register() (Nikita Zhandarovich)   
  - media: tc358743: register v4l2 async device only after successful setup (Alexander Stein)   
  - drm: Don't treat 0 as -1 in drm_fixp2int_ceil (Harry Wentland)   
  - drm/rockchip: inno_hdmi: Fix video timing (Alex Bee)   
  - drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path of tegra_dsi_probe() (Christophe JAILLET)   
  - drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe() (Christophe JAILLET)   
  - drm/tegra: dsi: Make use of the helper function dev_err_probe() (Cai Huoqing)   
  - gpu: host1x: mipi: Update tegra_mipi_request() to be node based (Sowjanya Komatineni)   
  - drm/tegra: dsi: Add missing check for of_find_device_by_node (Chen Ni)   
  - dm: call the resume method on internal suspend (Mikulas Patocka)   
  - dm raid: fix false positive for requeue needed during reshape (Ming Lei)   
  - net/x25: fix incorrect parameter validation in the x25_getsockopt() function (Gavrilov Ilia)   
  - net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function (Gavrilov Ilia)   
  - udp: fix incorrect parameter validation in the udp_lib_getsockopt() function (Gavrilov Ilia)   
  - l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function (Gavrilov Ilia)   
  - tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function (Gavrilov Ilia)   
  - ipv6: fib6_rules: flush route cache when rule is changed (Shiming Cheng)   
  - bpf: Fix stackmap overflow check on 32-bit arches (Toke Høiland-Jørgensen)   
  - bpf: Fix hashtab overflow check on 32-bit arches (Toke Høiland-Jørgensen)   
  - sr9800: Add check for usbnet_get_endpoints (Chen Ni)   
  - Bluetooth: hci_core: Fix possible buffer overflow (Luiz Augusto von Dentz)   
  - Bluetooth: Remove superfluous call to hci_conn_check_pending() (Jonas Dreßler)   
  - igb: Fix missing time sync events (Vinicius Costa Gomes)   
  - igb: move PEROUT and EXTTS isr logic to separate functions (Ruud Bos)   
  - mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove function (Christophe JAILLET)   
  - SUNRPC: fix some memleaks in gssx_dec_option_array (Zhipeng Lu)   
  - x86, relocs: Ignore relocations in .notes section (Kees Cook)   
  - ACPI: scan: Fix device check notification handling (Rafael J. Wysocki)   
  - ARM: dts: arm: realview: Fix development chip ROM compatible value (Geert Uytterhoeven)   
  - wifi: brcmsmac: avoid function pointer casts (Arnd Bergmann)   
  - iommu/amd: Mark interrupt as managed (Mario Limonciello)   
  - bus: tegra-aconnect: Update dependency to ARCH_TEGRA (Peter Robinson)   
  - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Armin Wolf)   
  - wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() (Zhipeng Lu)   
  - af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc(). (Kuniyuki Iwashima)   
  - sock_diag: annotate data-races around sock_diag_handlers[family] (Eric Dumazet)   
  - sock_diag: request _diag module only when the family or proto has been registered (Xin Long)   
  - wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir() (Jinjie Ruan)   
  - wifi: b43: Disable QoS for bcm4331 (Rahul Rameshbabu)   
  - wifi: b43: Stop correct queue in DMA worker when QoS is disabled (Rahul Rameshbabu)   
  - b43: main: Fix use true/false for bool type (Saurav Girepunje)   
  - wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled (Rahul Rameshbabu)   
  - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled (Rahul Rameshbabu)   
  - b43: dma: Fix use true/false for bool type variable (Saurav Girepunje)   
  - timekeeping: Fix cross-timestamp interpolation for non-x86 (Peter Hilber)   
  - timekeeping: Fix cross-timestamp interpolation corner case decision (Peter Hilber)   
  - timekeeping: Fix cross-timestamp interpolation on counter wrap (Peter Hilber)   
  - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts (Chun-Yi Lee)   
  - md: Don't clear MD_CLOSING when the raid is about to stop (Li Nan)   
  - md: implement ->set_read_only to hook into BLKROSET processing (Christoph Hellwig)   
  - block: add a new set_read_only method (Christoph Hellwig)   
  - md: switch to ->check_events for media change notifications (Christoph Hellwig)   
  - fs/select: rework stack allocation hack for clang (Arnd Bergmann)   
  - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Nikita Zhandarovich)   
  - crypto: algif_aead - Only wake up when ctx->more is zero (Herbert Xu)   
  - crypto: af_alg - make some functions static (Eric Biggers)   
  - ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll (Stuart Henderson)   
  - ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode (Stuart Henderson)   
  - ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC (Stuart Henderson)   
  - Input: gpio_keys_polled - suppress deferred probe error for gpio (Uwe Kleine-König)   
  - firewire: core: use long bus reset on gap count error (Takashi Sakamoto)   
  - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security (Yuxuan Hu)   
  - scsi: mpt3sas: Prevent sending diag_reset when the controller is ready (Ranjan Kumar)   
  - dm-verity, dm-crypt: align "struct bvec_iter" correctly (Mikulas Patocka)   
  - block: sed-opal: handle empty atoms when parsing response (Greg Joyce)   
  - net/iucv: fix the allocation size of iucv_path_table array (Alexander Gordeev)   
  - MIPS: Clear Cause.BD in instruction_pointer_set (Jiaxun Yang)   
  - x86/xen: Add some null pointer checking to smp.c (Kunwu Chan)   
  - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Xiu Jianfeng)   
  - xen/events: only register debug interrupt for 2-level events (Juergen Gross)   
  - LTS version: v4.14.342 (Yifei Liu)   
  - selftests/vm: fix map_hugetlb length used for testing read and write (Christophe Leroy)   
  - selftests/vm: fix display of page size in map_hugetlb (Christophe Leroy)   
  - getrusage: use sig->stats_lock rather than lock_task_sighand() (Oleg Nesterov)   
  - getrusage: use __for_each_thread() (Oleg Nesterov)   
  - getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Oleg Nesterov)   
  - getrusage: add the "signal_struct *sig" local variable (Oleg Nesterov)   
  - hv_netvsc: use netif_is_bond_master() instead of open code (Juhee Kang)   
  - um: allow not setting extra rpaths in the linux binary (Johannes Berg)   
  - selftests: mm: fix map_hugetlb failure on 64K page size systems (Nico Pache)   
  - tools/selftest/vm: allow choosing mem size and page size in map_hugetlb (Christophe Leroy)   
  - netrom: Fix data-races around sysctl_net_busy_read (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_link_fails_count (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_routing_control (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_busy_delay (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_timeout (Jason Xing)   
  - netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_default_path_quality (Jason Xing)   
  - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Lena Wang)   
  - netfilter: nf_ct_h323: Extend nf_h323_error_boundary to work on bits as well (Eric Sesterhenn)   
  - netfilter: nf_ct_h323: Convert CHECK_BOUND macro to function (Eric Sesterhenn)   
  - netfilter: nf_ct_h323: Out Of Bound Read in Netfilter Conntrack (Eric Sesterhenn)   
  - netfilter: nf_conntrack_h323: Remove typedef struct (Harsha Sharma)   
  - geneve: make sure to pull inner header in geneve_rx() (Eric Dumazet)   
  - net: move definition of pcpu_lstats to header file (Li RongQing)   
  - net: lan78xx: fix runtime PM count underflow on link stop (Oleksij Rempel)   
  - lan78xx: Fix race conditions in suspend/resume handling (John Efstathiades)   
  - lan78xx: Fix partial packet errors on suspend/resume (John Efstathiades)   
  - lan78xx: Add missing return code checks (John Efstathiades)   
  - lan78xx: Fix white space and style issues (John Efstathiades)   
  - net: usb: lan78xx: Remove lots of set but unused 'ret' variables (Lee Jones)   
  - net: usb: lan78xx: Disable interrupts before calling generic_handle_irq() (Daniel Wagner)   
  - net: lan78xx: Allow for VLAN headers in timeout calcs (Dave Stevenson)   
  - ip: validate header length on virtual device xmit (Willem de Bruijn)


author: Yifei Liu <yifei.l.liu@oracle.com> [4.14.35-2047.537.3.el7uek]
changelog:
  - ahci: asm1064: asm1166: don't limit reported ports (Conrad Kostecki)   
  - ahci: asm1064: correct count of reported ports (Andrey Jr. Melnikov)   
  - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion (Bart Van Assche)   
  - igb: fix __free_irq warnings seen during module unload. (Imran Khan)  [Orabug: 36618479]  
  - mm: fix misleading-indentation build warning (Anthony Yznaga)  [Orabug: 36612276]  
  - uek: kabi: Enable the size checks and fix broken APIs (Saeed Mirzamohammadi)  [Orabug: 36545474]  
  - uek: kabi: Introduce new APIs to check for size (Saeed Mirzamohammadi)  [Orabug: 36545474]  
  - cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock (Tejun Heo)  [Orabug: 36480026]  
  - uek-rpm: ol7: fix prod build with editbuildid (Stephen Brennan)  [Orabug: 35099077]  
  - uek-rpm: ol7: Prevent vmlinux build ID mismatch (Stephen Brennan)  [Orabug: 35099077]  
  - uek-rpm: ol7: Remove fancy_debuginfo (Stephen Brennan)  [Orabug: 35099077]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.537.4.el7uek]
changelog:
  - uek-rpm: iptables/nftables TABLE_ADD failed (Operation not supported) (Venkat Venkatsubra)  [Orabug: 36638482]  
  - Revert "crypto: api - Disallow identical driver names" (Greg Kroah-Hartman)   
  - Revert "tracing/trigger: Fix to return error if failed to alloc snapshot" (Siddh Raman Pant)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.538.1.el7uek]
changelog:
  - uek-rpm: Enable FUNCTION_GRAPH_RETVAL in UEK5 (Jianfeng Wang)  [Orabug: 36460666]  
  - fgraph: Add declaration of "struct fgraph_ret_regs" (Steven Rostedt (Google))  [Orabug: 36460666]  
  - x86/ftrace: Enable HAVE_FUNCTION_GRAPH_RETVAL (Donglin Peng)  [Orabug: 36460666]  
  - arm64: ftrace: Enable HAVE_FUNCTION_GRAPH_RETVAL (Donglin Peng)  [Orabug: 36460666]  
  - arm64: ftrace: remove return_regs macros (Mark Rutland)  [Orabug: 36460666]  
  - function_graph: Support recording and printing the return value of function (Donglin Peng)  [Orabug: 36460666]  
  - fgraph: Make overruns 4 bytes in graph stack structure (Steven Rostedt (VMware))  [Orabug: 36460666]  
  - net/rds: Get RDS statistics for each possible CPU (Anand Khoje)  [Orabug: 35830450]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.538.2.el7uek]
changelog:
  - slub: use count_partial_free_approx() in slab_out_of_memory() (Jianfeng Wang)  [Orabug: 36655470]  
  - slub: introduce count_partial_free_approx() (Jianfeng Wang)  [Orabug: 36655470]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.538.3.el7uek]
changelog:
  - uek-rpm: disable --strict-build-id on mips64 (Stephen Brennan)  [Orabug: 36717400]  
  - LTS version: v4.14.348 (Yifei Liu)   
  - docs: kernel_include.py: Cope with docutils 0.21 (Akira Yokosawa)   
  - serial: kgdboc: Fix NMI-safety problems from keyboard reset code (Daniel Thompson)   
  - btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() (Dominique Martinet)   
  - dm: limit the number of targets and parameter size area (Mikulas Patocka)   
  - Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems" (Harshit Mogalapalli)   
  - LTS version: v4.14.347 (Yifei Liu)   
  - rds: Fix build regression. (David S. Miller)   
  - RDS: IB: Use DEFINE_PER_CPU_SHARED_ALIGNED for rds_ib_stats (Nathan Chancellor)   
  - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). (Kuniyuki Iwashima)   
  - net: fix out-of-bounds access in ops_init (Thadeu Lima de Souza Cascardo)   
  - drm/vmwgfx: Fix invalid reads in fence signaled events (Zack Rusin)   
  - dyndbg: fix old BUG_ON in >control parser (Jim Cromie)   
  - tipc: fix UAF in error path (Paolo Abeni)   
  - usb: gadget: f_fs: Fix a race condition when processing setup packets. (Chris Wulff)   
  - usb: gadget: composite: fix OS descriptors w_value logic (Peter Korsgaard)   
  - firewire: nosy: ensure user_length is taken into account when fetching packet contents (Thanassis Avgerinos)   
  - af_unix: Fix garbage collector racing against connect() (Michal Luczaj)   
  - af_unix: Do not use atomic ops for unix_sk(sk)->inflight. (Kuniyuki Iwashima)   
  - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (Eric Dumazet)   
  - net/ipv6: Refactor fib6_rule_action (David Ahern)   
  - net: bridge: fix corrupted ethernet header on multicast-to-unicast (Felix Fietkau)   
  - net: bridge: use DEV_STATS_INC() (Eric Dumazet)   
  - phonet: fix rtm_phonet_notify() skb allocation (Eric Dumazet)   
  - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Roded Zats)   
  - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (Duoming Zhou)   
  - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (Duoming Zhou)   
  - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Eric Dumazet)   
  - tcp: remove redundant check on tskb (Colin Ian King)   
  - net:usb:qmi_wwan: support Rolling modules (Vanillan Wang)   
  - fs/9p: drop inodes immediately on non-.L too (Joakim Sindholt)   
  - gpio: crystalcove: Use -ENOTSUPP consistently (Andy Shevchenko)   
  - gpio: wcove: Use -ENOTSUPP consistently (Andy Shevchenko)   
  - 9p: explicitly deny setlease attempts (Jeff Layton)   
  - fs/9p: translate O_TRUNC into OTRUNC (Joakim Sindholt)   
  - fs/9p: only translate RWX permissions for plain 9P2000 (Joakim Sindholt)   
  - selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior (John Stultz)   
  - scsi: target: Fix SELinux error when systemd-modules loads the target module (Maurizio Lombardi)   
  - tools/power turbostat: Fix Bzy_MHz documentation typo (Peng Liu)   
  - tools/power turbostat: Fix added raw MSR output (Doug Smythies)   
  - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Adam Goldman)   
  - ata: sata_gemini: Check clk_enable() result (Chen Ni)   
  - net: bcmgenet: Reset RBUF on first open (Phil Elwell)   
  - ALSA: line6: Zero-initialize message buffers (Takashi Iwai)   
  - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (Saurav Kashyap)   
  - net: mark racy access on sk->sk_rcvbuf (linke li)   
  - wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc (Jeff Johnson)   
  - scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic (Justin Tee)   
  - tipc: fix a possible memleak in tipc_buf_append (Xin Long)   
  - net: bridge: fix multicast-to-unicast with fraglist GSO (Felix Fietkau)   
  - net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341 (Marek Behún)   
  - net: dsa: mv88e6xxx: Fix name of switch 88E6141 (Uwe Kleine-König)   
  - net: dsa: mv88e6xxx: Add number of MACs in the ATU (Andrew Lunn)   
  - net l2tp: drop flow hash on forward (David Bauer)   
  - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Kuniyuki Iwashima)   
  - bna: ensure the copied buf is NUL terminated (Bui Quang Minh)   
  - pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() (Zeng Heng)   
  - power: rt9455: hide unused rt9455_boost_voltage_values (Arnd Bergmann)   
  - pinctrl: core: delete incorrect free in pinctrl_enable() (Dan Carpenter)   
  - ethernet: Add helper for assigning packet type when dest address does not match device address (Rahul Rameshbabu)   
  - ethernet: add a helper for assigning port addresses (Jakub Kicinski)   
  - net: create netdev->dev_addr assignment helpers (Jakub Kicinski)   
  - net: slightly optimize eth_type_trans (Li RongQing)   
  - wifi: nl80211: don't free NULL coalescing rule (Johannes Berg)   
  - dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state" (Vinod Koul)   
  - dmaengine: pl330: issue_pending waits until WFP state (Bumyong Lee)   
  - LTS version: v4.14.346 (Yifei Liu)   
  - Simplify major/minor non-dynamic logic (Mauro Carvalho Chehab)   
  - net: fix unused variable warning in do_tcp_setsockopt() (Harshit Mogalapalli)   
  - serial: core: fix kernel-doc for uart_port_unlock_irqrestore() (Randy Dunlap)   
  - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up (Nam Cao)   
  - i2c: smbus: fix NULL function pointer dereference (Wolfram Sang)   
  - i2c: add param sanity check to i2c_transfer() (Ard Biesheuvel)   
  - idma64: Don't try to serve interrupts when device is powered off (Andy Shevchenko)   
  - mtd: diskonchip: work around ubsan link failure (Arnd Bergmann)   
  - stackdepot: respect __GFP_NOLOCKDEP allocation flag (Andrey Ryabinin)   
  - net: b44: set pause params only when interface is up (Peter Münster)   
  - irqchip/gic-v3-its: Prevent double free on error (Guanrui Huang)   
  - arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma (Iskander Amara)   
  - btrfs: fix information leak in btrfs_ioctl_logical_to_ino() (Johannes Thumshirn)   
  - Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old() (Nathan Chancellor)   
  - tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together (Robin H. Johnson)   
  - tracing: Show size of requested perf buffer (Robin H. Johnson)   
  - drm/amdgpu: validate the parameters of bo mapping operations more clearly (xinhui pan)   
  - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (Chia-I Wu)   
  - drm/amdgpu: restrict bo mapping within gpu address limits (Rajneesh Bhardwaj)   
  - serial: mxs-auart: add spinlock around changing cts state (Emil Kronborg)   
  - serial: core: Provide port lock wrappers (Thomas Gleixner)   
  - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Sindhu Devale)   
  - ipvs: Fix checksumming on GSO of SCTP packets (Ismael Luceno)   
  - net: gtp: Fix Use-After-Free in gtp_dellink (Hyunwoo Kim)   
  - net: usb: ax88179_178a: stop lying about skb->truesize (Eric Dumazet)   
  - NFC: trf7970a: disable all regulators on removal (Paul Geurts)   
  - mlxsw: core: Unregister EMAD trap using FORWARD action (Ido Schimmel)   
  - vxlan: drop packets from invalid src-address (David Bauer)   
  - ARC: [plat-hsdk]: Remove misplaced interrupt-cells property (Alexey Brodkin)   
  - arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma (Quentin Schulz)   
  - arm64: dts: rockchip: fix alphabetical ordering RK3399 puma (Iskander Amara)   
  - nilfs2: fix OOB in nilfs_set_de_type (Jeongjun Park)   
  - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Alan Stern)   
  - speakup: Avoid crash on very long word (Samuel Thibault)   
  - usb: dwc2: host: Fix dereference issue in DDMA completion flow. (Minas Harutyunyan)   
  - Revert "usb: cdc-wdm: close race between read and workqueue" (Greg Kroah-Hartman)   
  - USB: serial: option: add Telit FN920C04 rmnet compositions (Daniele Palmas)   
  - USB: serial: option: add Rolling RW101-GL and RW135-GL support (Vanillan Wang)   
  - USB: serial: option: support Quectel EM060K sub-models (Jerry Meng)   
  - USB: serial: option: add Lonsung U8300/U9300 product (Coia Prant)   
  - USB: serial: option: add support for Fibocom FM650/FG650 (Chuanhong Guo)   
  - USB: serial: option: add Fibocom FM135-GL variants (bolan wang)   
  - serial/pmac_zilog: Remove flawed mitigation for rx irq flood (Finn Thain)   
  - comedi: vmk80xx: fix incomplete endpoint checking (Nikita Zhandarovich)   
  - drm: nv04: Fix out of bounds access (Mikhail Kobuk)   
  - tun: limit printing rate when illegal packet received by tun dev (Lei Chen)   
  - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Ziyang Xuan)   
  - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Pablo Neira Ayuso)   
  - kprobes: Fix possible use-after-free issue on kprobe registration (Zheng Yejian)   
  - selftests/ftrace: Limit length in subsystem-enable tests (Yuanhe Shu)   
  - x86/apic: Force native_apic_mem_read() to use the MOV instruction (Adam Dunlap)   
  - selftests: timers: Fix abs() warning in posix_timers test (John Stultz)   
  - vhost: Add smp_rmb() in vhost_vq_avail_empty() (Gavin Shan)   
  - tracing: hide unused ftrace_event_id_fops (Arnd Bergmann)   
  - net/mlx5: Properly link new fs rules into the tree (Cosmin Ratiu)   
  - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc)   
  - ipv4/route: avoid unused-but-set-variable warning (Arnd Bergmann)   
  - geneve: fix header validation in geneve[6]_xmit_skb (Eric Dumazet)   
  - nouveau: fix function cast warning (Arnd Bergmann)   
  - Bluetooth: Fix memory leak in hci_req_sync_complete() (Dmitry Antipov)   
  - batman-adv: Avoid infinite loop trying to resize local TT (Sven Eckelmann)   
  - LTS version: v4.14.345 (Yifei Liu)   
  - net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() (Liu Jian)   
  - Revert "net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev()" (Vegard Nossum)   
  - netfilter: nftables: exthdr: fix 4-byte stack OOB write (Florian Westphal)   
  - ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (Chao Yu)   
  - Revert "ext4: fix to check return value of freeze_bdev() in ext4_shutdown()" (Vegard Nossum)   
  - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Vasiliy Kovalev)   
  - Bluetooth: btintel: Fixe build regression (Luiz Augusto von Dentz)   
  - x86/mm/pat: fix VM_PAT handling in COW mappings (David Hildenbrand)   
  - virtio: reenable config if freezing device failed (David Hildenbrand)   
  - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (Thadeu Lima de Souza Cascardo)   
  - fbmon: prevent division by zero in fb_videomode_from_videomode() (Roman Smirnov)   
  - fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2 (Aleksandr Burakov)   
  - usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined (Colin Ian King)   
  - tools: iio: replace seekdir() in iio_generic_buffer (Petre Rodan)   
  - block: prevent division by zero in blk_rq_stat_sum() (Roman Smirnov)   
  - SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int (Dai Ngo)   
  - media: sta2x11: fix irq handler cast (Arnd Bergmann)   
  - isofs: handle CDs with bad root inode but good Joliet root directory (Alex Henrie)   
  - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Justin Tee)   
  - sysv: don't call sb_bread() with pointers_lock held (Tetsuo Handa)   
  - Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails (Kunwu Chan)   
  - Bluetooth: btintel: Fix null ptr deref in btintel_read_version (Edward Adam Davis)   
  - btrfs: send: handle path ref underflow in header iterate_inode_ref() (David Sterba)   
  - btrfs: export: handle invalid inode or root reference in btrfs_get_parent() (David Sterba)   
  - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() (David Sterba)   
  - tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num() (Samasth Norway Ananda)   
  - arm64: dts: rockchip: fix rk3399 hdmi ports node (Johan Jonker)   
  - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Harshit Mogalapalli)   
  - wifi: ath9k: fix LNA selection in ath_ant_try_scan() (Dmitry Antipov)   
  - ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone (I Gede Agastya Darma Laksana)   
  - ata: sata_mv: Fix PCI device ID table declaration compilation warning (Arnd Bergmann)   
  - ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit (Arnd Bergmann)   
  - ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw (Stephen Lee)   
  - init: open /initrd.image with O_LARGEFILE (John Sperbeck)   
  - staging: vc04_services: fix information leak in create_component() (Dan Carpenter)   
  - staging: vc04_services: changen strncpy() to strscpy_pad() (Arnd Bergmann)   
  - staging: mmal-vchiq: Fix client_component for 64 bit kernel (Dave Stevenson)   
  - staging: mmal-vchiq: Allocate and free components as required (Dave Stevenson)   
  - staging: mmal-vchiq: Avoid use of bool in structures (Dave Stevenson)   
  - ipv6: Fix infinite recursion in fib6_dump_done(). (Kuniyuki Iwashima)   
  - selftests: reuseaddr_conflict: add missing new line at the end of the output (Jakub Kicinski)   
  - net/sched: act_skbmod: prevent kernel-infoleak (Eric Dumazet)   
  - net: stmmac: fix rx queue priority assignment (Piotr Wejman)   
  - net: stmmac: Fix issues when number of Queues >= 4 (Jose Abreu)   
  - mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations (Vlastimil Babka)   
  - netfilter: nf_tables: disallow timeout for anonymous sets (Pablo Neira Ayuso)   
  - Bluetooth: Fix TOCTOU in HCI debugfs implementation (Bastien Nocera)   
  - Bluetooth: hci_event: set the conn encrypted before conn establishes (Hui Wang)   
  - tcp: properly terminate timers for kernel sockets (Eric Dumazet)   
  - mptcp: add sk_stop_timer_sync helper (Geliang Tang)   
  - nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet (Ryosuke Yasuoka)   
  - USB: core: Fix deadlock in usb_deauthorize_interface() (Alan Stern)   
  - scsi: lpfc: Correct size for wqe for memset() (Muhammad Usama Anjum)   
  - scsi: qla2xxx: Fix command flush on cable pull (Quinn Tran)   
  - usb: udc: remove warning when queue disabled ep (yuan linyu)   
  - usb: dwc2: host: Fix ISOC flow in DDMA mode (Minas Harutyunyan)   
  - usb: dwc2: host: Fix hibernation flow (Minas Harutyunyan)   
  - powerpc: xor_vmx: Add '-mhard-float' to CFLAGS (Nathan Chancellor)   
  - efivarfs: Request at most 512 bytes for variable names (Tim Schumacher)   
  - perf/core: Fix reentry problem in perf_output_read_group() (Yang Jihong)   
  - loop: Call loop_config_discard() only after new config is applied (Martijn Coenen)   
  - Revert "loop: Check for overflow while configuring loop" (Genjian Zhang)   
  - btrfs: allocate btrfs_ioctl_defrag_range_args on stack (Goldwyn Rodrigues)   
  - btrfs: add define for oldest generation (Anand Jain)   
  - printk: Update @console_may_schedule in console_trylock_spinning() (John Ogness)   
  - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs (Duoming Zhou)   
  - ALSA: aica: Fix a long-time build breakage (Takashi Iwai)   
  - ALSA: sh: aica: Convert timers to use timer_setup() (Kees Cook)   
  - usb: cdc-wdm: close race between read and workqueue (Oliver Neukum)   
  - USB: cdc-wdm: Fix use after free in service_outstanding_interrupt(). (Tetsuo Handa)   
  - exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack() (Max Filippov)   
  - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Felix Fietkau)   
  - mm/migrate: set swap entry values of THP tail pages properly. (Zi Yan)   
  - vt: fix memory overlapping when deleting chars in the buffer (Yangxi Xiang)   
  - tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled (Sherry Sun)   
  - usb: port: Don't try to peer unused USB ports based on location (Mathias Nyman)   
  - usb: gadget: ncm: Fix handling of zero block length packets (Krishna Kurapati)   
  - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Alan Stern)   
  - ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform (Kailang Yang)   
  - xfrm: Avoid clang fortify warning in copy_to_user_tmpl() (Nathan Chancellor)   
  - netfilter: nf_tables: reject constant set with timeout (Pablo Neira Ayuso)   
  - netfilter: nf_tables: disallow anonymous set with timeout flag (Pablo Neira Ayuso)   
  - comedi: comedi_test: Prevent timers rescheduling during deletion (Ian Abbott)   
  - nilfs2: prevent kernel bug at submit_bh_wbc() (Ryusuke Konishi)   
  - nilfs2: use a more common logging style (Joe Perches)   
  - nilfs2: fix failure to detect DAT corruption in btree and direct mappings (Ryusuke Konishi)   
  - memtest: use {READ,WRITE}_ONCE in memory scanning (Qiang Zhang)   
  - drm/vc4: hdmi: do not return negative values from .get_modes() (Jani Nikula)   
  - drm/imx/ipuv3: do not return negative values from .get_modes() (Jani Nikula)   
  - s390/zcrypt: fix reference counting on zcrypt card objects (Harald Freudenberger)   
  - soc: fsl: qbman: Use raw spinlock for cgr_lock (Sean Anderson)   
  - soc: fsl: qbman: Add CGR update function (Sean Anderson)   
  - soc: fsl: qbman: Add helper for sanity checking cgr ops (Sean Anderson)   
  - soc: fsl: qbman: Always disable interrupts when taking cgr_lock (Sean Anderson)   
  - vfio/platform: Disable virqfds on cleanup (Alex Williamson)   
  - kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1 (Nathan Chancellor)   
  - speakup: Fix 8bit characters from direct synth (Samuel Thibault)   
  - hwmon: (amc6821) add of_match table (Josua Mayer)   
  - dm-raid: fix lockdep waring in "pers->hot_add_disk" (Yu Kuai)   
  - PCI/PM: Drain runtime-idle callbacks before driver removal (Rafael J. Wysocki)   
  - PCI: Drop pci_device_remove() test of pci_dev->driver (Uwe Kleine-König)   
  - fuse: don't unhash root (Miklos Szeredi)   
  - mmc: tmio: avoid concurrent runs of mmc_request_done() (Wolfram Sang)   
  - PM: sleep: wakeirq: fix wake irq warning in system suspend (Qingliang Li)   
  - USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M (Toru Katagiri)   
  - USB: serial: option: add MeiG Smart SLM320 product (Aurélien Jacobs)   
  - USB: serial: cp210x: add ID for MGP Instruments PDS100 (Christian Häggström)   
  - USB: serial: add device ID for VeriFone adapter (Cameron Williams)   
  - USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB (Daniel Vogelbacher)   
  - powerpc/fsl: Fix mfpmr build errors with newer binutils (Michael Ellerman)   
  - clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays (Gabor Juhos)   
  - clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays (Gabor Juhos)   
  - PM: suspend: Set mem_sleep_current during kernel command line setup (Maulik Shah)   
  - parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds (Guenter Roeck)   
  - parisc: Fix csum_ipv6_magic on 64-bit systems (Guenter Roeck)   
  - parisc: Fix csum_ipv6_magic on 32-bit systems (Guenter Roeck)   
  - parisc: Fix ip_fast_csum (Guenter Roeck)   
  - parisc: Do not hardcode registers in checksum functions (Helge Deller)   
  - ubi: correct the calculation of fastmap size (Zhang Yi)   
  - ubi: Check for too small LEB size in VTBL code (Richard Weinberger)   
  - ubifs: Set page uptodate in the correct place (Matthew Wilcox (Oracle))   
  - fat: fix uninitialized field in nostale filehandles (Jan Kara)   
  - crypto: qat - resolve race condition during AER recovery (Damian Muszynski)   
  - crypto: qat - fix double free during reset (Svyatoslav Pankratov)   
  - sparc64: NMI watchdog: fix return value of __setup handler (Randy Dunlap)   
  - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson)   
  - media: xc4000: Fix atomicity violation in xc4000_get_frequency (Gui-Dong Han)   
  - arm: dts: marvell: Fix maxium->maxim typo in brownstone dts (Duje Mihanović)   
  - ARM: dts: mmp2-brownstone: Don't redeclare phandle references (Lubomir Rintel)   
  - smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity() (Roberto Sassu)   
  - smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr() (Roberto Sassu)   
  - wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach (Zheng Wang)   
  - x86/bugs: Use sysfs_emit() (Borislav Petkov)   
  - LTS version: v4.14.344 (Yifei Liu)   
  - binder: signal epoll threads of self-work (Carlos Llamas)   
  - ANDROID: binder: Add thread->process_todo flag. (Martijn Coenen)   
  - scsi: bnx2fc: Fix skb double free in bnx2fc_rcv() (Wei Yongjun)   
  - scsi: bnx2fc: Remove set but not used variable 'oxid' (YueHaibing)   
  - net: check dev->gso_max_size in gso_features_check() (Eric Dumazet)   
  - driver: staging: count ashmem_range into SLAB_RECLAIMBLE (Zhaoyang Huang)   
  - net: warn if gso_type isn't set for a GSO SKB (Heiner Kallweit)   
  - staging: android: ashmem: Remove use of unlikely() (Alistair Strachan)   
  - ALSA: hda/realtek: Enable headset on Lenovo M90 Gen5 (Bin Li)   
  - ALSA: hda/realtek: Enable headset onLenovo M70/M90 (Bin Li)   
  - ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB (Edward Pacman)   
  - ALSA: hda/realtek - ALC897 headset MIC no sound (Kailang Yang)   
  - ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform (Kailang Yang)   
  - ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW (Hui Wang)   
  - ALSA: hda/realtek - The front Mic on a HP machine doesn't work (Jeremy Szu)   
  - ALSA: hda/realtek - Enable the headset of Acer N50-600 with ALC662 (Jian-Hong Pan)   
  - ALSA: hda/realtek - Enable headset mic of Acer X2660G with ALC662 (Jian-Hong Pan)   
  - ALSA: hda/realtek - Add Headset Mic supported for HP cPC (Kailang Yang)   
  - ALSA: hda/realtek - More constifications (Takashi Iwai)   
  - Add Acer Aspire Ethos 8951G model quirk (Sergey Bostandzhyan)   
  - devcoredump: Send uevent once devcd is ready (Mukesh Ojha)   
  - devcoredump : Serialize devcd_del work (Mukesh Ojha)   
  - netfilter: xt_owner: Fix for unsafe access of sk->sk_socket (Phil Sutter)   
  - netfilter: xt_owner: Add supplementary groups option (Lukasz Pawelczyk)   
  - mtd: cfi_cmdset_0001: Byte swap OTP info (Linus Walleij)   
  - mtd: cfi_cmdset_0001: Support the absence of protection registers (Jean-Philippe Brucker)   
  - s390/cmma: fix detection of DAT pages (Heiko Carstens)   
  - s390/mm: fix phys vs virt confusion in mark_kernel_pXd() functions family (Alexander Gordeev)   
  - ALSA: hda/realtek: Headset Mic VREF to 100% (Kailang Yang)   
  - hfsplus: unmap the page in the "fail_page" label (Fabio M. De Francesco)   
  - ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS (Marios Levogiannis)   
  - ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887 (Jian-Hong Pan)   
  - ALSA: hda/realtek - Add quirk for Tuxedo XC 1509 (Richard Sailer)   
  - ALSA: hda/realtek - Headset microphone and internal speaker support for System76 oryp5 (Jeremy Soller)   
  - ALSA: hda/realtek - Clevo P950ER ALC1220 Fixup (Jeremy Soller)   
  - ALSA: hda/realtek - Add support for ALC1220 (Peisen)   
  - hv_netvsc: Fix race of register_netdevice_notifier and VF register (Haiyang Zhang)   
  - pwm: sti: Reduce number of allocations and drop usage of chip_data (Uwe Kleine-König)   
  - pwm: sti: Avoid conditional gotos (Thierry Reding)   
  - tools: iio: iio_generic_buffer ensure alignment (Matti Vaittinen)   
  - tools: iio: iio_generic_buffer: Fix some integer type and calculation (Chenyuan Mi)   
  - tools: iio: privatize globals and functions in iio_generic_buffer.c file (Alexandru Ardelean)   
  - leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu' (Christophe JAILLET)   
  - ledtrig-cpu: Limit to 8 CPUs (Pavel Machek)   
  - leds: pwm: Don't disable the PWM when the LED should be off (Uwe Kleine-König)   
  - leds: pwm: convert to atomic PWM API (Uwe Kleine-König)   
  - leds: pwm: simplify if condition (Uwe Kleine-König)   
  - regmap: debugfs: Fix a erroneous check after snprintf() (Christophe JAILLET)   
  - regmap: Allow missing device in regmap_name_read_file() (David Lechner)   
  - tcp_metrics: add missing barriers on delete (Eric Dumazet)   
  - tcp: batch tcp_net_metrics_exit (Eric Dumazet)   
  - tcp: fix excessive TLP and RACK timeouts from HZ rounding (Neal Cardwell)   
  - tcp: Namespace-ify sysctl_tcp_early_retrans (Eric Dumazet)   
  - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (Eric Dumazet)   
  - ata: libata-core: Do not register PM operations for SAS ports (Damien Le Moal)   
  - libata: make ata_port_type const (Bhumika Goyal)   
  - libata: Add new med_power_with_dipm link_power_management_policy setting (Hans de Goede)   
  - ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q (Kailang Yang)   
  - ALSA: hda - add Lenovo IdeaCentre B550 to the power_save_blacklist (Jaroslav Kysela)   
  - ALSA: hda: Add Intel NUC7i3BNB to the power_save blacklist (Hans de Goede)   
  - ext4: mark group as trimmed only if it was fully scanned (Dmitry Monakhov)   
  - ext4: add new helper interface ext4_try_to_trim_range() (Wang Jianchao)   
  - ext4: remove the 'group' parameter of ext4_trim_extent (Wang Jianchao)   
  - scsi: qla2xxx: Remove unsupported ql2xenabledif option (Manish Rangankar)   
  - usb: typec: tcpci: clear the fault status bit (Marco Felsch)   
  - usb: typec: add fwnode to tcpc (Li Jun)   
  - staging: typec: fix endianness mismatch identified by sparse (Gabriel L. Somlo)   
  - staging: typec: tcpm: Document data structures (Guenter Roeck)   
  - serial: sc16is7xx: fix broken port 0 uart init (Hugo Villeneuve)   
  - sc16is7xx: Set iobase to device index (Daniel Mack)   
  - dlm: fix plock lookup when using multiple lockspaces (Alexander Aring)   
  - drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (Yangtao Li)   
  - drm/tegra: Remove superfluous error messages around platform_get_irq() (Tan Zhongjun)   
  - ARM: dts: BCM53573: Drop nonexistent #usb-cells (Rafał Miłecki)   
  - ARM: dts: BCM5301X: Harmonize EHCI/OHCI DT nodes name (Serge Semin)   
  - wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (Fedor Pchelkin)   
  - ath9k: use irqsave() in USB's complete callback (Sebastian Andrzej Siewior)   
  - wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (Dmitry Antipov)   
  - mwifiex: switch from 'pci_' to 'dma_' API (Christophe JAILLET)   
  - mwifiex: drop 'set_consistent_dma_mask' log message (Brian Norris)   
  - bonding: fix macvlan over alb bond support (Hangbin Liu)   
  - net: remove bond_slave_has_mac_rcu() (Jakub Kicinski)   
  - fbdev: fix potential OOB read in fast_imageblit() (Zhang Shurong)   
  - fbdev: Fix sys_imageblit() for arbitrary image widths (Thomas Zimmermann)   
  - fbdev: Improve performance of sys_imageblit() (Thomas Zimmermann)   
  - tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (Sherry Sun)   
  - Revert "tty: serial: fsl_lpuart: drop earlycon entry for i.MX8QXP" (Alexander Stein)   
  - MIPS: cpu-features: Use boot_cpu_type for CPU type based features (Jiaxun Yang)   
  - MIPS: cpu-features: Enable octeon_cache by cpu_type (Jiaxun Yang)   
  - fs: dlm: fix mismatch of plock results from userspace (Alexander Aring)   
  - fs: dlm: use dlm_plock_info for do_unlock_close (Alexander Aring)   
  - fs: dlm: change plock interrupted message to debug again (Alexander Aring)   
  - fs: dlm: add pid to debug log (Alexander Aring)   
  - dlm: replace usage of found with dedicated list iterator variable (Jakob Koschel)   
  - dlm: improve plock logging if interrupted (Alexander Aring)   
  - nfsd: Remove incorrect check in nfsd4_validate_stateid (Trond Myklebust)   
  - nfsd4: kill warnings on testing stateids with mismatched clientids (J. Bruce Fields)   
  - mmc: meson-gx: remove redundant mmc_request_done() call from irq context (Martin Hundebøll)   
  - mmc: meson-gx: remove useless lock (Jerome Brunet)   
  - PM: sleep: wakeirq: fix wake irq arming (Johan Hovold)   
  - PM / wakeirq: support enabling wake-up irq after runtime_suspend called (Chunfeng Yun)   
  - scsi: zfcp: Defer fc_rport blocking until after ADISC response (Steffen Maier)   
  - scsi: zfcp: workqueue: set description for port work items with their WWPN as context (Steffen Maier)   
  - btrfs: check for commit error at btrfs_attach_transaction_barrier() (Filipe Manana)   
  - btrfs: simplify IS_ERR/PTR_ERR checks (Al Viro)   
  - fs: dlm: interrupt posix locks only when process is killed (Alexander Aring)   
  - dlm: rearrange async condition return (Alexander Aring)   
  - dlm: cleanup plock_op vs plock_xop (Alexander Aring)   
  - ext4: Fix reusing stale buffer heads from last failed mounting (Zhihao Cheng)   
  - ext4: rename journal_dev to s_journal_dev inside ext4_sb_info (Chunguang Xu)   
  - tcp: annotate data-races around tp->linger2 (Eric Dumazet)   
  - net: Replace the limit of TCP_LINGER2 with TCP_FIN_TIMEOUT_MAX (Cambda Zhu)   
  - ceph: don't let check_caps skip sending responses for revoke msgs (Xiubo Li)   
  - ceph: define argument structure for handle_cap_grant (Yan, Zheng)   
  - net: bcmgenet: Ensure MDIO unregistration has clocks enabled (Florian Fainelli)   
  - net: bcmgenet: Avoid calling platform_device_put() twice in bcmgenet_mii_exit() (Wei Yongjun)   
  - net: tcp_input: Neaten DBGUNDO (Joe Perches)   
  - i2c: xiic: Don't try to handle more interrupt events after error (Robert Hancock)   
  - i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() (Marek Vasut)   
  - i2c: xiic: Fix broken locking on tx_msg (Marek Vasut)   
  - i2c: xiic: Change code alignment to 1 space only (Jaakko Laine)   
  - i2c: xiic: Add timeout to the rx fifo wait loop (Shubhrajyoti Datta)   
  - i2c: xiic: Fix kerneldoc warnings (Shubhrajyoti Datta)   
  - hwrng: virtio - Fix race on data_avail and actual data (Herbert Xu)   
  - hwrng: virtio - always add a pending request (Laurent Vivier)   
  - hwrng: virtio - don't waste entropy (Laurent Vivier)   
  - hwrng: virtio - don't wait on cleanup (Laurent Vivier)   
  - hwrng: virtio - add an internal buffer (Laurent Vivier)   
  - nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect() (Krzysztof Kozlowski)   
  - nfc: constify several pointers to u8, char and sk_buff (Krzysztof Kozlowski)   
  - irqchip/jcore-aic: Fix missing allocation of IRQ descriptors (John Paul Adrian Glaubitz)   
  - irqchip/jcore-aic: Kill use of irq_create_strict_mappings() (Marc Zyngier)   
  - Documentation: fix little inconsistencies (Pavel Machek)   
  - usb: musb: fix MUSB_QUIRK_B_DISCONNECT_99 handling (Thomas Petazzoni)   
  - net/rose: fix races in rose_kill_by_device() (Eric Dumazet)   
  - reset: Fix crash when freeing non-existent optional resets (Geert Uytterhoeven)   
  - ksmbd: fix wrong name of SMB2_CREATE_ALLOCATION_SIZE (Namjae Jeon)   
  - PCI: keystone: Don't discard .probe() callback (Uwe Kleine-König)   
  - PCI: keystone: Don't discard .remove() callback (Uwe Kleine-König)   
  - can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() (Marc Kleine-Budde)   
  - can: dev: can_restart(): don't crash kernel if carrier is OK (Marc Kleine-Budde)   
  - r8169: fix the KCSAN reported data-race in rtl_tx while reading TxDescArray[entry].opts1 (Mirsad Goran Todorovac)   
  - xen-netback: use default TX queue size for vifs (Roger Pau Monne)   
  - MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled (Christoph Hellwig)   
  - arm64: dts: qcom: msm8996: Add missing interrupt to the USB2 controller (Konrad Dybcio)   
  - regmap: Account for register length in SMBus I/O limits (Mark Brown)   
  - x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms (Zhang Rui)   
  - ASoC: cs42l51: fix driver to properly autoload with automatic module loading (Thomas Petazzoni)   
  - PCI: qcom: Disable write access to read only registers for IP v2.3.3 (Manivannan Sadhasivam)   
  - pinctrl: amd: Only use special debounce behavior for GPIO 0 (Mario Limonciello)   
  - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Daniel Vacek)   
  - usb: fotg210-hcd: delete an incorrect bounds test (Dan Carpenter)   
  - smb: client: fix OOB in smbCalcSize() (Paulo Alcantara)   
  - btrfs: do not allow non subvolume root targets for snapshot (Josef Bacik)   
  - pinctrl: at91-pio4: use dedicated lock class for IRQ (Alexis Lothoré)   
  - net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() (Liu Jian)   
  - arm64: dts: mediatek: mt8173-evb: Fix regulator-fixed node names (AngeloGioacchino Del Regno)   
  - IB/isert: Fix unaligned immediate-data handling (Sagi Grimberg)   
  - fbdev: stifb: Make the STI next font pointer a 32-bit signed offset (Helge Deller)   
  - smb3: fix touch -h of symlink (Steve French)   
  - MIPS: KVM: Fix a build warning about variable set but not used (Huacai Chen)   
  - cifs: spnego: add ';' in HOST_KEY_LEN (Anastasia Belova)   
  - macvlan: Don't propagate promisc change to lower dev in passthru (Vlad Buslov)   
  - ppp: limit MRU to 64K (Willem de Bruijn)   
  - ptp: annotate data-race around q->head and q->tail (Eric Dumazet)   
  - xen/events: fix delayed eoi list handling (Juergen Gross)   
  - tipc: Fix kernel-infoleak due to uninitialized TLV value (Shigeru Yoshida)   
  - tty: Fix uninit-value access in ppp_sync_receive() (Shigeru Yoshida)   
  - iio: exynos-adc: request second interupt only when touchscreen mode is used (Marek Szyprowski)   
  - selftests/ftrace: Add new test case which checks non unique symbol (Francis Laniel)   
  - media: v4l2-fwnode: fix v4l2_fwnode_parse_link handling (Marco Felsch)   
  - block: fix signed int overflow in Amiga partition support (Michael Schmitz)   
  - iio: addac: stx104: Fix race condition for stx104_write_raw() (William Breathitt Gray)   
  - ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (Chao Yu)   
  - btrfs: fix extent buffer leak after tree mod log failure at split_node() (Filipe Manana)   
  - pinctrl: amd: Detect internal GPIO0 debounce handling (Mario Limonciello)   
  - ALSA: jack: Fix mutex call in snd_jack_report() (Takashi Iwai)   
  - IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors (Patrick Kelsey)   
  - ARM: 9303/1: kprobes: avoid missing-declaration warnings (Arnd Bergmann)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.538.4.el7uek]
changelog:
  - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Herbert Xu)   
  - x86/boot: Ignore relocations in .notes sections in walk_relocs() too (Guixiong Wei)   
  - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Yu Kuai)   
  - vxlan: Fix regression when dropping packets due to invalid src addresses (Daniel Borkmann)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.538.3.el7uek]
changelog:
  - uek-rpm: disable --strict-build-id on mips64 (Stephen Brennan)  [Orabug: 36717400]  
  - LTS version: v4.14.348 (Yifei Liu)   
  - docs: kernel_include.py: Cope with docutils 0.21 (Akira Yokosawa)   
  - serial: kgdboc: Fix NMI-safety problems from keyboard reset code (Daniel Thompson)   
  - btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks() (Dominique Martinet)   
  - dm: limit the number of targets and parameter size area (Mikulas Patocka) [Orabug: 36298556] {CVE-2023-52429} {CVE-2024-23851}
  - Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems" (Harshit Mogalapalli)   
  - LTS version: v4.14.347 (Yifei Liu)   
  - rds: Fix build regression. (David S. Miller)   
  - RDS: IB: Use DEFINE_PER_CPU_SHARED_ALIGNED for rds_ib_stats (Nathan Chancellor)   
  - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). (Kuniyuki Iwashima)   
  - net: fix out-of-bounds access in ops_init (Thadeu Lima de Souza Cascardo) [Orabug: 36683114] {CVE-2024-36883}
  - drm/vmwgfx: Fix invalid reads in fence signaled events (Zack Rusin) [Orabug: 36691530] {CVE-2024-36960}
  - dyndbg: fix old BUG_ON in >control parser (Jim Cromie) [Orabug: 36643339] {CVE-2024-35947}
  - tipc: fix UAF in error path (Paolo Abeni) [Orabug: 36683232] {CVE-2024-36886}
  - usb: gadget: f_fs: Fix a race condition when processing setup packets. (Chris Wulff)   
  - usb: gadget: composite: fix OS descriptors w_value logic (Peter Korsgaard)   
  - firewire: nosy: ensure user_length is taken into account when fetching packet contents (Thanassis Avgerinos) [Orabug: 36630451] {CVE-2024-27401}
  - af_unix: Fix garbage collector racing against connect() (Michal Luczaj) [Orabug: 36579512] {CVE-2024-26923}
  - af_unix: Do not use atomic ops for unix_sk(sk)->inflight. (Kuniyuki Iwashima)   
  - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (Eric Dumazet) [Orabug: 36683280] {CVE-2024-36902}
  - net/ipv6: Refactor fib6_rule_action (David Ahern)   
  - net: bridge: fix corrupted ethernet header on multicast-to-unicast (Felix Fietkau)   
  - net: bridge: use DEV_STATS_INC() (Eric Dumazet) [Orabug: 36654610] {CVE-2023-52578}
  - phonet: fix rtm_phonet_notify() skb allocation (Eric Dumazet) [Orabug: 36683486] {CVE-2024-36946}
  - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Roded Zats) [Orabug: 36679452] {CVE-2024-36017}
  - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (Duoming Zhou) [Orabug: 36630444] {CVE-2024-27399}
  - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (Duoming Zhou) [Orabug: 36630439] {CVE-2024-27398}
  - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Eric Dumazet) [Orabug: 36683297] {CVE-2024-36905}
  - tcp: remove redundant check on tskb (Colin Ian King)   
  - net:usb:qmi_wwan: support Rolling modules (Vanillan Wang)   
  - fs/9p: drop inodes immediately on non-.L too (Joakim Sindholt)   
  - gpio: crystalcove: Use -ENOTSUPP consistently (Andy Shevchenko)   
  - gpio: wcove: Use -ENOTSUPP consistently (Andy Shevchenko)   
  - 9p: explicitly deny setlease attempts (Jeff Layton)   
  - fs/9p: translate O_TRUNC into OTRUNC (Joakim Sindholt)   
  - fs/9p: only translate RWX permissions for plain 9P2000 (Joakim Sindholt) [Orabug: 36691539] {CVE-2024-36964}
  - selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior (John Stultz)   
  - scsi: target: Fix SELinux error when systemd-modules loads the target module (Maurizio Lombardi)   
  - tools/power turbostat: Fix Bzy_MHz documentation typo (Peng Liu)   
  - tools/power turbostat: Fix added raw MSR output (Doug Smythies)   
  - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Adam Goldman) [Orabug: 36683506] {CVE-2024-36950}
  - ata: sata_gemini: Check clk_enable() result (Chen Ni)   
  - net: bcmgenet: Reset RBUF on first open (Phil Elwell)   
  - ALSA: line6: Zero-initialize message buffers (Takashi Iwai)   
  - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (Saurav Kashyap) [Orabug: 36683369] {CVE-2024-36919}
  - net: mark racy access on sk->sk_rcvbuf (linke li)   
  - wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc (Jeff Johnson)   
  - scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic (Justin Tee)   
  - tipc: fix a possible memleak in tipc_buf_append (Xin Long) [Orabug: 36683527] {CVE-2024-36954}
  - net: bridge: fix multicast-to-unicast with fraglist GSO (Felix Fietkau)   
  - net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341 (Marek Behún)   
  - net: dsa: mv88e6xxx: Fix name of switch 88E6141 (Uwe Kleine-König)   
  - net: dsa: mv88e6xxx: Add number of MACs in the ATU (Andrew Lunn)   
  - net l2tp: drop flow hash on forward (David Bauer)   
  - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Kuniyuki Iwashima) [Orabug: 36683427] {CVE-2024-36933}
  - bna: ensure the copied buf is NUL terminated (Bui Quang Minh) [Orabug: 36683432] {CVE-2024-36934}
  - pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() (Zeng Heng) [Orabug: 36683545] {CVE-2024-36959}
  - power: rt9455: hide unused rt9455_boost_voltage_values (Arnd Bergmann)   
  - pinctrl: core: delete incorrect free in pinctrl_enable() (Dan Carpenter) [Orabug: 36683461] {CVE-2024-36940}
  - ethernet: Add helper for assigning packet type when dest address does not match device address (Rahul Rameshbabu)   
  - ethernet: add a helper for assigning port addresses (Jakub Kicinski)   
  - net: create netdev->dev_addr assignment helpers (Jakub Kicinski)   
  - net: slightly optimize eth_type_trans (Li RongQing)   
  - wifi: nl80211: don't free NULL coalescing rule (Johannes Berg) [Orabug: 36683465] {CVE-2024-36941}
  - dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state" (Vinod Koul)   
  - dmaengine: pl330: issue_pending waits until WFP state (Bumyong Lee)   
  - LTS version: v4.14.346 (Yifei Liu)   
  - Simplify major/minor non-dynamic logic (Mauro Carvalho Chehab)   
  - net: fix unused variable warning in do_tcp_setsockopt() (Harshit Mogalapalli)   
  - serial: core: fix kernel-doc for uart_port_unlock_irqrestore() (Randy Dunlap)   
  - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up (Nam Cao) [Orabug: 36643497] {CVE-2024-35997}
  - i2c: smbus: fix NULL function pointer dereference (Wolfram Sang) [Orabug: 36643469] {CVE-2024-35984}
  - i2c: add param sanity check to i2c_transfer() (Ard Biesheuvel)   
  - idma64: Don't try to serve interrupts when device is powered off (Andy Shevchenko)   
  - mtd: diskonchip: work around ubsan link failure (Arnd Bergmann)   
  - stackdepot: respect __GFP_NOLOCKDEP allocation flag (Andrey Ryabinin)   
  - net: b44: set pause params only when interface is up (Peter Münster)   
  - irqchip/gic-v3-its: Prevent double free on error (Guanrui Huang) [Orabug: 36642470] {CVE-2024-35847}
  - arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma (Iskander Amara)   
  - btrfs: fix information leak in btrfs_ioctl_logical_to_ino() (Johannes Thumshirn) [Orabug: 36642482] {CVE-2024-35849}
  - Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old() (Nathan Chancellor)   
  - tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together (Robin H. Johnson)   
  - tracing: Show size of requested perf buffer (Robin H. Johnson)   
  - drm/amdgpu: validate the parameters of bo mapping operations more clearly (xinhui pan) [Orabug: 36545066] {CVE-2024-26922}
  - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (Chia-I Wu)   
  - drm/amdgpu: restrict bo mapping within gpu address limits (Rajneesh Bhardwaj)   
  - serial: mxs-auart: add spinlock around changing cts state (Emil Kronborg) [Orabug: 36597969] {CVE-2024-27000}
  - serial: core: Provide port lock wrappers (Thomas Gleixner)   
  - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Sindhu Devale) [Orabug: 36643518] {CVE-2024-36004}
  - ipvs: Fix checksumming on GSO of SCTP packets (Ismael Luceno)   
  - net: gtp: Fix Use-After-Free in gtp_dellink (Hyunwoo Kim) [Orabug: 36630428] {CVE-2024-27396}
  - net: usb: ax88179_178a: stop lying about skb->truesize (Eric Dumazet)   
  - NFC: trf7970a: disable all regulators on removal (Paul Geurts)   
  - mlxsw: core: Unregister EMAD trap using FORWARD action (Ido Schimmel)   
  - vxlan: drop packets from invalid src-address (David Bauer)   
  - ARC: [plat-hsdk]: Remove misplaced interrupt-cells property (Alexey Brodkin)   
  - arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma (Quentin Schulz)   
  - arm64: dts: rockchip: fix alphabetical ordering RK3399 puma (Iskander Amara)   
  - nilfs2: fix OOB in nilfs_set_de_type (Jeongjun Park) [Orabug: 36597906] {CVE-2024-26981}
  - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Alan Stern) [Orabug: 36597943] {CVE-2024-26993}
  - speakup: Avoid crash on very long word (Samuel Thibault) [Orabug: 36597948] {CVE-2024-26994}
  - usb: dwc2: host: Fix dereference issue in DDMA completion flow. (Minas Harutyunyan) [Orabug: 36765453] {CVE-2024-26997}
  - Revert "usb: cdc-wdm: close race between read and workqueue" (Greg Kroah-Hartman)   
  - USB: serial: option: add Telit FN920C04 rmnet compositions (Daniele Palmas)   
  - USB: serial: option: add Rolling RW101-GL and RW135-GL support (Vanillan Wang)   
  - USB: serial: option: support Quectel EM060K sub-models (Jerry Meng)   
  - USB: serial: option: add Lonsung U8300/U9300 product (Coia Prant)   
  - USB: serial: option: add support for Fibocom FM650/FG650 (Chuanhong Guo)   
  - USB: serial: option: add Fibocom FM135-GL variants (bolan wang)   
  - serial/pmac_zilog: Remove flawed mitigation for rx irq flood (Finn Thain) [Orabug: 36597964] {CVE-2024-26999}
  - comedi: vmk80xx: fix incomplete endpoint checking (Nikita Zhandarovich) [Orabug: 36597977] {CVE-2024-27001}
  - drm: nv04: Fix out of bounds access (Mikhail Kobuk) [Orabug: 36597996] {CVE-2024-27008}
  - tun: limit printing rate when illegal packet received by tun dev (Lei Chen) [Orabug: 36598015] {CVE-2024-27013}
  - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Ziyang Xuan) [Orabug: 36598046] {CVE-2024-27020}
  - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Pablo Neira Ayuso)   
  - kprobes: Fix possible use-after-free issue on kprobe registration (Zheng Yejian) [Orabug: 36643371] {CVE-2024-35955}
  - selftests/ftrace: Limit length in subsystem-enable tests (Yuanhe Shu)   
  - x86/apic: Force native_apic_mem_read() to use the MOV instruction (Adam Dunlap)   
  - selftests: timers: Fix abs() warning in posix_timers test (John Stultz)   
  - vhost: Add smp_rmb() in vhost_vq_avail_empty() (Gavin Shan)   
  - tracing: hide unused ftrace_event_id_fops (Arnd Bergmann)   
  - net/mlx5: Properly link new fs rules into the tree (Cosmin Ratiu) [Orabug: 36643404] {CVE-2024-35960}
  - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [Orabug: 36643433] {CVE-2024-35969}
  - ipv4/route: avoid unused-but-set-variable warning (Arnd Bergmann)   
  - geneve: fix header validation in geneve[6]_xmit_skb (Eric Dumazet) [Orabug: 36643444] {CVE-2024-35973}
  - nouveau: fix function cast warning (Arnd Bergmann)   
  - Bluetooth: Fix memory leak in hci_req_sync_complete() (Dmitry Antipov) [Orabug: 36643455] {CVE-2024-35978}
  - batman-adv: Avoid infinite loop trying to resize local TT (Sven Eckelmann) [Orabug: 36643463] {CVE-2024-35982}
  - LTS version: v4.14.345 (Yifei Liu)   
  - net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() (Liu Jian)   
  - Revert "net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev()" (Vegard Nossum)   
  - netfilter: nftables: exthdr: fix 4-byte stack OOB write (Florian Westphal) [Orabug: 35814446] {CVE-2023-4881}
  - ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (Chao Yu)   
  - Revert "ext4: fix to check return value of freeze_bdev() in ext4_shutdown()" (Vegard Nossum)   
  - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Vasiliy Kovalev)   
  - Bluetooth: btintel: Fixe build regression (Luiz Augusto von Dentz)   
  - x86/mm/pat: fix VM_PAT handling in COW mappings (David Hildenbrand) [Orabug: 36643058] {CVE-2024-35877}
  - virtio: reenable config if freezing device failed (David Hildenbrand)   
  - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (Thadeu Lima de Souza Cascardo) [Orabug: 36685662] {CVE-2023-52880}
  - fbmon: prevent division by zero in fb_videomode_from_videomode() (Roman Smirnov) [Orabug: 36643193] {CVE-2024-35922}
  - fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2 (Aleksandr Burakov)   
  - usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined (Colin Ian King)   
  - tools: iio: replace seekdir() in iio_generic_buffer (Petre Rodan)   
  - block: prevent division by zero in blk_rq_stat_sum() (Roman Smirnov) [Orabug: 36643211] {CVE-2024-35925}
  - SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int (Dai Ngo)   
  - media: sta2x11: fix irq handler cast (Arnd Bergmann)   
  - isofs: handle CDs with bad root inode but good Joliet root directory (Alex Henrie)   
  - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Justin Tee) [Orabug: 36643240] {CVE-2024-35930}
  - sysv: don't call sb_bread() with pointers_lock held (Tetsuo Handa)   
  - Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails (Kunwu Chan)   
  - Bluetooth: btintel: Fix null ptr deref in btintel_read_version (Edward Adam Davis) [Orabug: 36643257] {CVE-2024-35933}
  - btrfs: send: handle path ref underflow in header iterate_inode_ref() (David Sterba) [Orabug: 36643268] {CVE-2024-35935}
  - btrfs: export: handle invalid inode or root reference in btrfs_get_parent() (David Sterba)   
  - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() (David Sterba) [Orabug: 36643274] {CVE-2024-35936}
  - tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num() (Samasth Norway Ananda)   
  - arm64: dts: rockchip: fix rk3399 hdmi ports node (Johan Jonker)   
  - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Harshit Mogalapalli) [Orabug: 36643322] {CVE-2024-35944}
  - wifi: ath9k: fix LNA selection in ath_ant_try_scan() (Dmitry Antipov)   
  - ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone (I Gede Agastya Darma Laksana)   
  - ata: sata_mv: Fix PCI device ID table declaration compilation warning (Arnd Bergmann)   
  - ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit (Arnd Bergmann)   
  - ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw (Stephen Lee)   
  - init: open /initrd.image with O_LARGEFILE (John Sperbeck)   
  - staging: vc04_services: fix information leak in create_component() (Dan Carpenter)   
  - staging: vc04_services: changen strncpy() to strscpy_pad() (Arnd Bergmann)   
  - staging: mmal-vchiq: Fix client_component for 64 bit kernel (Dave Stevenson)   
  - staging: mmal-vchiq: Allocate and free components as required (Dave Stevenson)   
  - staging: mmal-vchiq: Avoid use of bool in structures (Dave Stevenson)   
  - ipv6: Fix infinite recursion in fib6_dump_done(). (Kuniyuki Iwashima) [Orabug: 36643094] {CVE-2024-35886}
  - selftests: reuseaddr_conflict: add missing new line at the end of the output (Jakub Kicinski)   
  - net/sched: act_skbmod: prevent kernel-infoleak (Eric Dumazet) [Orabug: 36643118] {CVE-2024-35893}
  - net: stmmac: fix rx queue priority assignment (Piotr Wejman)   
  - net: stmmac: Fix issues when number of Queues >= 4 (Jose Abreu)   
  - mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations (Vlastimil Babka)   
  - netfilter: nf_tables: disallow timeout for anonymous sets (Pablo Neira Ayuso) [Orabug: 36654624] {CVE-2023-52620}
  - Bluetooth: Fix TOCTOU in HCI debugfs implementation (Bastien Nocera)   
  - Bluetooth: hci_event: set the conn encrypted before conn establishes (Hui Wang)   
  - tcp: properly terminate timers for kernel sockets (Eric Dumazet) [Orabug: 36643167] {CVE-2024-35910}
  - mptcp: add sk_stop_timer_sync helper (Geliang Tang)   
  - nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet (Ryosuke Yasuoka) [Orabug: 36643179] {CVE-2024-35915}
  - USB: core: Fix deadlock in usb_deauthorize_interface() (Alan Stern) [Orabug: 36596630] {CVE-2024-26934}
  - scsi: lpfc: Correct size for wqe for memset() (Muhammad Usama Anjum)   
  - scsi: qla2xxx: Fix command flush on cable pull (Quinn Tran) [Orabug: 36596616] {CVE-2024-26931}
  - usb: udc: remove warning when queue disabled ep (yuan linyu) [Orabug: 36642387] {CVE-2024-35822}
  - usb: dwc2: host: Fix ISOC flow in DDMA mode (Minas Harutyunyan)   
  - usb: dwc2: host: Fix hibernation flow (Minas Harutyunyan)   
  - powerpc: xor_vmx: Add '-mhard-float' to CFLAGS (Nathan Chancellor)   
  - efivarfs: Request at most 512 bytes for variable names (Tim Schumacher)   
  - perf/core: Fix reentry problem in perf_output_read_group() (Yang Jihong)   
  - loop: Call loop_config_discard() only after new config is applied (Martijn Coenen)   
  - Revert "loop: Check for overflow while configuring loop" (Genjian Zhang)   
  - btrfs: allocate btrfs_ioctl_defrag_range_args on stack (Goldwyn Rodrigues)   
  - btrfs: add define for oldest generation (Anand Jain)   
  - printk: Update @console_may_schedule in console_trylock_spinning() (John Ogness)   
  - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs (Duoming Zhou) [Orabug: 36530191] {CVE-2024-26654}
  - ALSA: aica: Fix a long-time build breakage (Takashi Iwai)   
  - ALSA: sh: aica: Convert timers to use timer_setup() (Kees Cook)   
  - usb: cdc-wdm: close race between read and workqueue (Oliver Neukum)   
  - USB: cdc-wdm: Fix use after free in service_outstanding_interrupt(). (Tetsuo Handa)   
  - exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack() (Max Filippov)   
  - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Felix Fietkau) [Orabug: 36642167] {CVE-2024-35789}
  - mm/migrate: set swap entry values of THP tail pages properly. (Zi Yan)   
  - vt: fix memory overlapping when deleting chars in the buffer (Yangxi Xiang) [Orabug: 36802211] {CVE-2022-48627}
  - tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled (Sherry Sun)   
  - usb: port: Don't try to peer unused USB ports based on location (Mathias Nyman)   
  - usb: gadget: ncm: Fix handling of zero block length packets (Krishna Kurapati) [Orabug: 36642400] {CVE-2024-35825}
  - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Alan Stern) [Orabug: 36598220] {CVE-2024-27059}
  - ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform (Kailang Yang)   
  - xfrm: Avoid clang fortify warning in copy_to_user_tmpl() (Nathan Chancellor)   
  - netfilter: nf_tables: reject constant set with timeout (Pablo Neira Ayuso)   
  - netfilter: nf_tables: disallow anonymous set with timeout flag (Pablo Neira Ayuso) [Orabug: 36530111] {CVE-2024-26642}
  - comedi: comedi_test: Prevent timers rescheduling during deletion (Ian Abbott)   
  - nilfs2: prevent kernel bug at submit_bh_wbc() (Ryusuke Konishi) [Orabug: 36596793] {CVE-2024-26955}
  - nilfs2: use a more common logging style (Joe Perches)   
  - nilfs2: fix failure to detect DAT corruption in btree and direct mappings (Ryusuke Konishi) [Orabug: 36596800] {CVE-2024-26956}
  - memtest: use {READ,WRITE}_ONCE in memory scanning (Qiang Zhang)   
  - drm/vc4: hdmi: do not return negative values from .get_modes() (Jani Nikula)   
  - drm/imx/ipuv3: do not return negative values from .get_modes() (Jani Nikula)   
  - s390/zcrypt: fix reference counting on zcrypt card objects (Harald Freudenberger) [Orabug: 36596824] {CVE-2024-26957}
  - soc: fsl: qbman: Use raw spinlock for cgr_lock (Sean Anderson) [Orabug: 36642374] {CVE-2024-35819}
  - soc: fsl: qbman: Add CGR update function (Sean Anderson)   
  - soc: fsl: qbman: Add helper for sanity checking cgr ops (Sean Anderson)   
  - soc: fsl: qbman: Always disable interrupts when taking cgr_lock (Sean Anderson) [Orabug: 36642247] {CVE-2024-35806}
  - vfio/platform: Disable virqfds on cleanup (Alex Williamson)   
  - kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1 (Nathan Chancellor)   
  - speakup: Fix 8bit characters from direct synth (Samuel Thibault)   
  - hwmon: (amc6821) add of_match table (Josua Mayer)   
  - dm-raid: fix lockdep waring in "pers->hot_add_disk" (Yu Kuai)   
  - PCI/PM: Drain runtime-idle callbacks before driver removal (Rafael J. Wysocki) [Orabug: 36642262] {CVE-2024-35809}
  - PCI: Drop pci_device_remove() test of pci_dev->driver (Uwe Kleine-König)   
  - fuse: don't unhash root (Miklos Szeredi)   
  - mmc: tmio: avoid concurrent runs of mmc_request_done() (Wolfram Sang)   
  - PM: sleep: wakeirq: fix wake irq warning in system suspend (Qingliang Li)   
  - USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M (Toru Katagiri)   
  - USB: serial: option: add MeiG Smart SLM320 product (Aurélien Jacobs)   
  - USB: serial: cp210x: add ID for MGP Instruments PDS100 (Christian Häggström)   
  - USB: serial: add device ID for VeriFone adapter (Cameron Williams)   
  - USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB (Daniel Vogelbacher)   
  - powerpc/fsl: Fix mfpmr build errors with newer binutils (Michael Ellerman)   
  - clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays (Gabor Juhos) [Orabug: 36596858] {CVE-2024-26965}
  - clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays (Gabor Juhos) [Orabug: 36596863] {CVE-2024-26966}
  - PM: suspend: Set mem_sleep_current during kernel command line setup (Maulik Shah)   
  - parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds (Guenter Roeck)   
  - parisc: Fix csum_ipv6_magic on 64-bit systems (Guenter Roeck)   
  - parisc: Fix csum_ipv6_magic on 32-bit systems (Guenter Roeck)   
  - parisc: Fix ip_fast_csum (Guenter Roeck)   
  - parisc: Do not hardcode registers in checksum functions (Helge Deller)   
  - ubi: correct the calculation of fastmap size (Zhang Yi)   
  - ubi: Check for too small LEB size in VTBL code (Richard Weinberger) [Orabug: 36356636] {CVE-2024-25739}
  - ubifs: Set page uptodate in the correct place (Matthew Wilcox (Oracle))   
  - fat: fix uninitialized field in nostale filehandles (Jan Kara) [Orabug: 36597869] {CVE-2024-26973}
  - crypto: qat - resolve race condition during AER recovery (Damian Muszynski) [Orabug: 36597874] {CVE-2024-26974}
  - crypto: qat - fix double free during reset (Svyatoslav Pankratov)   
  - sparc64: NMI watchdog: fix return value of __setup handler (Randy Dunlap)   
  - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [Orabug: 36597883] {CVE-2024-26976}
  - media: xc4000: Fix atomicity violation in xc4000_get_frequency (Gui-Dong Han)   
  - arm: dts: marvell: Fix maxium->maxim typo in brownstone dts (Duje Mihanović)   
  - ARM: dts: mmp2-brownstone: Don't redeclare phandle references (Lubomir Rintel)   
  - smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity() (Roberto Sassu)   
  - smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr() (Roberto Sassu)   
  - wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach (Zheng Wang) [Orabug: 36647652] {CVE-2023-47233} {CVE-2024-35811}
  - x86/bugs: Use sysfs_emit() (Borislav Petkov)   
  - LTS version: v4.14.344 (Yifei Liu)   
  - binder: signal epoll threads of self-work (Carlos Llamas) [Orabug: 36529906] {CVE-2024-26606}
  - ANDROID: binder: Add thread->process_todo flag. (Martijn Coenen)   
  - scsi: bnx2fc: Fix skb double free in bnx2fc_rcv() (Wei Yongjun)   
  - scsi: bnx2fc: Remove set but not used variable 'oxid' (YueHaibing)   
  - net: check dev->gso_max_size in gso_features_check() (Eric Dumazet)   
  - driver: staging: count ashmem_range into SLAB_RECLAIMBLE (Zhaoyang Huang)   
  - net: warn if gso_type isn't set for a GSO SKB (Heiner Kallweit)   
  - staging: android: ashmem: Remove use of unlikely() (Alistair Strachan)   
  - ALSA: hda/realtek: Enable headset on Lenovo M90 Gen5 (Bin Li)   
  - ALSA: hda/realtek: Enable headset onLenovo M70/M90 (Bin Li)   
  - ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB (Edward Pacman)   
  - ALSA: hda/realtek - ALC897 headset MIC no sound (Kailang Yang)   
  - ALSA: hda/realtek - Add headset Mic support for Lenovo ALC897 platform (Kailang Yang)   
  - ALSA: hda/realtek: Fix the mic type detection issue for ASUS G551JW (Hui Wang)   
  - ALSA: hda/realtek - The front Mic on a HP machine doesn't work (Jeremy Szu)   
  - ALSA: hda/realtek - Enable the headset of Acer N50-600 with ALC662 (Jian-Hong Pan)   
  - ALSA: hda/realtek - Enable headset mic of Acer X2660G with ALC662 (Jian-Hong Pan)   
  - ALSA: hda/realtek - Add Headset Mic supported for HP cPC (Kailang Yang)   
  - ALSA: hda/realtek - More constifications (Takashi Iwai)   
  - Add Acer Aspire Ethos 8951G model quirk (Sergey Bostandzhyan)   
  - devcoredump: Send uevent once devcd is ready (Mukesh Ojha)   
  - devcoredump : Serialize devcd_del work (Mukesh Ojha)   
  - netfilter: xt_owner: Fix for unsafe access of sk->sk_socket (Phil Sutter)   
  - netfilter: xt_owner: Add supplementary groups option (Lukasz Pawelczyk)   
  - mtd: cfi_cmdset_0001: Byte swap OTP info (Linus Walleij)   
  - mtd: cfi_cmdset_0001: Support the absence of protection registers (Jean-Philippe Brucker)   
  - s390/cmma: fix detection of DAT pages (Heiko Carstens)   
  - s390/mm: fix phys vs virt confusion in mark_kernel_pXd() functions family (Alexander Gordeev)   
  - ALSA: hda/realtek: Headset Mic VREF to 100% (Kailang Yang)   
  - hfsplus: unmap the page in the "fail_page" label (Fabio M. De Francesco)   
  - ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS (Marios Levogiannis)   
  - ALSA: hda/realtek: Enable audio jacks of ASUS D700SA with ALC887 (Jian-Hong Pan)   
  - ALSA: hda/realtek - Add quirk for Tuxedo XC 1509 (Richard Sailer)   
  - ALSA: hda/realtek - Headset microphone and internal speaker support for System76 oryp5 (Jeremy Soller)   
  - ALSA: hda/realtek - Clevo P950ER ALC1220 Fixup (Jeremy Soller)   
  - ALSA: hda/realtek - Add support for ALC1220 (Peisen)   
  - hv_netvsc: Fix race of register_netdevice_notifier and VF register (Haiyang Zhang)   
  - pwm: sti: Reduce number of allocations and drop usage of chip_data (Uwe Kleine-König)   
  - pwm: sti: Avoid conditional gotos (Thierry Reding)   
  - tools: iio: iio_generic_buffer ensure alignment (Matti Vaittinen)   
  - tools: iio: iio_generic_buffer: Fix some integer type and calculation (Chenyuan Mi)   
  - tools: iio: privatize globals and functions in iio_generic_buffer.c file (Alexandru Ardelean)   
  - leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu' (Christophe JAILLET)   
  - ledtrig-cpu: Limit to 8 CPUs (Pavel Machek)   
  - leds: pwm: Don't disable the PWM when the LED should be off (Uwe Kleine-König)   
  - leds: pwm: convert to atomic PWM API (Uwe Kleine-König)   
  - leds: pwm: simplify if condition (Uwe Kleine-König)   
  - regmap: debugfs: Fix a erroneous check after snprintf() (Christophe JAILLET)   
  - regmap: Allow missing device in regmap_name_read_file() (David Lechner)   
  - tcp_metrics: add missing barriers on delete (Eric Dumazet)   
  - tcp: batch tcp_net_metrics_exit (Eric Dumazet)   
  - tcp: fix excessive TLP and RACK timeouts from HZ rounding (Neal Cardwell)   
  - tcp: Namespace-ify sysctl_tcp_early_retrans (Eric Dumazet)   
  - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (Eric Dumazet)   
  - ata: libata-core: Do not register PM operations for SAS ports (Damien Le Moal)   
  - libata: make ata_port_type const (Bhumika Goyal)   
  - libata: Add new med_power_with_dipm link_power_management_policy setting (Hans de Goede)   
  - ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q (Kailang Yang)   
  - ALSA: hda - add Lenovo IdeaCentre B550 to the power_save_blacklist (Jaroslav Kysela)   
  - ALSA: hda: Add Intel NUC7i3BNB to the power_save blacklist (Hans de Goede)   
  - ext4: mark group as trimmed only if it was fully scanned (Dmitry Monakhov)   
  - ext4: add new helper interface ext4_try_to_trim_range() (Wang Jianchao)   
  - ext4: remove the 'group' parameter of ext4_trim_extent (Wang Jianchao)   
  - scsi: qla2xxx: Remove unsupported ql2xenabledif option (Manish Rangankar)   
  - usb: typec: tcpci: clear the fault status bit (Marco Felsch)   
  - usb: typec: add fwnode to tcpc (Li Jun)   
  - staging: typec: fix endianness mismatch identified by sparse (Gabriel L. Somlo)   
  - staging: typec: tcpm: Document data structures (Guenter Roeck)   
  - serial: sc16is7xx: fix broken port 0 uart init (Hugo Villeneuve)   
  - sc16is7xx: Set iobase to device index (Daniel Mack)   
  - dlm: fix plock lookup when using multiple lockspaces (Alexander Aring)   
  - drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (Yangtao Li)   
  - drm/tegra: Remove superfluous error messages around platform_get_irq() (Tan Zhongjun)   
  - ARM: dts: BCM53573: Drop nonexistent #usb-cells (Rafał Miłecki)   
  - ARM: dts: BCM5301X: Harmonize EHCI/OHCI DT nodes name (Serge Semin)   
  - wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (Fedor Pchelkin)   
  - ath9k: use irqsave() in USB's complete callback (Sebastian Andrzej Siewior)   
  - wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (Dmitry Antipov)   
  - mwifiex: switch from 'pci_' to 'dma_' API (Christophe JAILLET)   
  - mwifiex: drop 'set_consistent_dma_mask' log message (Brian Norris)   
  - bonding: fix macvlan over alb bond support (Hangbin Liu)   
  - net: remove bond_slave_has_mac_rcu() (Jakub Kicinski)   
  - fbdev: fix potential OOB read in fast_imageblit() (Zhang Shurong)   
  - fbdev: Fix sys_imageblit() for arbitrary image widths (Thomas Zimmermann)   
  - fbdev: Improve performance of sys_imageblit() (Thomas Zimmermann)   
  - tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (Sherry Sun)   
  - Revert "tty: serial: fsl_lpuart: drop earlycon entry for i.MX8QXP" (Alexander Stein)   
  - MIPS: cpu-features: Use boot_cpu_type for CPU type based features (Jiaxun Yang)   
  - MIPS: cpu-features: Enable octeon_cache by cpu_type (Jiaxun Yang)   
  - fs: dlm: fix mismatch of plock results from userspace (Alexander Aring)   
  - fs: dlm: use dlm_plock_info for do_unlock_close (Alexander Aring)   
  - fs: dlm: change plock interrupted message to debug again (Alexander Aring)   
  - fs: dlm: add pid to debug log (Alexander Aring)   
  - dlm: replace usage of found with dedicated list iterator variable (Jakob Koschel)   
  - dlm: improve plock logging if interrupted (Alexander Aring)   
  - nfsd: Remove incorrect check in nfsd4_validate_stateid (Trond Myklebust)   
  - nfsd4: kill warnings on testing stateids with mismatched clientids (J. Bruce Fields)   
  - mmc: meson-gx: remove redundant mmc_request_done() call from irq context (Martin Hundebøll)   
  - mmc: meson-gx: remove useless lock (Jerome Brunet)   
  - PM: sleep: wakeirq: fix wake irq arming (Johan Hovold)   
  - PM / wakeirq: support enabling wake-up irq after runtime_suspend called (Chunfeng Yun)   
  - scsi: zfcp: Defer fc_rport blocking until after ADISC response (Steffen Maier)   
  - scsi: zfcp: workqueue: set description for port work items with their WWPN as context (Steffen Maier)   
  - btrfs: check for commit error at btrfs_attach_transaction_barrier() (Filipe Manana)   
  - btrfs: simplify IS_ERR/PTR_ERR checks (Al Viro)   
  - fs: dlm: interrupt posix locks only when process is killed (Alexander Aring)   
  - dlm: rearrange async condition return (Alexander Aring)   
  - dlm: cleanup plock_op vs plock_xop (Alexander Aring)   
  - ext4: Fix reusing stale buffer heads from last failed mounting (Zhihao Cheng)   
  - ext4: rename journal_dev to s_journal_dev inside ext4_sb_info (Chunguang Xu)   
  - tcp: annotate data-races around tp->linger2 (Eric Dumazet)   
  - net: Replace the limit of TCP_LINGER2 with TCP_FIN_TIMEOUT_MAX (Cambda Zhu)   
  - ceph: don't let check_caps skip sending responses for revoke msgs (Xiubo Li)   
  - ceph: define argument structure for handle_cap_grant (Yan, Zheng)   
  - net: bcmgenet: Ensure MDIO unregistration has clocks enabled (Florian Fainelli)   
  - net: bcmgenet: Avoid calling platform_device_put() twice in bcmgenet_mii_exit() (Wei Yongjun)   
  - net: tcp_input: Neaten DBGUNDO (Joe Perches)   
  - i2c: xiic: Don't try to handle more interrupt events after error (Robert Hancock)   
  - i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() (Marek Vasut)   
  - i2c: xiic: Fix broken locking on tx_msg (Marek Vasut)   
  - i2c: xiic: Change code alignment to 1 space only (Jaakko Laine)   
  - i2c: xiic: Add timeout to the rx fifo wait loop (Shubhrajyoti Datta)   
  - i2c: xiic: Fix kerneldoc warnings (Shubhrajyoti Datta)   
  - hwrng: virtio - Fix race on data_avail and actual data (Herbert Xu)   
  - hwrng: virtio - always add a pending request (Laurent Vivier)   
  - hwrng: virtio - don't waste entropy (Laurent Vivier)   
  - hwrng: virtio - don't wait on cleanup (Laurent Vivier)   
  - hwrng: virtio - add an internal buffer (Laurent Vivier)   
  - nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect() (Krzysztof Kozlowski)   
  - nfc: constify several pointers to u8, char and sk_buff (Krzysztof Kozlowski)   
  - irqchip/jcore-aic: Fix missing allocation of IRQ descriptors (John Paul Adrian Glaubitz)   
  - irqchip/jcore-aic: Kill use of irq_create_strict_mappings() (Marc Zyngier)   
  - Documentation: fix little inconsistencies (Pavel Machek)   
  - usb: musb: fix MUSB_QUIRK_B_DISCONNECT_99 handling (Thomas Petazzoni)   
  - net/rose: fix races in rose_kill_by_device() (Eric Dumazet)   
  - reset: Fix crash when freeing non-existent optional resets (Geert Uytterhoeven)   
  - ksmbd: fix wrong name of SMB2_CREATE_ALLOCATION_SIZE (Namjae Jeon)   
  - PCI: keystone: Don't discard .probe() callback (Uwe Kleine-König)   
  - PCI: keystone: Don't discard .remove() callback (Uwe Kleine-König)   
  - can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() (Marc Kleine-Budde)   
  - can: dev: can_restart(): don't crash kernel if carrier is OK (Marc Kleine-Budde)   
  - r8169: fix the KCSAN reported data-race in rtl_tx while reading TxDescArray[entry].opts1 (Mirsad Goran Todorovac)   
  - xen-netback: use default TX queue size for vifs (Roger Pau Monne)   
  - MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled (Christoph Hellwig)   
  - arm64: dts: qcom: msm8996: Add missing interrupt to the USB2 controller (Konrad Dybcio)   
  - regmap: Account for register length in SMBus I/O limits (Mark Brown)   
  - x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms (Zhang Rui)   
  - ASoC: cs42l51: fix driver to properly autoload with automatic module loading (Thomas Petazzoni)   
  - PCI: qcom: Disable write access to read only registers for IP v2.3.3 (Manivannan Sadhasivam)   
  - pinctrl: amd: Only use special debounce behavior for GPIO 0 (Mario Limonciello)   
  - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Daniel Vacek) [Orabug: 36768894] {CVE-2024-26766}
  - usb: fotg210-hcd: delete an incorrect bounds test (Dan Carpenter)   
  - smb: client: fix OOB in smbCalcSize() (Paulo Alcantara)   
  - btrfs: do not allow non subvolume root targets for snapshot (Josef Bacik)   
  - pinctrl: at91-pio4: use dedicated lock class for IRQ (Alexis Lothoré)   
  - net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() (Liu Jian)   
  - arm64: dts: mediatek: mt8173-evb: Fix regulator-fixed node names (AngeloGioacchino Del Regno)   
  - IB/isert: Fix unaligned immediate-data handling (Sagi Grimberg)   
  - fbdev: stifb: Make the STI next font pointer a 32-bit signed offset (Helge Deller)   
  - smb3: fix touch -h of symlink (Steve French)   
  - MIPS: KVM: Fix a build warning about variable set but not used (Huacai Chen)   
  - cifs: spnego: add ';' in HOST_KEY_LEN (Anastasia Belova)   
  - macvlan: Don't propagate promisc change to lower dev in passthru (Vlad Buslov)   
  - ppp: limit MRU to 64K (Willem de Bruijn)   
  - ptp: annotate data-race around q->head and q->tail (Eric Dumazet)   
  - xen/events: fix delayed eoi list handling (Juergen Gross)   
  - tipc: Fix kernel-infoleak due to uninitialized TLV value (Shigeru Yoshida)   
  - tty: Fix uninit-value access in ppp_sync_receive() (Shigeru Yoshida)   
  - iio: exynos-adc: request second interupt only when touchscreen mode is used (Marek Szyprowski)   
  - selftests/ftrace: Add new test case which checks non unique symbol (Francis Laniel)   
  - media: v4l2-fwnode: fix v4l2_fwnode_parse_link handling (Marco Felsch)   
  - block: fix signed int overflow in Amiga partition support (Michael Schmitz)   
  - iio: addac: stx104: Fix race condition for stx104_write_raw() (William Breathitt Gray)   
  - ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (Chao Yu)   
  - btrfs: fix extent buffer leak after tree mod log failure at split_node() (Filipe Manana)   
  - pinctrl: amd: Detect internal GPIO0 debounce handling (Mario Limonciello)   
  - ALSA: jack: Fix mutex call in snd_jack_report() (Takashi Iwai)   
  - IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors (Patrick Kelsey)   
  - ARM: 9303/1: kprobes: avoid missing-declaration warnings (Arnd Bergmann)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.538.4.el7uek]
changelog:
  - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Herbert Xu) [Orabug: 36830462] {CVE-2024-39493}
  - x86/boot: Ignore relocations in .notes sections in walk_relocs() too (Guixiong Wei)   
  - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Yu Kuai) [Orabug: 36809271] {CVE-2024-39476}
  - vxlan: Fix regression when dropping packets due to invalid src addresses (Daniel Borkmann)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.539.1.el7uek]
changelog:
  - xfs: make sure sb_fdblocks is non-negative (Wengang Wang)  [Orabug: 36759719]  
  - xfs: fix sb write verify for lazysbcount (Wengang Wang)  [Orabug: 36759719]  
  - rds/rdma: Track rds_message in send, retrans and recv queue (Juan Garcia)  [Orabug: 36529577]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.539.3.el7uek]
changelog:
  - nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() (Ryosuke Yasuoka)   
  - nfc: nci: Fix uninit-value in nci_rx_work (Ryosuke Yasuoka)   
  - nfc: nci: Fix kcov check in nci_rx_work() (Tetsuo Handa)   
  - vxlan: Fix regression when dropping packets due to invalid src addresses (Daniel Borkmann)   
  - speakup: Fix sizeof() vs ARRAY_SIZE() bug (Dan Carpenter)   
  - rds/ib: decrement ib_rx_total_incs after releasing associated cache (Arumugam Kolappan)  [Orabug: 36760267]  
  - rds/rdma: Send info to userspace, even if connnection is down. (Juan Garcia)  [Orabug: 36529474]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.539.5.el7uek]
changelog:
  - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Jan Kara)   
  - net/mlx5e: drop shorter ethernet frames (Manjunath Patil)  [Orabug: 36879158]  {CVE-2024-41090} {CVE-2024-41091}


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.539.3.el7uek]
changelog:
  - nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() (Ryosuke Yasuoka)   
  - nfc: nci: Fix uninit-value in nci_rx_work (Ryosuke Yasuoka) [Orabug: 36768759] {CVE-2024-38381}
  - nfc: nci: Fix kcov check in nci_rx_work() (Tetsuo Handa)   
  - vxlan: Fix regression when dropping packets due to invalid src addresses (Daniel Borkmann)   
  - speakup: Fix sizeof() vs ARRAY_SIZE() bug (Dan Carpenter) [Orabug: 36765637] {CVE-2024-38587}
  - rds/ib: decrement ib_rx_total_incs after releasing associated cache (Arumugam Kolappan)  [Orabug: 36760267]  
  - rds/rdma: Send info to userspace, even if connnection is down. (Juan Garcia)  [Orabug: 36529474]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.540.1.el7uek]
changelog:
  - x86/cpu: Avoid cpuinfo-induced IPI pileups (Paul E. McKenney)  [Orabug: 35773812]  
  - LTS version v4.14.349 (Yifei Liu)   
  - x86/kvm: Disable all PV features on crash (Vitaly Kuznetsov)   
  - x86/kvm: Disable kvmclock on all CPUs on shutdown (Vitaly Kuznetsov)   
  - x86/kvm: Teardown PV features on boot CPU as well (Vitaly Kuznetsov)   
  - nfs: fix undefined behavior in nfs_block_bits() (Sergey Shtylyov)   
  - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Baokun Li) [Orabug: 36774600] {CVE-2024-39276}
  - sparc: move struct termio to asm/termios.h (Mike Gilbert)   
  - kdb: Use format-specifiers rather than memset() for padding in kdb_read() (Daniel Thompson)   
  - kdb: Merge identical case statements in kdb_read() (Daniel Thompson)   
  - kdb: Fix console handling when editing and tab-completing commands (Daniel Thompson)   
  - kdb: Use format-strings rather than '- kdb: Fix buffer overflow during tab-complete (Daniel Thompson) [Orabug: 36809289] {CVE-2024-39480}
  - sparc64: Fix number of online CPUs (Sam Ravnborg)   
  - intel_th: pci: Add Meteor Lake-S CPU support (Alexander Shishkin)   
  - net/9p: fix uninit-value in p9_client_rpc() (Nikita Zhandarovich) [Orabug: 36774613] {CVE-2024-39301}
  - KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode (Marc Zyngier)   
  - netfilter: nft_dynset: relax superfluous check on set updates (Pablo Neira Ayuso)   
  - netfilter: nft_dynset: report EOPNOTSUPP on missing set feature (Pablo Neira Ayuso)   
  - netfilter: nf_tables: don't skip expired elements during walk (Pablo Neira Ayuso)   
  - netfilter: nf_tables: drop map element references from preparation phase (Pablo Neira Ayuso)   
  - netfilter: nf_tables: pass ctx to nf_tables_expr_destroy() (Pablo Neira Ayuso)   
  - netfilter: nftables: rename set element data activation/deactivation functions (Pablo Neira Ayuso)   
  - netfilter: nf_tables: pass context to nft_set_destroy() (Pablo Neira Ayuso)   
  - netfilter: nf_tables: fix set double-free in abort path (Pablo Neira Ayuso)   
  - netfilter: nf_tables: add nft_set_is_anonymous() helper (Pablo Neira Ayuso)   
  - fbdev: savage: Handle err return when savagefb_check_var failed (Cai Xinchen) [Orabug: 36809265] {CVE-2024-39475}
  - media: v4l2-core: hold videodev_lock until dev reg, finishes (Hans Verkuil)   
  - media: mxl5xx: Move xpt structures off stack (Nathan Chancellor)   
  - arm64: dts: hi3798cv200: fix the size of GICR (Yang Xiwen)   
  - arm64: tegra: Correct Tegra132 I2C alias (Krzysztof Kozlowski)   
  - ata: pata_legacy: make legacy_exit() work again (Sergey Shtylyov)   
  - neighbour: fix unaligned access to pneigh_entry (Qingfang DENG)   
  - nilfs2: fix use-after-free of timer for log writer thread (Ryusuke Konishi) [Orabug: 36753565] {CVE-2024-38583}
  - fs/nilfs2: convert timers to use timer_setup() (Kees Cook)   
  - mmc: core: Do not force a retune before RPMB switch (Jorge Ramirez-Ortiz)   
  - binder: fix max_thread type inconsistency (Carlos Llamas)   
  - ALSA: timer: Set lower bound of start tick time (Takashi Iwai) [Orabug: 36753730] {CVE-2024-38618}
  - ALSA: timer: Simplify timer hw resolution calls (Takashi Iwai)   
  - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Yue Haibing) [Orabug: 36763552] {CVE-2024-33621}
  - ipvlan: add ipvlan_route_v6_outbound() helper (Eric Dumazet) [Orabug: 36940543] {CVE-2023-52796}
  - ipvlan: properly track tx_errors (Eric Dumazet)   
  - net: add DEV_STATS_READ() helper (Eric Dumazet)   
  - kconfig: fix comparison to constant symbols, 'm', 'n' (Masahiro Yamada)   
  - net:fec: Add fec_enet_deinit() (Xiaolei Wang)   
  - net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM (Parthiban Veerasooran)   
  - smsc95xx: use usbnet->driver_priv (Andre Edich)   
  - smsc95xx: remove redundant function arguments (Andre Edich)   
  - enic: Validate length of nl attributes in enic_set_vf_port (Roded Zats) [Orabug: 36763837] {CVE-2024-38659}
  - dma-buf/sw-sync: don't enable IRQ from sync_print_obj() (Tetsuo Handa) [Orabug: 36763846] {CVE-2024-38780}
  - net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion (Carolina Jubran)   
  - nvmet: fix ns enable/disable possible hang (Sagi Grimberg)   
  - spi: Don't mark message DMA mapped when no transfer in it is (Andy Shevchenko)   
  - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Eric Dumazet) [Orabug: 36763571] {CVE-2024-36286}
  - net: fec: avoid lock evasion when reading pps_enable (Wei Fang)   
  - net: fec: remove redundant variable 'inc' (Colin Ian King)   
  - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails (Jiri Pirko) [Orabug: 36763588] {CVE-2024-37353}
  - arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY (Jiangfeng Xiao) [Orabug: 36825259] {CVE-2024-39488}
  - openvswitch: Set the skbuff pkt_type for proper pmtud support. (Aaron Conole)   
  - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (Kuniyuki Iwashima) [Orabug: 36763592] {CVE-2024-37356}
  - params: lift param_set_uint_minmax to common code (Sagi Grimberg)   
  - ipv6: sr: fix memleak in seg6_hmac_init_algo (Hangbin Liu) [Orabug: 36825263] {CVE-2024-39489}
  - x86/kconfig: Select ARCH_WANT_FRAME_POINTERS again when UNWINDER_FRAME_POINTER=y (Masahiro Yamada)   
  - null_blk: Fix the WARNING: modpost: missing MODULE_DESCRIPTION() (Zhu Yanjun)   
  - media: cec: cec-api: add locking in cec_release() (Hans Verkuil)   
  - um: Fix the -Wmissing-prototypes warning for __switch_mm (Tiwei Bie)   
  - powerpc/pseries: Add failure related checks for h_get_mpp and h_get_ppp (Shrikanth Hegde)   
  - media: stk1160: fix bounds checking in stk1160_copy_video() (Dan Carpenter) [Orabug: 36763603] {CVE-2024-38621}
  - um: Add winch to winch_handlers before registering winch IRQ (Roberto Sassu) [Orabug: 36768584] {CVE-2024-39292}
  - um: Fix return value in ubd_init() (Duoming Zhou)   
  - Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation (Fenglin Wu)   
  - Input: ims-pcu - fix printf string overflow (Arnd Bergmann)   
  - libsubcmd: Fix parse-options memory leak (Ian Rogers)   
  - f2fs: add error prints for debugging mount failure (Sahitya Tummala)   
  - extcon: max8997: select IRQ_DOMAIN instead of depending on it (Randy Dunlap)   
  - ppdev: Add an error check in register_device (Huai-Yuan Liu) [Orabug: 36678065] {CVE-2024-36015}
  - stm class: Fix a double free in stm_register_device() (Dan Carpenter) [Orabug: 36763764] {CVE-2024-38627}
  - usb: gadget: u_audio: Clear uac pointer when freed. (Chris Wulff)   
  - greybus: arche-ctrl: move device table to its right location (Arnd Bergmann)   
  - serial: max3100: Fix bitwise types (Andy Shevchenko)   
  - serial: max3100: Update uart_driver_registered on driver removal (Andy Shevchenko) [Orabug: 36763815] {CVE-2024-38633}
  - serial: max3100: Lock port->lock when calling uart_handle_cts_change() (Andy Shevchenko) [Orabug: 36763820] {CVE-2024-38634}
  - firmware: dmi-id: add a release callback function (Arnd Bergmann)   
  - dmaengine: idma64: Add check for dma_set_max_seg_size (Chen Ni)   
  - greybus: lights: check return of get_channel_from_mode (Rui Miguel Silva) [Orabug: 36763833] {CVE-2024-38637}
  - sched/fair: Allow disabling sched_balance_newidle with sched_relax_domain_level (Vitalii Bursov)   
  - sched/topology: Don't set SD_BALANCE_WAKE on cpuset domain relax (Valentin Schneider)   
  - af_packet: do not call packet_read_pending() from tpacket_destruct_skb() (Eric Dumazet)   
  - netrom: fix possible dead-lock in nr_rt_ioctl() (Eric Dumazet) [Orabug: 36753582] {CVE-2024-38589}
  - RDMA/IPoIB: Fix format truncation compilation errors (Leon Romanovsky)   
  - RDMA/ipoib: Fix use of sizeof() (Kamal Heib)   
  - selftests/kcmp: remove unused open mode (Edward Liaw)   
  - selftests/kcmp: Make the test output consistent and clear (Gautam Menghani)   
  - ext4: avoid excessive credit estimate in ext4_tmpfile() (Jan Kara)   
  - x86/insn: Fix PUSH instruction in x86 instruction decoder opcode map (Adrian Hunter)   
  - ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value (Steven Rostedt)   
  - fbdev: sh7760fb: allow modular build (Randy Dunlap)   
  - media: radio-shark2: Avoid led_names truncations (Ricardo Ribalda)   
  - media: ngene: Add dvb_ca_en50221_init return value check (Aleksandr Burakov)   
  - powerpc/fsl-soc: hide unused const variable (Arnd Bergmann)   
  - drm/mediatek: Add 0 size check to mtk_drm_gem_obj (Justin Green) [Orabug: 36753415] {CVE-2024-38549}
  - fbdev: shmobile: fix snprintf truncation (Arnd Bergmann)   
  - mtd: rawnand: hynix: fixed typo (Maxim Korotkov)   
  - ipv6: sr: fix invalid unregister error path (Hangbin Liu) [Orabug: 36753711] {CVE-2024-38612}
  - ipv6: sr: fix incorrect unregister order (Hangbin Liu)   
  - ipv6: sr: add missing seg6_local_exit (Hangbin Liu)   
  - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (Ilya Maximets) [Orabug: 36753463] {CVE-2024-38558}
  - net: usb: smsc95xx: stop lying about skb->truesize (Eric Dumazet)   
  - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Breno Leitao) [Orabug: 36753600] {CVE-2024-38596}
  - m68k: mac: Fix reboot hang on Mac IIci (Finn Thain)   
  - m68k/mac: Use '030 reset method on SE/30 (Finn Thain)   
  - m68k: Fix spinlock race in kernel thread creation (Michael Schmitz) [Orabug: 36753715] {CVE-2024-38613}
  - net: usb: sr9700: stop lying about skb->truesize (Eric Dumazet)   
  - wifi: mwl8k: initialize cmd->addr[] properly (Dan Carpenter)   
  - scsi: qedf: Ensure the copied buf is NUL terminated (Bui Quang Minh) [Orabug: 36753468] {CVE-2024-38559}
  - scsi: bfa: Ensure the copied buf is NUL terminated (Bui Quang Minh) [Orabug: 36753473] {CVE-2024-38560}
  - Revert "sh: Handle calling csum_partial with misaligned data" (Guenter Roeck)   
  - sh: kprobes: Merge arch_copy_kprobe() into arch_prepare_kprobe() (Geert Uytterhoeven)   
  - wifi: ar5523: enable proper endpoint verification (Nikita Zhandarovich) [Orabug: 36753486] {CVE-2024-38565}
  - wifi: carl9170: add a proper sanity check for endpoints (Nikita Zhandarovich) [Orabug: 36753509] {CVE-2024-38567}
  - macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" (Finn Thain)   
  - macintosh/via-macii, macintosh/adb-iop: Clean up whitespace (Finn Thain)   
  - m68k/mac: Add mutual exclusion for IOP interrupt polling (Finn Thain)   
  - macintosh/via-macii: Remove BUG_ON assertions (Finn Thain)   
  - wifi: ath10k: Fix an error code problem in ath10k_dbg_sta_write_peer_debug_trigger() (Su Hui)   
  - scsi: hpsa: Fix allocation size for Scsi_Host private data (Yuri Karpov)   
  - scsi: libsas: Fix the failure of adding phy with zero-address to port (Xingui Yang)   
  - ACPI: disable -Wstringop-truncation (Arnd Bergmann)   
  - irqchip/alpine-msi: Fix off-by-one in allocation error path (Zenghui Yu)   
  - scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL (Andrew Halaney)   
  - scsi: ufs: core: Perform read back after disabling interrupts (Andrew Halaney)   
  - scsi: ufs: qcom: Perform read back after writing reset bit (Andrew Halaney)   
  - wifi: ath10k: poll service ready message before failing (Baochen Qiang)   
  - nfsd: drop st_mutex before calling move_to_close_lru() (NeilBrown)   
  - null_blk: Fix missing mutex_destroy() at module removal (Zhu Yanjun)   
  - jffs2: prevent xattr node from overflowing the eraseblock (Ilya Denisyev) [Orabug: 36753652] {CVE-2024-38599}
  - crypto: ccp - drop platform ifdef checks (Arnd Bergmann)   
  - parisc: add missing export of __cmpxchg_u8() (Al Viro)   
  - nilfs2: fix out-of-range warning (Arnd Bergmann)   
  - ecryptfs: Fix buffer size for tag 66 packet (Brian Kubisiak) [Orabug: 36753537] {CVE-2024-38578}
  - firmware: raspberrypi: Use correct device for DMA mappings (Laurent Pinchart)   
  - crypto: bcm - Fix pointer arithmetic (Aleksandr Mishin) [Orabug: 36753542] {CVE-2024-38579}
  - ASoC: da7219-aad: fix usage of device_get_named_child_node() (Pierre-Louis Bossart)   
  - ASoC: dt-bindings: rt5645: add cbj sleeve gpio property (Derek Fang)   
  - ASoC: rt5645: Fix the electric noise due to the CBJ contacts floating (Derek Fang)   
  - net: usb: qmi_wwan: add Telit FN920C04 compositions (Daniele Palmas)   
  - wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class (Igor Artemiev)   
  - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Daniel Starke) [Orabug: 36678069] {CVE-2024-36016}
  - nilfs2: fix potential hang in nilfs_detach_log_writer() (Ryusuke Konishi) [Orabug: 36753558] {CVE-2024-38582}
  - nilfs2: fix unexpected freezing of nilfs_segctor_sync() (Ryusuke Konishi)   
  - ring-buffer: Fix a race between readers and resize checks (Petr Pavlu) [Orabug: 36753662] {CVE-2024-38601}


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.540.2.el7uek]
changelog:
  - fsnotify: clear PARENT_WATCHED flags lazily (Amir Goldstein)  [Orabug: 36922242]  
  - cifs: fix panic in smb2_reconnect (Ronnie Sahlberg)  [Orabug: 36314494]  
  - cifs: convert cifs_put_smb_ses from static to global (Dai Ngo)  [Orabug: 36314494]  
  - net: relax socket state check at accept time. (Paolo Abeni) [Orabug: 36768890] {CVE-2024-36484}


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.540.4.el7uek]
changelog:
  - kdb: Use the passed prompt in kdb_position_cursor() (Douglas Anderson)   
  - ipvs: Avoid unnecessary calls to skb_is_gso_sctp (Ismael Luceno)   
  - printk: add kthread for long-running print (Stephen Brennan)  [Orabug: 36208661]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.540.4.1.el7uek]
changelog:
  - Revert "selftests/kcmp: Make the test output consistent and clear" (Samasth Norway Ananda)  [Orabug: 37029311]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.540.1.el7uek]
changelog:
  - x86/cpu: Avoid cpuinfo-induced IPI pileups (Paul E. McKenney)  [Orabug: 35773812]  
  - LTS version v4.14.349 (Yifei Liu)   
  - x86/kvm: Disable all PV features on crash (Vitaly Kuznetsov)   
  - x86/kvm: Disable kvmclock on all CPUs on shutdown (Vitaly Kuznetsov) [Orabug: 37042759] {CVE-2021-47110}
  - x86/kvm: Teardown PV features on boot CPU as well (Vitaly Kuznetsov) [Orabug: 37042767] {CVE-2021-47112}
  - nfs: fix undefined behavior in nfs_block_bits() (Sergey Shtylyov)   
  - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Baokun Li) [Orabug: 36774600] {CVE-2024-39276}
  - sparc: move struct termio to asm/termios.h (Mike Gilbert)   
  - kdb: Use format-specifiers rather than memset() for padding in kdb_read() (Daniel Thompson)   
  - kdb: Merge identical case statements in kdb_read() (Daniel Thompson)   
  - kdb: Fix console handling when editing and tab-completing commands (Daniel Thompson)   
  - kdb: Use format-strings rather than '- kdb: Fix buffer overflow during tab-complete (Daniel Thompson) [Orabug: 36809289] {CVE-2024-39480}
  - sparc64: Fix number of online CPUs (Sam Ravnborg)   
  - intel_th: pci: Add Meteor Lake-S CPU support (Alexander Shishkin)   
  - net/9p: fix uninit-value in p9_client_rpc() (Nikita Zhandarovich) [Orabug: 36774613] {CVE-2024-39301}
  - KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode (Marc Zyngier)   
  - netfilter: nft_dynset: relax superfluous check on set updates (Pablo Neira Ayuso)   
  - netfilter: nft_dynset: report EOPNOTSUPP on missing set feature (Pablo Neira Ayuso)   
  - netfilter: nf_tables: don't skip expired elements during walk (Pablo Neira Ayuso)   
  - netfilter: nf_tables: drop map element references from preparation phase (Pablo Neira Ayuso)   
  - netfilter: nf_tables: pass ctx to nf_tables_expr_destroy() (Pablo Neira Ayuso)   
  - netfilter: nftables: rename set element data activation/deactivation functions (Pablo Neira Ayuso)   
  - netfilter: nf_tables: pass context to nft_set_destroy() (Pablo Neira Ayuso)   
  - netfilter: nf_tables: fix set double-free in abort path (Pablo Neira Ayuso)   
  - netfilter: nf_tables: add nft_set_is_anonymous() helper (Pablo Neira Ayuso)   
  - fbdev: savage: Handle err return when savagefb_check_var failed (Cai Xinchen) [Orabug: 36809265] {CVE-2024-39475}
  - media: v4l2-core: hold videodev_lock until dev reg, finishes (Hans Verkuil)   
  - media: mxl5xx: Move xpt structures off stack (Nathan Chancellor)   
  - arm64: dts: hi3798cv200: fix the size of GICR (Yang Xiwen)   
  - arm64: tegra: Correct Tegra132 I2C alias (Krzysztof Kozlowski)   
  - ata: pata_legacy: make legacy_exit() work again (Sergey Shtylyov)   
  - neighbour: fix unaligned access to pneigh_entry (Qingfang DENG)   
  - nilfs2: fix use-after-free of timer for log writer thread (Ryusuke Konishi) [Orabug: 36753565] {CVE-2024-38583}
  - fs/nilfs2: convert timers to use timer_setup() (Kees Cook)   
  - mmc: core: Do not force a retune before RPMB switch (Jorge Ramirez-Ortiz)   
  - binder: fix max_thread type inconsistency (Carlos Llamas)   
  - ALSA: timer: Set lower bound of start tick time (Takashi Iwai) [Orabug: 36753730] {CVE-2024-38618}
  - ALSA: timer: Simplify timer hw resolution calls (Takashi Iwai)   
  - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Yue Haibing) [Orabug: 36763552] {CVE-2024-33621}
  - ipvlan: add ipvlan_route_v6_outbound() helper (Eric Dumazet) [Orabug: 36940543] {CVE-2023-52796}
  - ipvlan: properly track tx_errors (Eric Dumazet)   
  - net: add DEV_STATS_READ() helper (Eric Dumazet)   
  - kconfig: fix comparison to constant symbols, 'm', 'n' (Masahiro Yamada)   
  - net:fec: Add fec_enet_deinit() (Xiaolei Wang)   
  - net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM (Parthiban Veerasooran)   
  - smsc95xx: use usbnet->driver_priv (Andre Edich)   
  - smsc95xx: remove redundant function arguments (Andre Edich)   
  - enic: Validate length of nl attributes in enic_set_vf_port (Roded Zats) [Orabug: 36763837] {CVE-2024-38659}
  - dma-buf/sw-sync: don't enable IRQ from sync_print_obj() (Tetsuo Handa) [Orabug: 36763846] {CVE-2024-38780}
  - net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion (Carolina Jubran)   
  - nvmet: fix ns enable/disable possible hang (Sagi Grimberg)   
  - spi: Don't mark message DMA mapped when no transfer in it is (Andy Shevchenko)   
  - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Eric Dumazet) [Orabug: 36763571] {CVE-2024-36286}
  - net: fec: avoid lock evasion when reading pps_enable (Wei Fang)   
  - net: fec: remove redundant variable 'inc' (Colin Ian King)   
  - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails (Jiri Pirko) [Orabug: 36763588] {CVE-2024-37353}
  - arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY (Jiangfeng Xiao) [Orabug: 36825259] {CVE-2024-39488}
  - openvswitch: Set the skbuff pkt_type for proper pmtud support. (Aaron Conole)   
  - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (Kuniyuki Iwashima) [Orabug: 36763592] {CVE-2024-37356}
  - params: lift param_set_uint_minmax to common code (Sagi Grimberg)   
  - ipv6: sr: fix memleak in seg6_hmac_init_algo (Hangbin Liu) [Orabug: 36825263] {CVE-2024-39489}
  - x86/kconfig: Select ARCH_WANT_FRAME_POINTERS again when UNWINDER_FRAME_POINTER=y (Masahiro Yamada)   
  - null_blk: Fix the WARNING: modpost: missing MODULE_DESCRIPTION() (Zhu Yanjun)   
  - media: cec: cec-api: add locking in cec_release() (Hans Verkuil)   
  - um: Fix the -Wmissing-prototypes warning for __switch_mm (Tiwei Bie)   
  - powerpc/pseries: Add failure related checks for h_get_mpp and h_get_ppp (Shrikanth Hegde)   
  - media: stk1160: fix bounds checking in stk1160_copy_video() (Dan Carpenter) [Orabug: 36763603] {CVE-2024-38621}
  - um: Add winch to winch_handlers before registering winch IRQ (Roberto Sassu) [Orabug: 36768584] {CVE-2024-39292}
  - um: Fix return value in ubd_init() (Duoming Zhou)   
  - Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation (Fenglin Wu)   
  - Input: ims-pcu - fix printf string overflow (Arnd Bergmann)   
  - libsubcmd: Fix parse-options memory leak (Ian Rogers)   
  - f2fs: add error prints for debugging mount failure (Sahitya Tummala)   
  - extcon: max8997: select IRQ_DOMAIN instead of depending on it (Randy Dunlap)   
  - ppdev: Add an error check in register_device (Huai-Yuan Liu) [Orabug: 36678065] {CVE-2024-36015}
  - stm class: Fix a double free in stm_register_device() (Dan Carpenter) [Orabug: 36763764] {CVE-2024-38627}
  - usb: gadget: u_audio: Clear uac pointer when freed. (Chris Wulff)   
  - greybus: arche-ctrl: move device table to its right location (Arnd Bergmann)   
  - serial: max3100: Fix bitwise types (Andy Shevchenko)   
  - serial: max3100: Update uart_driver_registered on driver removal (Andy Shevchenko) [Orabug: 36763815] {CVE-2024-38633}
  - serial: max3100: Lock port->lock when calling uart_handle_cts_change() (Andy Shevchenko) [Orabug: 36763820] {CVE-2024-38634}
  - firmware: dmi-id: add a release callback function (Arnd Bergmann)   
  - dmaengine: idma64: Add check for dma_set_max_seg_size (Chen Ni)   
  - greybus: lights: check return of get_channel_from_mode (Rui Miguel Silva) [Orabug: 36763833] {CVE-2024-38637}
  - sched/fair: Allow disabling sched_balance_newidle with sched_relax_domain_level (Vitalii Bursov)   
  - sched/topology: Don't set SD_BALANCE_WAKE on cpuset domain relax (Valentin Schneider)   
  - af_packet: do not call packet_read_pending() from tpacket_destruct_skb() (Eric Dumazet)   
  - netrom: fix possible dead-lock in nr_rt_ioctl() (Eric Dumazet) [Orabug: 36753582] {CVE-2024-38589}
  - RDMA/IPoIB: Fix format truncation compilation errors (Leon Romanovsky)   
  - RDMA/ipoib: Fix use of sizeof() (Kamal Heib)   
  - selftests/kcmp: remove unused open mode (Edward Liaw)   
  - selftests/kcmp: Make the test output consistent and clear (Gautam Menghani)   
  - ext4: avoid excessive credit estimate in ext4_tmpfile() (Jan Kara)   
  - x86/insn: Fix PUSH instruction in x86 instruction decoder opcode map (Adrian Hunter)   
  - ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value (Steven Rostedt)   
  - fbdev: sh7760fb: allow modular build (Randy Dunlap)   
  - media: radio-shark2: Avoid led_names truncations (Ricardo Ribalda)   
  - media: ngene: Add dvb_ca_en50221_init return value check (Aleksandr Burakov)   
  - powerpc/fsl-soc: hide unused const variable (Arnd Bergmann)   
  - drm/mediatek: Add 0 size check to mtk_drm_gem_obj (Justin Green) [Orabug: 36753415] {CVE-2024-38549}
  - fbdev: shmobile: fix snprintf truncation (Arnd Bergmann)   
  - mtd: rawnand: hynix: fixed typo (Maxim Korotkov)   
  - ipv6: sr: fix invalid unregister error path (Hangbin Liu) [Orabug: 36753711] {CVE-2024-38612}
  - ipv6: sr: fix incorrect unregister order (Hangbin Liu)   
  - ipv6: sr: add missing seg6_local_exit (Hangbin Liu)   
  - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (Ilya Maximets) [Orabug: 36753463] {CVE-2024-38558}
  - net: usb: smsc95xx: stop lying about skb->truesize (Eric Dumazet)   
  - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Breno Leitao) [Orabug: 36753600] {CVE-2024-38596}
  - m68k: mac: Fix reboot hang on Mac IIci (Finn Thain)   
  - m68k/mac: Use '030 reset method on SE/30 (Finn Thain)   
  - m68k: Fix spinlock race in kernel thread creation (Michael Schmitz) [Orabug: 36753715] {CVE-2024-38613}
  - net: usb: sr9700: stop lying about skb->truesize (Eric Dumazet)   
  - wifi: mwl8k: initialize cmd->addr[] properly (Dan Carpenter)   
  - scsi: qedf: Ensure the copied buf is NUL terminated (Bui Quang Minh) [Orabug: 36753468] {CVE-2024-38559}
  - scsi: bfa: Ensure the copied buf is NUL terminated (Bui Quang Minh) [Orabug: 36753473] {CVE-2024-38560}
  - Revert "sh: Handle calling csum_partial with misaligned data" (Guenter Roeck)   
  - sh: kprobes: Merge arch_copy_kprobe() into arch_prepare_kprobe() (Geert Uytterhoeven)   
  - wifi: ar5523: enable proper endpoint verification (Nikita Zhandarovich) [Orabug: 36753486] {CVE-2024-38565}
  - wifi: carl9170: add a proper sanity check for endpoints (Nikita Zhandarovich) [Orabug: 36753509] {CVE-2024-38567}
  - macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" (Finn Thain)   
  - macintosh/via-macii, macintosh/adb-iop: Clean up whitespace (Finn Thain)   
  - m68k/mac: Add mutual exclusion for IOP interrupt polling (Finn Thain)   
  - macintosh/via-macii: Remove BUG_ON assertions (Finn Thain)   
  - wifi: ath10k: Fix an error code problem in ath10k_dbg_sta_write_peer_debug_trigger() (Su Hui)   
  - scsi: hpsa: Fix allocation size for Scsi_Host private data (Yuri Karpov)   
  - scsi: libsas: Fix the failure of adding phy with zero-address to port (Xingui Yang)   
  - ACPI: disable -Wstringop-truncation (Arnd Bergmann)   
  - irqchip/alpine-msi: Fix off-by-one in allocation error path (Zenghui Yu)   
  - scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL (Andrew Halaney)   
  - scsi: ufs: core: Perform read back after disabling interrupts (Andrew Halaney)   
  - scsi: ufs: qcom: Perform read back after writing reset bit (Andrew Halaney)   
  - wifi: ath10k: poll service ready message before failing (Baochen Qiang)   
  - nfsd: drop st_mutex before calling move_to_close_lru() (NeilBrown)   
  - null_blk: Fix missing mutex_destroy() at module removal (Zhu Yanjun)   
  - jffs2: prevent xattr node from overflowing the eraseblock (Ilya Denisyev) [Orabug: 36753652] {CVE-2024-38599}
  - crypto: ccp - drop platform ifdef checks (Arnd Bergmann)   
  - parisc: add missing export of __cmpxchg_u8() (Al Viro)   
  - nilfs2: fix out-of-range warning (Arnd Bergmann)   
  - ecryptfs: Fix buffer size for tag 66 packet (Brian Kubisiak) [Orabug: 36753537] {CVE-2024-38578}
  - firmware: raspberrypi: Use correct device for DMA mappings (Laurent Pinchart)   
  - crypto: bcm - Fix pointer arithmetic (Aleksandr Mishin) [Orabug: 36753542] {CVE-2024-38579}
  - ASoC: da7219-aad: fix usage of device_get_named_child_node() (Pierre-Louis Bossart)   
  - ASoC: dt-bindings: rt5645: add cbj sleeve gpio property (Derek Fang)   
  - ASoC: rt5645: Fix the electric noise due to the CBJ contacts floating (Derek Fang)   
  - net: usb: qmi_wwan: add Telit FN920C04 compositions (Daniele Palmas)   
  - wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class (Igor Artemiev)   
  - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Daniel Starke) [Orabug: 36678069] {CVE-2024-36016}
  - nilfs2: fix potential hang in nilfs_detach_log_writer() (Ryusuke Konishi) [Orabug: 36753558] {CVE-2024-38582}
  - nilfs2: fix unexpected freezing of nilfs_segctor_sync() (Ryusuke Konishi)   
  - ring-buffer: Fix a race between readers and resize checks (Petr Pavlu) [Orabug: 36753662] {CVE-2024-38601}


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.541.1.el7uek]
changelog:
  - LTS version v4.14.351 (Yifei Liu)   
  - i2c: rcar: bring hardware to known state when probing (Wolfram Sang)   
  - nilfs2: fix kernel bug on rename operation of broken directory (Ryusuke Konishi) [Orabug: 36896822] {CVE-2024-41034}
  - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Eric Dumazet)   
  - libceph: fix race between delayed_work() and ceph_monc_stop() (Ilya Dryomov) [Orabug: 36930130] {CVE-2024-42232}
  - hpet: Support 32-bit userspace (He Zhe)   
  - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (Alan Stern) [Orabug: 36896827] {CVE-2024-41035}
  - usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() (Lee Jones) [Orabug: 36930140] {CVE-2024-42236}
  - USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k (WangYuli)   
  - USB: serial: option: add Rolling RW350-GL variants (Vanillan Wang)   
  - USB: serial: option: add Netprisma LCUK54 series modules (Mank Wang)   
  - USB: serial: option: add support for Foxconn T99W651 (Slark Xiao)   
  - USB: serial: option: add Fibocom FM350-GL (Bjørn Mork)   
  - USB: serial: option: add Telit FN912 rmnet compositions (Daniele Palmas)   
  - USB: serial: option: add Telit generic core-dump composition (Daniele Palmas)   
  - ARM: davinci: Convert comma to semicolon (Chen Ni)   
  - ppp: reject claimed-as-LCP but actually malformed packets (Dmitry Antipov) [Orabug: 36896857] {CVE-2024-41044}
  - net: ethernet: lantiq_etop: fix double free in detach (Aleksander Jan Bajkowski) [Orabug: 36896864] {CVE-2024-41046}
  - net: lantiq_etop: add blank line after declaration (Aleksander Jan Bajkowski)   
  - tcp: fix incorrect undo caused by DSACK of TLP retransmit (Neal Cardwell)   
  - nilfs2: fix incorrect inode allocation from reserved inodes (Ryusuke Konishi)   
  - i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr (Piotr Wojtaszczyk) [Orabug: 36897910] {CVE-2024-42153}
  - i2c/busses: Convert timers to use timer_setup() (Kees Cook)   
  - i2c: pnx: move header into the driver (Wolfram Sang)   
  - media: dw2102: fix a potential buffer overflow (Mauro Carvalho Chehab)   
  - bnx2x: Fix multiple UBSAN array-index-out-of-bounds (Ghadi Elie Rahme) [Orabug: 36897887] {CVE-2024-42148}
  - drm/amdgpu/atomfirmware: silence UBSAN warning (Alex Deucher)   
  - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes (Ma Ke) [Orabug: 36897641] {CVE-2024-42101}
  - fsnotify: Do not generate events for O_PATH file descriptors (Jan Kara)   
  - Bluetooth: Fix incorrect pointer arithmatic in ext_adv_report_evt (Jaganath Kanakkassery)   
  - mm: optimize the redundant loop of mm_update_owner_next() (Jinliang Zheng)   
  - nilfs2: add missing check for inode numbers on directory entries (Ryusuke Konishi) [Orabug: 36897653] {CVE-2024-42104}
  - nilfs2: fix inode number range checks (Ryusuke Konishi) [Orabug: 36897659] {CVE-2024-42105}
  - inet_diag: Initialize pad field in struct inet_diag_req_v2 (Shigeru Yoshida) [Orabug: 36897667] {CVE-2024-42106}
  - selftests: make order checking verbose in msg_zerocopy selftest (Zijian Zhang)   
  - selftests: fix OOM in msg_zerocopy selftest (Zijian Zhang)   
  - selftests/net: reap zerocopy completions passed up as ancillary data. (Sowmini Varadhan)   
  - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (Sam Sun) [Orabug: 36825249] {CVE-2024-39487}
  - tcp_metrics: validate source addr length (Jakub Kicinski) [Orabug: 36897917] {CVE-2024-42154}
  - UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open() (Neal Cardwell)   
  - s390/pkey: Wipe sensitive data on failure (Holger Dengler) [Orabug: 36897935] {CVE-2024-42157}
  - jffs2: Fix potential illegal address access in jffs2_free_inode (Wang Yong) [Orabug: 36897698] {CVE-2024-42115}
  - powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#" (Greg Kurz)   
  - orangefs: fix out-of-bounds fsid access (Mike Marshall) [Orabug: 36897838] {CVE-2024-42143}
  - powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n (Michael Ellerman)   
  - i2c: i801: Annotate apanel_addr as __ro_after_init (Heiner Kallweit)   
  - media: dvb-frontends: tda10048: Fix integer overflow (Ricardo Ribalda) [Orabug: 36897977] {CVE-2024-42223}
  - media: s2255: Use refcount_t instead of atomic_t for num_channels (Ricardo Ribalda)   
  - media: dvb-frontends: tda18271c2dd: Remove casting during div (Ricardo Ribalda)   
  - net: dsa: mv88e6xxx: Correct check for empty list (Simon Horman) [Orabug: 36897983] {CVE-2024-42224}
  - Input: ff-core - prefer struct_size over open coded arithmetic (Erick Archer)   
  - firmware: dmi: Stop decoding on broken entry (Jean Delvare)   
  - sctp: prefer struct_size over open coded arithmetic (Erick Archer)   
  - media: dw2102: Don't translate i2c read into write (Michael Bunk)   
  - IB/core: Implement a limit on UMAD receive List (Michael Guralnik) [Orabug: 36897848] {CVE-2024-42145}
  - media: dvb-usb: dib0700_devices: Add missing release_firmware() (Ricardo Ribalda)   
  - media: dvb: as102-fe: Fix as10x_register_addr packing (Ricardo Ribalda)   
  - LTS version v4.14.350 (Yifei Liu)   
  - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (felix) [Orabug: 36940548] {CVE-2023-52803}
  - arm64: dts: rockchip: Add sound-dai-cells for RK3368 (Alex Bee)   
  - tcp: Fix data races around icsk->icsk_af_ops. (Kuniyuki Iwashima) [Orabug: 34719867] {CVE-2022-3566}
  - ipv6: Fix data races around sk->sk_prot. (Kuniyuki Iwashima) [Orabug: 34719907] {CVE-2022-3567}
  - ipv6: annotate some data-races around sk->sk_prot (Eric Dumazet)   
  - pwm: stm32: Refuse too small period requests (Uwe Kleine-König)   
  - ftruncate: pass a signed offset (Arnd Bergmann) [Orabug: 36897559] {CVE-2024-42084}
  - batman-adv: Don't accept TT entries for out-of-spec VIDs (Vegard Nossum)   
  - batman-adv: include gfp.h for GFP_* defines (Sven Eckelmann)   
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes (Ma Ke) [Orabug: 36897381] {CVE-2024-41089}
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes (Ma Ke) [Orabug: 36897446] {CVE-2024-41095}
  - hexagon: fix fadvise64_64 calling conventions (Arnd Bergmann)   
  - tty: mcf: MCF54418 has 10 UARTS (Jean-Michel Hautbois)   
  - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (Nikita Zhandarovich) [Orabug: 36897452] {CVE-2024-41097}
  - usb: musb: da8xx: fix a resource leak in probe() (Dan Carpenter)   
  - usb: gadget: printer: SS+ support (Oliver Neukum)   
  - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez)   
  - iio: adc: ad7266: Fix variable checking bug (Fernando Yang)   
  - mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos (Ilpo Järvinen)   
  - x86: stop playing stack games in profile_pc() (Linus Torvalds) [Orabug: 36897617] {CVE-2024-42096}
  - i2c: ocores: set IACK bit after core is enabled (Grygorii Tertychnyi)   
  - i2c: ocores: stop transfer on timeout (Federico Vaga)   
  - nvme: fixup comment for nvme RDMA Provider Type (Hannes Reinecke)   
  - soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message (Andrew Davis)   
  - media: dvbdev: Initialize sbuf (Ricardo Ribalda)   
  - ALSA: emux: improve patch ioctl data validation (Oswald Buddenhagen) [Orabug: 36897626] {CVE-2024-42097}
  - net/iucv: Avoid explicit cpumask var allocation on stack (Dawei Li) [Orabug: 36897609] {CVE-2024-42094}
  - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Pablo Neira Ayuso) [Orabug: 36897501] {CVE-2024-42070}
  - ASoC: fsl-asoc-card: set priv->pdev before using it (Elinor Montmasson) [Orabug: 36897579] {CVE-2024-42089}
  - drm/amdgpu: fix UBSAN warning in kv_dpm.c (Alex Deucher) [Orabug: 36835993] {CVE-2024-40987}
  - pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set (Huang-Huang Bao)   
  - pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins (Huang-Huang Bao)   
  - pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins (Huang-Huang Bao)   
  - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (Hagar Hemdan) [Orabug: 36897587] {CVE-2024-42090}
  - usb: xhci: do not perform Soft Retry for some xHCI hosts (Stanislaw Gruszka)   
  - xhci: Set correct transferred length for cancelled bulk transfers (Mathias Nyman)   
  - xhci: Use soft retry to recover faster from transaction errors (Mathias Nyman)   
  - usb: xhci: Remove ep_trb from xhci_cleanup_halted_endpoint() (Lu Baolu)   
  - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (Breno Leitao) [Orabug: 36835697] {CVE-2024-40901}
  - scsi: mpt3sas: Gracefully handle online firmware update (Suganath Prabu)   
  - scsi: mpt3sas: Add ioc_<level> logging macros (Joe Perches)   
  - iio: dac: ad5592r: fix temperature channel scaling value (Marc Ferland)   
  - iio: dac: ad5592r: un-indent code-block for scale read (Alexandru Ardelean)   
  - iio: dac: ad5592r-base: Replace indio_dev->mlock with own device lock (Sergiu Cuciurean)   
  - x86/amd_nb: Check for invalid SMN reads (Yazen Ghannam)   
  - PCI: Add PCI_ERROR_RESPONSE and related definitions (Naveen Naidu)   
  - ARM: dts: samsung: smdk4412: fix keypad no-autorepeat (Krzysztof Kozlowski)   
  - ARM: dts: samsung: exynos4412-origen: fix keypad no-autorepeat (Krzysztof Kozlowski)   
  - ARM: dts: samsung: smdkv310: fix keypad no-autorepeat (Krzysztof Kozlowski)   
  - gcov: add support for GCC 14 (Peter Oberparleiter)   
  - drm/radeon: fix UBSAN warning in kv_dpm.c (Alex Deucher) [Orabug: 36835998] {CVE-2024-40988}
  - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (Raju Rangoju)   
  - dmaengine: ioatdma: Fix missing kmem_cache_destroy() (Nikita Shubin)   
  - regulator: core: Fix modpost error "regulator_get_regmap" undefined (Biju Das)   
  - net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings (Oliver Neukum)   
  - virtio_net: checksum offloading handling fix (Heng Qi)   
  - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (Eric Dumazet) [Orabug: 36835853] {CVE-2024-40959}
  - netrom: Fix a memory leak in nr_heartbeat_expiry() (Gavrilov Ilia) [Orabug: 36836088] {CVE-2024-41006}
  - cipso: fix total option length computation (Ondrej Mosnacek)   
  - MIPS: Routerboard 532: Fix vendor retry check code (Ilpo Järvinen)   
  - udf: udftime: prevent overflow in udf_disk_stamp_to_time() (Roman Smirnov)   
  - udf: Simplify calls to udf_disk_stamp_to_time (Deepa Dinamani)   
  - udf: Sanitize nanoseconds for time stamps (Jan Kara)   
  - usb: misc: uss720: check for incompatible versions of the Belkin F5U002 (Alex Henrie)   
  - powerpc/io: Avoid clang null pointer arithmetic warnings (Michael Ellerman)   
  - powerpc/pseries: Enforce hcall result buffer validity and size (Nathan Lynch) [Orabug: 36835927] {CVE-2024-40974}
  - scsi: qedi: Fix crash while reading debugfs attribute (Manish Rangankar) [Orabug: 36835948] {CVE-2024-40978}
  - batman-adv: bypass empty buckets in batadv_purge_orig_ref() (Eric Dumazet) [Orabug: 36835967] {CVE-2024-40981}
  - rcutorture: Fix rcu_torture_one_read() pipe_count overflow comment (Paul E. McKenney)   
  - usb-storage: alauda: Check whether the media is initialized (Shichao Lai) [Orabug: 36753735] {CVE-2024-38619}
  - hugetlb_encode.h: fix undefined behaviour (34 << 26) (Matthias Goergens)   
  - mm/hugetlb: add mmap() encodings for 32MB and 512MB page sizes (Anshuman Khandual)   
  - nilfs2: fix potential kernel bug due to lack of writeback flag waiting (Ryusuke Konishi) [Orabug: 36774572] {CVE-2024-37078}
  - intel_th: pci: Add Lunar Lake support (Alexander Shishkin)   
  - intel_th: pci: Add Meteor Lake-S support (Alexander Shishkin)   
  - intel_th: pci: Add Sapphire Rapids SOC support (Alexander Shishkin)   
  - intel_th: pci: Add Granite Rapids SOC support (Alexander Shishkin)   
  - intel_th: pci: Add Granite Rapids support (Alexander Shishkin)   
  - dmaengine: axi-dmac: fix possible race in remove() (Nuno Sa)   
  - ocfs2: fix races between hole punching and AIO+DIO (Su Yue) [Orabug: 36835818] {CVE-2024-40943}
  - ocfs2: use coarse time for new created files (Su Yue)   
  - fs/proc: fix softlockup in __read_vmcore (Rik van Riel)   
  - vmci: prevent speculation leaks by sanitizing event in event_deliver() (Hagar Gamal Halim Hemdan) [Orabug: 36835583] {CVE-2024-39499}
  - drm/exynos/vidi: fix memory leak in .get_modes() (Jani Nikula) [Orabug: 36835787] {CVE-2024-40932}
  - drivers: core: synchronize really_probe() and dev_uevent() (Dirk Behme) [Orabug: 36835590] {CVE-2024-39501}
  - net/ipv6: Fix the RT cache flush via sysctl using a previous delay (Petr Pavlu)   
  - ipv6/route: Add a missing check on proc_dointvec (Aditya Pakki)   
  - Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ (Luiz Augusto von Dentz)   
  - tcp: fix race in tcp_v6_syn_recv_sock() (Eric Dumazet)   
  - drm/bridge/panel: Fix runtime warning on panel bridge release (Adam Miotk)   
  - iommu/amd: Fix sysfs leak in iommu init (Kun(llfl))   
  - HID: core: remove unnecessary WARN_ON() in implement() (Nikita Zhandarovich) [Orabug: 36835690] {CVE-2024-39509}
  - Input: try trimming too long modalias strings (Dmitry Torokhov)   
  - xhci: Apply broken streams quirk to Etron EJ188 xHCI host (Kuangyi Chiang)   
  - xhci: Apply reset resume quirk to Etron EJ188 xHCI host (Kuangyi Chiang)   
  - jfs: xattr: fix buffer overflow for invalid xattr (Greg Kroah-Hartman) [Orabug: 36835702] {CVE-2024-40902}
  - mei: me: release irq in mei_me_pci_resume error path (Tomas Winkler)   
  - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (Alan Stern) [Orabug: 36835710] {CVE-2024-40904}
  - nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors (Ryusuke Konishi) [Orabug: 36774648] {CVE-2024-39469}
  - nilfs2: return the mapped address from nilfs_get_page() (Matthew Wilcox (Oracle))   
  - nilfs2: Remove check for PageError (Matthew Wilcox (Oracle))   
  - selftests/mm: compaction_test: fix bogus test success on Aarch64 (Dev Jain)   
  - selftests/mm: conform test to TAP format output (Muhammad Usama Anjum)   
  - selftests/mm: compaction_test: fix incorrect write of zero to nr_hugepages (Dev Jain)   
  - media: mc: mark the media devnode as registered from the, start (Hans Verkuil)   
  - serial: sc16is7xx: fix bug in sc16is7xx_set_baud() when using prescaler (Hugo Villeneuve)   
  - serial: sc16is7xx: replace hardcoded divisor value with BIT() macro (Hugo Villeneuve)   
  - usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete (Wesley Cheng) [Orabug: 36683256] {CVE-2024-36894}
  - af_unix: Annotate data-race of sk->sk_shutdown in sk_diag_fill(). (Kuniyuki Iwashima)   
  - af_unix: Use skb_queue_len_lockless() in sk_diag_show_rqlen(). (Kuniyuki Iwashima)   
  - af_unix: Use unix_recvq_full_lockless() in unix_stream_connect(). (Kuniyuki Iwashima)   
  - af_unix: Annotate data-race of net->unx.sysctl_max_dgram_qlen. (Kuniyuki Iwashima)   
  - af_unix: Annotate data-races around sk->sk_state in UNIX_DIAG. (Kuniyuki Iwashima)   
  - af_unix: Annotate data-races around sk->sk_state in sendmsg() and recvmsg(). (Kuniyuki Iwashima)   
  - af_unix: Annotate data-races around sk->sk_state in unix_write_space() and poll(). (Kuniyuki Iwashima)   
  - af_unix: Fix data races around sk->sk_shutdown. (Kuniyuki Iwashima)   
  - af_unix: Annotate data-race of sk->sk_state in unix_inq_len(). (Kuniyuki Iwashima)   
  - af_unix: Fix a data-race in unix_dgram_peer_wake_me(). (Kuniyuki Iwashima)   
  - af_unix: ensure POLLOUT on remote close() for connected dgram socket (Jason Baron)   
  - ptp: Fix error message on failed pin verification (Karol Kolacinski)   
  - tcp: count CLOSE-WAIT sockets for TCP_MIB_CURRESTAB (Jason Xing)   
  - ipv6: sr: block BH in seg6_output_core() and seg6_input_core() (Eric Dumazet)   
  - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (Emmanuel Grumbach) [Orabug: 36835809] {CVE-2024-40941}
  - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (Remi Pommarel) [Orabug: 36835736] {CVE-2024-40912}
  - wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects (Nicolas Escande) [Orabug: 36835813] {CVE-2024-40942}
  - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Eric Dumazet) [Orabug: 36683297] {CVE-2024-36905}
  - Revert "tcp: remove redundant check on tskb" (Vegard Nossum)   
  - Revert "tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets" (Vegard Nossum)   
  - Revert "scsi: target: Fix SELinux error when systemd-modules loads the target module" (Vegard Nossum)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.541.2.el7uek]
changelog:
  - Revert "selftests/mm: conform test to TAP format output" (Samasth Norway Ananda)  [Orabug: 36997529]  
  - Revert "selftests/kcmp: Make the test output consistent and clear" (Samasth Norway Ananda)  [Orabug: 36997529]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.541.3.el7uek]
changelog:
  - ALSA: timer: Relax start tick time check for slave timer elements (Takashi Iwai)   
  - driver core: Fix uevent_show() vs driver detach race (Dan Williams) [Orabug: 37029154] {CVE-2024-44952}
  - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() (David Fernandez Gonzalez)  [Orabug: 37037206] {CVE-2024-46738}


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.541.4.el7uek]
changelog:
  - selftests: make order checking verbose in msg_zerocopy selftest (Zijian Zhang)  [Orabug: 37063821]  
  - selftests: fix OOM in msg_zerocopy selftest (Zijian Zhang)  [Orabug: 37063821]  
  - Revert "selftests/net: reap zerocopy completions passed up as ancillary data." (Harshit Mogalapalli)  [Orabug: 37063821]  
  - Revert "selftests: fix OOM in msg_zerocopy selftest" (Harshit Mogalapalli)  [Orabug: 37063821]  
  - Revert "selftests: make order checking verbose in msg_zerocopy selftest" (Harshit Mogalapalli)  [Orabug: 37063821]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.540.2.el7uek]
changelog:
  - fsnotify: clear PARENT_WATCHED flags lazily (Amir Goldstein)  [Orabug: 36922242] {CVE-2024-47660}
  - cifs: fix panic in smb2_reconnect (Ronnie Sahlberg)  [Orabug: 36314494]  
  - cifs: convert cifs_put_smb_ses from static to global (Dai Ngo)  [Orabug: 36314494]  
  - net: relax socket state check at accept time. (Paolo Abeni) [Orabug: 36768890] {CVE-2024-36484}


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.542.1.el7uek]
changelog:
  - genirq/cpuhotplug: Retry with cpu_online_mask when migration fails (Dongli Zhang)  [Orabug: 37132827]  
  - net/mlx5e: nullify cq->dbg pointer in mlx5_debug_cq_remove() (Valentine Fatiev)  [Orabug: 37104452]  
  - RDMA/cma: Always set static rate to 0 for RoCE (Mark Zhang)  [Orabug: 37100216]  
  - net/mlx5e: Fix memory leak in mlx5_core_destroy_cq() error path (Valentine Fatiev)  [Orabug: 37099360]  
  - LTS version v4.14.352 (Yifei Liu)   
  - filelock: Fix fcntl/close race recovery compat path (Jann Horn) [Orabug: 36874759] {CVE-2024-41012} {CVE-2024-41020}
  - jfs: don't walk off the end of ealist (lei lu) [Orabug: 36891668] {CVE-2024-41017}
  - ocfs2: add bounds checking to ocfs2_check_dir_entry() (lei lu) [Orabug: 36891656] {CVE-2024-41015}
  - ACPI: processor_idle: Fix invalid comparison with insertion sort for latency (Kuan-Wei Chiu)   
  - ARM: 9324/1: fix get_user() broken with veneer (Masahiro Yamada)   
  - filelock: Remove locks reliably when fcntl/close race is detected (Jann Horn) [Orabug: 36874759] {CVE-2024-41012} {CVE-2024-41020}
  - hfsplus: fix uninit-value in copy_name (Edward Adam Davis) [Orabug: 36896970] {CVE-2024-41059}
  - selftests/vDSO: fix clang build errors and warnings (John Hubbard)   
  - spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices (Uwe Kleine-König)   
  - fs: better handle deep ancestor chains in is_subdir() (Christian Brauner)   
  - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (Tetsuo Handa) [Orabug: 36896995] {CVE-2024-41063}
  - net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() (Yunshui Jiang)   
  - net: usb: qmi_wwan: add Telit FN912 compositions (Daniele Palmas)   
  - ALSA: dmaengine_pcm: terminate dmaengine before synchronize (Shengjiu Wang)   
  - s390/sclp: Fix sclp_init() cleanup on failure (Heiko Carstens) [Orabug: 36897034] {CVE-2024-41068}
  - Input: elantech - fix touchpad state on resume for Lenovo N24 (Jonathan Denose)   
  - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (Dmitry Antipov) [Orabug: 36897313] {CVE-2024-41072}
  - mei: demote client disconnect warning on suspend to debug (Alexander Usyskin)   
  - fs/file: fix the check in find_next_fd() (Yuntao Wang)   
  - kconfig: remove wrong expr_trans_bool() (Masahiro Yamada)   
  - kconfig: gconf: give a proper initial state to the Save button (Masahiro Yamada)   
  - ila: block BH in ila_output() (Eric Dumazet) [Orabug: 36897361] {CVE-2024-41081}
  - Input: silead - Always support 10 fingers (Hans de Goede)   
  - Input: silead - add support for capactive home button found on some x86 tablets (Hans de Goede)   
  - wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() (Dmitry Antipov)   
  - wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata (Nicolas Escande)   
  - ACPI: EC: Avoid returning AE_OK on errors in address space handler (Armin Wolf)   
  - ACPI: EC: Abort address space access upon error (Armin Wolf)   
  - scsi: qedf: Set qed_slowpath_params to zero before use (Saurav Kashyap)   
  - gcc-plugins: Rename last_stmt() for GCC 14+ (Kees Cook)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.542.2.el7uek]
changelog:
  - fs/dcache: allow fractional values in fs.negative-dentry-limit (Gautham Ananthakrishna)  [Orabug: 37156524]  
  - lib/math: move int_pow() from pwm_bl.c for wider use (Andy Shevchenko)  [Orabug: 37156524]


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-9
changelog:
  - kdumpctl: bail out earlier in case of no reserved memory
  - kdumpctrl: kdump feasibility should fail if no crash memory
  - kdumpctl: improve "while read" time for /etc/kdump.conf
  - kdumpctl: update check_dump_fs_modified() to use "lsinitrd -f"
  - kdumpctl: improve check_wdt_modified()
  - kdumpctl: remove is_mode_switched()
  - arm64: cmdline: modify to optimize size for memory reservation


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-10
changelog:
  - kdumpctl: call strip_comments only when necessary to speedup
  - Revert "kdumpctl: improve "while read" time for /etc/kdump.conf"


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-12
changelog:
  - kdump.sysconfig.x86_64: remove kaslr in kdump kernel cmdline
  - Revert commit b590153 kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-14
changelog:
  - kdump.conf.5: clarify the fence_kdump_nodes option
  - kdumpctl: for fence_kdump, the ipaddr of this node should be excluded from list


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-15
changelog:
  - Revert "pc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs"
  - udev rules: mask cpu hotplug rules


author: EL Errata <el-errata_ww@oracle.com> - 2.0.14-17.0.1
changelog:
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
  (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
  (Sriharsha Yadagudde) [Orabug: 18905671]


author: Pingfan Liu <piliu@redhat.com> 2.0.15-5
changelog:
  - Revert "Update kdump anaconda addon"
  - Revert "Update kdump anaconda addon: fix the md5sum in source file"


author: Pingfan Liu <piliu@redhat.com> 2.0.15-7
changelog:
  - mkdumprd: apply dracut "--hostonly-cmdline" and "--no-hostonly-default-device"
  - Change dump_to_rootfs to use "--mount" instead of "root=X"
  - kdumpctl: move is_fadump_capable() to kdump-lib.sh
  - module-setup: fix 99kdumpbase network dependency
  - mkdumprd: change for_each_block_target() to use get_kdump_targets()
  - kdump-lib.sh: introduce get_kdump_targets()
  - kdump-lib.sh: fix improper get_block_dump_target()
  - kdumpctl: remove "root=X" for kdump boot
  - kdumpctl: fix a bug in remove_cmdline_param()


author: Pingfan Liu <piliu@redhat.com> 2.0.15-9
changelog:
  - makedumpfile: Fix 'kernel_version' variable being uninitialized & introduce minor reorganization
  - makedumpfile: Fix segmentation fault when using --split on a vmcore
  - dracut-module-setup.sh: check whether to include multipath-hostonly or not


author: Pingfan Liu <piliu@redhat.com> 2.0.15-10
changelog:
  - kexec-tools.spec: require dracut >= 033-522 to make 99kdump module installed correctly
  - kdump.sysconfig.ppc64(le): remove "root=" param from ppc64(le) 2nd kernel's command line
  - Revert "kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors"


author: Pingfan Liu <piliu@redhat.com> 2.0.15-11
changelog:
  - dracut-module-setup.sh: temporary install /bin/grep to work around dracut's bug
  - kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline
  - kdumpctl: skip selinux-relabel for dracut_args --mount dump target


author: Pingfan Liu <piliu@redhat.com> 2.0.15-13
changelog:
  * Thu Feb 1 2018 Pingfan Liu <piliu@redhat.com> 2.0.15-12
  - makedumpfile/sadump: Fix a problem of PTI enabled kernel
  - makedumpfile: Fix physical-to-virtual conversion in 'exclude_segment()'


author: Dave Kleikamp <dave.kleikamp@oracle.com> - 2.0.15-13.0.2
changelog:
  - makedumpfile: arm64: Fix page table walk of 1GB section [Orabug 27995626]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug 28043892]
  - don't patch files in SOURCES directory. That breaks building from the srpm.


author: EL Errata <el-errata_ww@oracle.com> - 2.0.15-13.0.2
changelog:
  - makedumpfile: arm64: Fix page table walk of 1GB section [Orabug 27995626]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug 28043892]
  - don't patch files in SOURCES directory. That breaks building from the srpm.
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
  (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
  (Sriharsha Yadagudde) [Orabug: 18905671]


author: Pingfan Liu <piliu@redhat.com> 2.0.15-15
changelog:
  - dracut-module-setup.sh: pass ip=either6 param for ipv6
  - dracut-module-setup.sh: install /etc/hosts when using fence_kdump
  - update kdump-anaconda-addon-003-29-g4c517c5.tar.gz


author: Pingfan Liu <piliu@redhat.com> 2.0.15-18
changelog:
  kdumpctl: Rebuild initramfs if loaded kernel modules changed
  dracut-module-setup.sh: don't include multipath-hostonly
  Add document to declare FCoE support (V2)
  Revert "Add document to declare FCoE support"
  Add document to declare FCoE support
  makedumpfile: fix makedumpfile Not tainted in 2nd kernel


author: Pingfan Liu <piliu@redhat.com> 2.0.15-20
changelog:
  - makedumpfile: when refiltering, initialize refiltered bitmap2 from the kdump file's bitmap2
  - dracut-module-setup: Fix DRM module inclusion test for hyper-v
  - kdumpctl: remove some cmdline inheritage from 1st kernel
  - kdump-lib.sh:get_loaded_kernel_modules() Fix missing newline
  - kdumpctl: Rebuild initramfs if loaded kernel modules changed (V2)
  - Revert "kdumpctl: Rebuild initramfs if loaded kernel modules changed"
  - dracut-module-setup: Fix test for inclusion of DRM modules


author: EL Errata <el-errata_ww@oracle.com> - 2.0.15-21.0.1
changelog:
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
  (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
  (Sriharsha Yadagudde) [Orabug: 18905671]


author: EL Errata <el-errata_ww@oracle.com> - 2.0.15-21.0.2
changelog:
  - makedumpfile: arm64: Fix page table walk of 1GB section [Orabug 27995626]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug 28043892]


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.0.15-21.0.3.el7_6.3
changelog:
  - change makedumpfile fixed size buffer for VMCOREINFO (isaac.chen@oracle.com) [Orabug: 29612733]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch (brian.maly@oracle.com) [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
  (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
  (Sriharsha Yadagudde) [Orabug: 18905671]


author: EL Errata <el-errata_ww@oracle.com> - 2.0.15-21.0.4.el7_6.3
changelog:
  - makedumpfile: arm64: Fix page table walk of 1GB section [Orabug: 27995626]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 28043892]


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-37
changelog:
  - dracut-module-setup: get localhost alias by manual
  - dracut-module-setup: filter out localhost for generic_fence_kdump
  - kdumpctl: distinguish the reason for ssh failure


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-43
changelog:
  - module-setup: re-fix 99kdumpbase network dependency
  - kdumpctl: bail out immediately if host key verification failed


author: EL Errata <el-errata_ww@oracle.com> - 2.0.15-43.0.1
changelog:
  - trigger initramfs cleanup for kernel-uek and kernel-uek-debug [Orabug: 30192631]
  - change makedumpfile fixed size buffer for VMCOREINFO (isaac.chen@oracle.com) [Orabug: 29612733]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch (brian.maly@oracle.com) [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.0.15-43.0.4
changelog:
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - rebase on top makedumpfile 1.6.6 [Orabug: 30352094]
  - makedumpfile: bump LATEST_VERSION to 5.4.9 [Orabug: 30521746]
  - makedumpfile: backport needed upstream aarch64 patches [Orabug: 30352094]


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48
changelog:
  - dracut-module-setup.sh: ensure cluster info is ready before query.
  - dracut-module-setup.sh: improve get_alias()


author: Alex Burmashev <alexander.burmashev@oracle.com> 2.0.15-51.0.1.1
changelog:
  - Check MokSBStateRT variable state to identify SecureBoot mode [Orabug: 31903240]
  - Add delay to avoid upstream race condition [Orabug: 31121959]
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - rebase on top makedumpfile 1.6.6 [Orabug: 30352094]
  - makedumpfile: bump LATEST_VERSION to 5.4.9 [Orabug: 30521746]
  - makedumpfile: backport needed upstream aarch64 patches [Orabug: 30352094]
  - trigger initramfs cleanup for kernel-uek and kernel-uek-debug [Orabug: 30192631]
  - change makedumpfile fixed size buffer for VMCOREINFO (isaac.chen@oracle.com) [Orabug: 29612733]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch (brian.maly@oracle.com) [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Tianyue Lan <tianyue.lan@oracle.com> 2.0.15-51.0.2
changelog:
  - makedumpfile: arm64: Fix page table walk of 1GB section [Orabug: 27995626]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 28043892]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface (Sriharsha Yadagudde) [Orabug: 18905671]
  - droped orabug30928441.kdump.no_timer_check.patch


author: Brian Maly <brian.maly@oracle.com> 2.0.20-1.0.2
changelog:
  - fix kdump start with multiple crashkernel reservations [Orabug: 32133785]
  - fix OOM kill of makedumpfile when using smaller crashkernel reservations [Orabug: 32133850]
  - rebase to kexec-tools-2.0.20 [Orabug: 31933990]


author: Mridula Shastry <mridula.c.shastry@oracle.com> - 2.0.20-1.0.10
changelog:
  - kdumpctl: Add rd.md.uuid to kdump commandline if /boot is
   on a dedicated md device when fips is enabled (Todd Vierling) [Orabug: 34672180]


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-32
changelog:
  - makedumpfile: exclude pages that are logically offline
  - makedumpfile: x86_64: Add support for AMD Secure Memory Encryption


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-33
changelog:
  - makedumpfile: x86_64: Add support for AMD Secure Memory Encryption
    [Fix the Fix the patch to make sure makedumpfile-1.6.2/ path is used]


author: Livy Ge <livy.ge@oracle.com> 2.0.15-33.0.1
changelog:
  - change makedumpfile fixed size buffer for VMCOREINFO (isaac.chen@oracle.com) [Orabug: 29612733]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch (brian.maly@oracle.com) [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Jaromir Capik <jcapik@redhat.com> - 1.0-7
changelog:
  - Missing ASL 2.0 license file included
  - Minor spec file changes according to the latest guidelines


author: Tony Camuso <tcamuso@redhat.com> - 20-9
changelog:
  - Must be bumped to 20-9 due to changes and version bumps in the
    7.2-z stream.
    Resolves: rhbz#1320204


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-10
changelog:
  - weak-modules: deprecate --delete-modules switch.
  - weak-modules: implement some pathes configuration from cmdline.
  - weak-modules: redesign to reuse depmod -aeE functionality
    (with some preparation changes).
    This is an updated version of the script which doesn't support
    multiple installation of the same out-of-tree module (stored in the
    'extra' subdirectory). But it more correctly checks dependencies
    between the modules.
    Resolves: rhbz#1367942


author: Tony Camuso <tcamuso@redhat.com> - 20-10
changelog:
  - Rename patches so they are not specific to the build. This was
    causing problems with z-stream builds.
    Resolves: rhbz#1416498


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-12
changelog:
  - weak-modules: fix coverity introduced by latest changes
  - weak-modules: fix "permission denied" on some upgrades.
    Resolves: rhbz#1416566


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-15.el7_4.2
changelog:
  - libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
  - weak-modules: process only weak-updates related depmod output.
    Resolves: rhbz#1482385


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-15.el7_4.3
changelog:
  - weak-modules: implement dry run by symlink restoration.
  - weak-modules: fix dry-run for non-lib-modules installation.
    Resolves: rhbz#1489696.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-15.el7_4.5
changelog:
  - weak-modules: use function to generate weak_updates_dir
  - weak-modules: implement dry-run on the tempdir
    Resolves: rhbz#1511943.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-17
changelog:
  - libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
  - weak-modules: process only weak-updates related depmod output.
    Resolves: rhbz#1468305
  - weak-modules: implement dry run by symlink restoration.
    Resolves: rhbz#1477073


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-18
changelog:
  - depmod: external directories support.
    Resolves: rhbz#1361857
  - BuildRequires automake autoconf libtool.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-20
changelog:
  - weak-modules: use function to generate weak_updates_dir
  - weak-modules: implement dry-run on the tempdir
    Resolves: rhbz#1510058


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-23
changelog:
  - weak-modules: fix initial state creation for dry-run
  - weak-modules: check compatibility in a temporary directory
    Resolves: rhbz#1619889.


author: Natalya Naumova <natalya.naumova@oracle.com> - 20-23.0.1
changelog:
  - weak-modules: add patch for [Orabug: 26672773]
  - add PKCS#7 signature support [Orabug: 27645962]
  - Reviewed-by: Alexey Petrenko <alexey.petrenko@oracle.com>


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-26
changelog:
  - weak-modules: handle independent modules in one run
  - weak-modules: use asterisk for kernel version in sandbox
    Resolves: rhbz#1695547


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-28
changelog:
  - weak-modules: update_modules_for_krel: always finish sandbox
  - weak-modules: groupping: use dependencies of extra/ provider
    Resolves: rhbz#1774925


author: Jacob Wen <jian.w.wen@oracle.com> - 20-28.0.3
changelog:
  - Use ASN1_STRING_data for openssl-1.0.2k [Orabug: 31160124]
  - build: fix make distcheck [Orabug: 31160124]
  - libkmod-signature: implement pkcs7 parsing with openssl [Orabug: 31160124]
  - signature: do not report wrong data for pkc#7 signature [Orabug: 31160124]
  - libkmod: modinfo: implement signature output [Orabug: 31160124]
  - libkmod: modinfo: implement line splitting in hex_to_str [Orabug: 31160124]
  - libkmod: modinfo: use own function for sig_key hex output [Orabug: 31160124]
  - libkmod: modinfo: fix sig_id output [Orabug: 31160124]


author: Radek Novacek <rnovacek@redhat.com> 0.9.0-3
changelog:
  - Enable direct calls
  - Fix method arguments that are both input and output
  - Don't install Find*.cmake files


author: Radek Novacek <rnovacek@redhat.com> 0.9.1-3
changelog:
  - Set format(printf) attribute to __KReturn2 function
  - Fix possible integer overflow
  - Resolves: rhbz#1000434, rhbz#1000430


author: Mridula Shastry <mridula.c.shastry@oracle.com> - 1.15.1-55.0.3
changelog:
  - Length check when parsing GSS token encapsulation [Orabug: 36927256]
  - Add a simple DER support header [Orabug: 36927256]
  - Fix vulnerabilities in GSS message token handling [Orabug: 36927256]


author: Jan Grulich <jgrulich@redhat.com> - 4.10.5-7
changelog:
  - Fix installed files for -java subpkg
    Resolves: bz#1253143, build failure when java is installed in build enviroment


author: Jan Grulich <jgrulich@redhat.com> - 4.10.5-8
changelog:
  - Properly remove kross-java files
    Resolves: bz#1253143, build failure when java is installed in build enviroment


author: Robert Scheck <robert@fedoraproject.org> - 1.13-5
changelog:
  - Really added the plugindir patch now (thanks to Karsten Hopp)
  - Avoid the make errors because of mkdirhier better than until now


author: John Dennis <jdennis@redhat.com> - 2.4.1-7
changelog:
  - Add ECP support, brings Lasso up to current upstream tip + revised ECP patches
    Resolves: #1205342


author: John Dennis <jdennis@redhat.com> - 2.4.1-8
changelog:
  - Add explicit minimum dependency on glib2 2.42,
    for some reason RPM is not automatically detecting the dependency
    Resolves: #1254989


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-3
changelog:
  - Resolves: #1634267 - ECP signature check fails with
                         LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed
                         instead of response


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-4
changelog:
  - Resolves: #1730009 - lasso includes "Destination" attribute in SAML
                         AuthnRequest populated with SP
                         AssertionConsumerServiceURL when ECP workflow
                         is used which leads to IdP-side errors


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-5
changelog:
  - Resolves: #1719014 - Expired certificate prevents tests from running
  - Actually apply the patch file for the previous build
  - Related: #1730009 - lasso includes "Destination" attribute in SAML
                         AuthnRequest populated with SP
                         AssertionConsumerServiceURL when ECP workflow
                         is used which leads to IdP-side errors


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-6
changelog:
  - Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                         vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-7
changelog:
  - Fix Coverity warning introduced by the previous patch
  - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                        vulnerability when parsing SAML responses


author: Jindrich Novy <jnovy@redhat.com> 2008-4
changelog:
  - require netpbm-progs
  - review fixes (#225980):
    - include documentation
    - set executable bit for makeseg and makemap scripts
    - white-space spec correction
    - move docs and example directory to %doc
    - nuke duplicated stuff


author: Richard Hughes <richard@hughsie.com> 2.5-1
changelog:
  - Update to new upstream version.
  - Added a reference for Mac MLU tag
  - Added a way to read the profile creator from header
  - Added error descriptions on cmsSmoothToneCurve
  - Added identity curves support for write V2 LUT
  - Added new cmsPlugInTHR() and fixed some race conditions
  - Added TIFF Lab16 handling on tifficc
  - Fixed a bug on big endian platforms not supporting uint64 or long long.
  - Fixed a multithead bug on optimization
  - Fixed devicelink generation for 8 bits
  - Fixed some 64 bit warnings on size_t to uint32 conversions
  - Rendering intent used when creating the transform is now propagated to profile
  - RGB profiles store only one copy of the curve to save space
  - Transform2Devicelink now keeps white point when guessing deviceclass is enabled
  - Update black point detection algorithm to reflect ICC changes
  - User defined parametric curves can now be saved in ICC profiles


author: Andrew Hughes <gnu.andrew@redhat.com> - 2.6-3
changelog:
  - Run tests as part of %check, fixing Makefile to set LD_LIBRARY_PATH
  - Use upstream endianness fix to avoid ppc64le being built big-endian
  - Resolves: #1250914


author: Rich Megginson <rmeggins@redhat.com> 0:4.18-8
changelog:
  - Resolves: bug 684012 - LDAPSchemaElement.getOptionalValues() mangles values
  - upstream bug https://bugzilla.mozilla.org/show_bug.cgi?id=640750


author: Matthew Harmsen <mharmsen@redhat.com> 0:4.19-5
changelog:
  - Fix build for CentOS 7 (mharmsen)
  - Resolves rhbz#1465103 - Missing getter methods in JDAPFilter classes
    (edewata)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.17-2
changelog:
  - Fix the minimal required tdb version
  - Related: rhbz#1133914 - Rebase libldb to version 1.1.17 or newer


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-2
changelog:
  - Resolves: rhbz#1290715 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.3]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.20-3
changelog:
  - Resolves: rhbz#1290715 - CVE-2015-5330 libldb: samba: Remote memory read
                             in Samba LDAP server [rhel-7.3]
  - Remove the patch from the previous commit, it doesn't fix a remotely
    eploitable issue. Add patches from upstream #11636 instead.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.1.29-1
changelog:
  - Resolves: rhbz#1393810 - Rebase libldb to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.2-1
changelog:
  - Resolves: rhbz#1470056 - Rebase libldb to enable samba rebase to
                             version 4.7.x


author: Paul Wouters <pwouters@redhat.com> - 1.6.16-1
changelog:
  - Updated to 1.6.16
  - Addresses bug in 1.6.14 and 1.6.15 that affects opendnssec
    (if you have empty non-terminals and use NSEC3)


author: Tomas Hozza <thozza@redhat.com> - 1.6.16-5
changelog:
  - Fix compiler warnings and one uninitialized value
  - make ldns-config multilib clean
  - Fix man pages and usages errors


author: Fridolin Pokorny <fpokorny@redhat.com> - 458-3
changelog:
  - Expanded lessecho usage (#948597)
  - Added lessfilter info to man (#948597)
  - Expanded lesskey usage (#948597)
  - Added --old-bot to help (#948597)


author: Jozef Mlich <jmlich@redhat.com> - 458-5
changelog:
  - fixing regression in 72dfd3f63594e1d4c9416180a95c47ae583934c6
    incorrect parsing of commandline arguments
  - Resolves #948597


author: Jozef Mlich <jmlich@redhat.com> - 458-8
changelog:
  - changes introduced in less-458-old-bot-in-help.patch
    wasn't compiled in. It is necessary to use mkhelp tool.
    Resolves: #948597


author: Jozef Mlich <jmlich@redhat.com> - 458-9
changelog:
  - The --use-backslash option documented in the man page
    was missing from online help for less.
    Resolves: #1109090


author: Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-6
changelog:
  - Fix lftp does not follow http redirect (302) in mirror mode (#1181580)
  - Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984)
  - Added RFE - lftp configurations for restricting each SSL/TLS 
    version (#1182987)
  - Fixed bogus dates of this SPEC


author: Michal Ruprich - 4.4.8-9
changelog:
  - Resolves: #1374653 -  File size decreases when synchronizing folders with a sftp account using lftp


author: Michal Ruprich - 4.4.8-10
changelog:
  - Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp
                      - Patch edited so that it corresponds to upstream


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-11
changelog:
  - Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries'
  - Resolves: #1556675 - "get" command with lftp does not fail on net:max-retries


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-11.1
changelog:
  - Resolves: #1797963 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-12
changelog:
  - Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased


author: Michal Ruprich <michalruprich@gmail.com> - 4.4.8-12.1
changelog:
  - Resolves: #1797964 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-13
changelog:
  - Resolves: #1573296 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated


author: Michal Ruprich - 4.4.8-9
changelog:
  - Resolves: #1392944 - File size decreases when synchronizing folders with a sftp account using lftp


author: Tomas Popela <tpopela@redhat.com> - 12.10.0-12
changelog:
  - Move package from EPEL 7 to RHEL 7, but leave the mono support in EPEL in
    libappindicator-sharp package.
  - Resolves: rhbz#1546657


author: Jochen Schmitt <Jochen herr-schmitt de> - 2.3.21-7
changelog:
  - Add aarch64 as a 65-Bit architecture (#975267)
  - Add libtool as a BR
  - Call libtoolize before autoreconf


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.7-1
changelog:
  - Skip btrfs min size tests on Fedora 25 (vtrefny)
  - Make sure the loop device doesn't disappear during tests (vpodzime)
  - Close the loop device when autoclear is (un)set (vpodzime)
  - Do not enforce Python 3 for running tests in CI (vpodzime)
  - Revert "Use different BTRFS_MIN_MEMBER_SIZE on aarch64" (vtrefny)
  - Use both 'old' and 'new' sysfs files to read zRAM stats (vtrefny)
  - Check if libparted-fs-resize pkgconfig is available (vpodzime)
  - Do not try to get name for inactive partitions (vtrefny)
  - Skip tests for getting free regions on CentOS/RHEL (vpodzime)
  - Free the container holding the specs of free regions (vpodzime)
  - Open loop devices as O_RDONLY when getting flags (vpodzime)
  - Resolve maximum partition size when we know its start (vpodzime)
  - Use --id instead of --part-type when setting partition id (vpodzime)
  - Fix mdadm command for removing failed device from an array (vtrefny)
  - Skip bcache tests on CentOS/RHEL 7 (vpodzime)
  - Use six.assertRaisesRegex in the FS tests (vpodzime)
  - Use mkdtemp() instead of TemporaryDirectory() (vpodzime)
  - Fix installation without specifying --exec-prefix (vpodzime)
  - Add options to force mkfs.ext4/vfat to create a FS on the whole device (vpodzime)
  - Skip the test for device escrow on CentOS/RHEL (vpodzime)
  - Define DEVNULL on our own if not in subprocess (vpodzime)
  - Remove the patches from the spec file (vpodzime)
  - Sync the spec file with downstream (vpodzime)
  - Stop skipping zRAM stats tests (vtrefny)
  - Add more tests for zRAM stats (vtrefny)
  - Fix reading zRAM properties from sysfs (vtrefny)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.8-1
changelog:
  - Temporarily skip vfat generic resize test on rawhide (vtrefny)
  - Use "safeprobe" in "bd_fs_wipe" (vtrefny)
  - Add a generic filesystem resize function (vtrefny)
  - Add a function to get mountpoint for a device (vtrefny)
  - Add a function to get filesystem type for a device (vtrefny)
  - Only include the LVM DBus config when shipping LVM DBus (vpodzime)
  - Skip the LVM DBus vgreduce tests on Rawhide (vpodzime)
  - Do not build the lvm-dbus plugin on RHEL/CentOS (vpodzime)
  - Give zRAM more time to settle before trying to remove a device (vpodzime)
  - Put zram tests adding/removing devices into a separate class (vpodzime)
  - Skip LVM cache and RAID tests on Rawhide (vpodzime)
  - Fix the skip_on decorator factory for tests (vpodzime)
  - Use 'blkid -p' instead of lsblk to get device's FS type (vpodzime)
  - Improve the lvm_set_global_config test (vpodzime)
  - Pass '-y' to pvresize (vpodzime)
  - Create a copy of os.environ for a child process (vpodzime)
  - Revert "Use the "C.UTF-8" locale instead of just "C"" (vpodzime)
  - Fix how we create vfat FS in tests (vpodzime)
  - Skip the test if requiring unavailable locales (vpodzime)
  - Use the "C.UTF-8" locale instead of just "C" (vpodzime)
  - Add functions for working with ext2 and ext3 filesystems (vtrefny)
  - Link to gobject when lvm or btrfs is enabled (andreas)
  - Link to libm where needed (andreas)
  - Add a function for cleaning a device (vtrefny)
  - Add few code exaples to documentation (vtrefny)
  - Use a special exception for no fs signature when doing wipe (vpodzime)
  - One more incompatible os.symlink() call (vpodzime)
  - Do not use pass-by-name in the os.symlink() call (vpodzime)
  - Ignore previous errors when falling back to using ioctl() (vpodzime)
  - Use ioctl() call to teardown loop devices (vpodzime)
  - Resolve the device to remove for mdadm (vpodzime)
  - Add a function for getting device symlinks (vpodzime)
  - Use the new resolve_device() function where appropriate (vpodzime)
  - Add the resolve_device() function to the utils library (vpodzime)
  - First try to read the 'autoclear' flag from /sys/ (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.9-1
changelog:
  - Fix hardcoded reference to gcc (timo.gurr)
  - Catch and ignore partial failures in LVM tests' cleanups (vpodzime)
  - Fix hardcoded reference to pkg-config (timo.gurr)
  - Make GObject introspection optional (vpodzime)
  - Do not link libraries required by plugins to the GI files (vpodzime)
  - Make sure the whole build status image is shown (vpodzime)
  - Show CI status in README (at the GH repo's front page) (vpodzime)
  - Always require the libudev pkg (tgurr)
  - Make sure we give kernel time to fully setup zram device(s) (vpodzime)
  - fs_test.py: Close FDs when calling utilities (tasleson)
  - crypto.c: Correct segmentation fault (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.10-1
changelog:
  - Only enable partition size tolerance with alignment (vpodzime)
  - Limit the requested partition size to maximum possible (vpodzime)
  - Do not verify vfat FS' size after generic resize (vpodzime)
  - Specify tolerance for partition size (kailueke)
  - Only use the exact constraint if not using any other (vpodzime)
  - Check resulting FS size in tests for generic FS resize (vpodzime)
  - Query setting FS label support and generic relabeling (kailueke)
  - Do not strictly require all FS utilities (vpodzime)
  - Compile everything with the C99 standard (vpodzime)
  - Add partition resize function (kailueke)
  - Generic Check and Repair Functions (kailueke)
  - Query functions for FS resize and repair support (kailueke)
  - Update the project/source URL in the spec file (vpodzime)
  - Add functions for opening/closing TrueCrypt/VeraCrypt volumes (vpodzime)
  - Adapt to a change in behaviour in new libmount (vpodzime)
  - Try RO mount also if we get EACCES (vpodzime)
  - Size in bytes for xfs_resize_device (kailueke)
  - src/plugins/Makefile.am: Remove hard coded include path in /usr prefix (tristan.vanberkom)
  - Fixed include for libvolume_key.h (tristan.vanberkom)
  - Ignore parted warnings if possible (squimrel)
  - bcache tests: Remove FEELINGLUCKY checks (tasleson)
  - kbd.c: Code review corrections (tasleson)
  - kbd.c: Make bd_kbd_bcache_create work without abort (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.11-1
changelog:
  - Make the KbdZRAMDevicesTestCase inherit from KbdZRAMTestCase (vpodzime)
  - Allow non-source directory builds (kailueke)
  - Add a way to disable runtime dependency checks (vpodzime)
  - Link to GObject even if no plugin is activated (kailueke)
  - Skip zram tests on Rawhide (vpodzime)
  - Keep most utilities available for tests (vpodzime)
  - Use new libmount function to get (un)mount error message (vtrefny)
  - Update the documentation URL (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.12-1
changelog:
  - Own directories /etc/libblockdev and /etc/libblockdev/conf.d (vtrefny)
  - Wait for resized partition (kailueke)
  - Make sure the device is opened for libparted (vpodzime)
  - Fix label check in swap_test (vtrefny)
  - Use "run_tests" script for running tests from Makefile (vtrefny)
  - Add a script for running tests (vtrefny)
  - Tests: Move library initialization to setUpClass method (vtrefny)
  - Stop skipping FAT resize tests on rawhide (vtrefny)
  - Close filesystem before closing the partition during FAT resize (vtrefny)
  - Use mountpoint for "xfs_info" calls (vtrefny)
  - Use libmount cache when parsing /proc/mounts (vtrefny)
  - Add some space for the CI status (vpodzime)
  - Confirm the force when creating PVs in FS tests (vpodzime)
  - Skip vgremove tests on 32bit Debian (vtrefny)
  - Fix names of backing files in tests (vtrefny)
  -  Fix checking for available locales (vtrefny)
  - Skip dependency checking in mpath tests on Debian (vtrefny)
  - Skip zRAM tests on Debian (vtrefny)
  - Skip the test for device escrow on Debian too (vtrefny)
  - Skip free region tests on Debian too (vtrefny)
  - Fix redirecting command output to /dev/null in tests (vtrefny)
  - Try harder to unmount devices in test cleanup (vtrefny)
  - Require only plugins that are needed for given test (vtrefny)
  - Try to get distribution info from "PrettyName" if "CPEName" isn't available (vtrefny)
  - Use -ff when creating PVs in FS tests (vpodzime)
  - Sync spec with downstream (vpodzime)


author: Bastien Nocera <bnocera@redhat.com> - 0.2.3-6
changelog:
  + libbluray-0.2.3-0.12.git
  - Fix security issues in parts of the library that we never exercised
  Related: rhbz#1045453 rhbz#1045452


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.9-1
changelog:
  - Allow the Size python class to be easily imported (vpodzime)
  - Make sure pyexecdir is defined (vpodzime)
  - Do not run Python 3 tests without python3 (vpodzime)
  - Disable python3 on RHEL (vpodzime)
  - Reflect the configuration in the spec file template (vpodzime)
  - Make documentation generation conditional (vpodzime)
  - Make python3 support conditional (vpodzime)
  - Require lower version of libpcre (vpodzime)
  - Sync the spec file with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.10-1
changelog:
  - Fix installation without specifying --exec-prefix (martin)
  - Sync the spec file with downstream (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 0.11-1
changelog:
  - Fix README file name (vtrefny)
  - Add a build status image to the README.md (vpodzime)
  - Remove "glibc-all-langpacks" from test dependencies (vtrefny)
  - Check for requires in generated spec file, not in the template (vtrefny)
  - Fix checking for available locales (vtrefny)
  - Fix library name in acinclude.m4 (vtrefny)
  - Do not try to run translation tests on CentOS/RHEL 7 (vtrefny)
  - Skip tests if they require unavailable locales (vpodzime)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.11-4
changelog:
  - Python 2 binary package renamed to python2-libbytesize
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.0-1
changelog:
  - Make more space for CI status image (vtrefny)
  - Include limits.h to make sure ULONG_MAX is defined (vpodzime)
  - Remove extra 'is' in two docstrings (vpodzime)
  - Properly support 64bit operands (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.1-1
changelog:
  - Add NEWS.rst file (vtrefny)
  - Fix source and url in spec file (vtrefny)
  - Use only one git tag for new releases (vtrefny)
  - Actually translate the units when expected (vpodzime)
  - Add two temporary test files to .gitignore (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 1.2-1
changelog:
  - Use only version as a tag of the last release (vpodzime)
  - Do not require the glib-2.0 pkgconfig package (vpodzime)
  - Do not lie about tag creation (vpodzime)


author: Steve Grubb <sgrubb@redhat.com> 0.7.5-2
changelog:
  - resolves: #1185610 - libcap-ng: update caps table for newer kernels
  - Fix a leaked FD in upstream code


author: Adrian Reber <adrian@lisas.de> - 10.2+0.90-2
changelog:
  - added missing files from git: COPYING-GPL and COPYING-LGPL
  - added patch from git for missing pkgconfig requires
    and fixed FSF address


author: Adrian Reber <adrian@lisas.de> - 10.2+0.90-3
changelog:
  - included upstreamed patches which are changing the license
    headers to be LGPLv2+ for the library parts and GPLv2+ for the
    binaries


author: jchaloup <jchaloup@redhat.com> - 0.41-8
changelog:
  - resolves: #885174
    loading configuration files from /etc/cgconfig.d/ directory
  - resolves: #885166
    use * character as a meta character for all mounted
  - resolves: #886920
    add examples to man pages
  - resolves: #1143851
    extending cgroup names with default
  - resolves: #1142807
    api.c: support for setting multiline values in control files
    config.c: xfs file system sets item->d_type to zero, stat() and S_ISREG() test added (#885174)


author: Nikola Forró <nforro@redhat.com> - 0.41-12
changelog:
  - resolves: #1406927
    start cgred service after nss-user-lookup target
    show warnings about unsuccessful user/group lookups


author: Nikola Forró <nforro@redhat.com> - 0.41-17
changelog:
  - show warning when "tasks" file can not be opened
  - extend description of "controllers" section in cgrules.conf man page
    resolves: #1561736


author: Peter Robinson <pbrobinson@fedoraproject.org> 0.12.4-1
changelog:
  - Update to 0.12.4
  - http://ftp.gnome.org/pub/GNOME/sources/libchamplain/0.12/libchamplain-0.12.4.news


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.3-4
changelog:
  - BuildRequires for libchewing-python changed
    from python-devel to python2-devel
  - RPM_BUILD_ROOT changed to buildroot


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.4-1
changelog:
  - Upstream update to 0.3.4
  - Download is changed to Google Code.
  - /usr/share/chewing is removed, data files now located in
    /usr/lib(64)/libchewing
  - Info for libchewing is included.


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.4-3
changelog:
  - Fixed [Bug 913214] libchewing complains "no info dir entry" while installing
    Add direntry in libchewing.texi so it can be listed under 
    Category "Localization"


author: David Tardon <dtardon@redhat.com> - 0.3.1-5
changelog:
  - Resolves: rhbz#918079 libcmis::sha1() can return digests with fewer
    than 40 hexadecimal digits
  - Resolves: rhbz#918080 restrict redirection protocols


author: David Tardon <dtardon@redhat.com> - 0.5.0-2
changelog:
  - Related: rhbz#1290152 autoreconf is not needed
  - Related: rhbz#1290152 add a bunch of fixes found by coverity


author: Matej Mužila <mmuzila@redhat.com> - 5.3.21-23
changelog:
  - Mention in man page that care should be taken when running db_hotbackup
    with -c option. Resolves: rhbz#1460077


author: Tom Lane <tgl@redhat.com> 0.8.3-4
changelog:
  - Do not use -ffast-math; it breaks things and seems quite unlikely to offer
    any useful performance benefit for this type of package, anyway
  Resolves: #629964


author: Tom Lane <tgl@redhat.com> 0.8.4-1
changelog:
  - Update to version 0.8.4 (seems to contain only configure-support updates,
    but might as well adopt it)
  - Fix memory leak due to incorrect test in _is_row_fetched()
  Related: #733413


author: Tom Lane <tgl@redhat.com> 0.8.3-12
changelog:
  - Remove unnecessary package-name Requires:, since dependencies on library
    sonames should be enough, and we don't want to hard-wire assumptions about
    which packages provide which libraries
  - isa-ify cross-subpackage Requires:


author: Simone Caronni <negativo17@gmail.com> - 16.04.0-2
changelog:
  - Add tests, remove valgrind-devel build requirements (#1262274).
  - Disable tests until dbus-test-runner is available.


author: Richard W.M. Jones <rjones@redhat.com> - 1.12-13.1.el7
changelog:
  - Add patch to fix multilib conflicts in dnet-config
    resolves: rhbz#1059593
  - Remove RPM cruft from the spec file.


author: Tom Hughes <tom@compton.nu> - 20120410-1
changelog:
  - Update to 20120410 release
  - Drop the 0. from the version - the dates are the upstream versions
  - Remove explicit dependencies on elfutils-libelf


author: Kamil Dudka <kdudka@redhat.com> 3.0-7.20120601cvs
changelog:
  - Update to 3.0 (20120601 snap)
  - fix crash of el_insertstr() on incomplete multi-byte sequence (#840598)


author: Pravin Satpute <psatpute@redhat.com> - 1:1.07.2-11
changelog:
  - Decided to defer Liberation 2.0 feature in Fedora 18.
  - Reverting to Liberation 1.07.2. 
  - Using 11 release to match with Liberation Sans Narrow


author: Pawel Salek <pawsa@theochem.kth.se> - 1.0.4-14
changelog:
  - fix bug 599428: use 'version' macro instead of '_version'.
  - Use SSL patch by Ludwig Nussel of SUSE (bugzilla att id 399130).


author: Steve Dickson <steved@redhat.com> 2.0.14-1
changelog:
  - Updated to latest stable upstream version: 2.0.14-stable (bz 727129)
  - Removed the installion of the outdate man pages and the latex raw docs.
  - Corrected where the other doc are installed.


author: Steve Dickson <steved@redhat.com> 2.0.18-1
changelog:
  - Updated to latest stable upstream version: 2.0.18-stable
  - Moved documentation into its own rpm (bz 810138)


author: Petr Sabata <psabata@redhat.com> - 0.6.20-1
changelog:
  - 0.6.20 bump
  - Repackaging prehistoric libexif-docs, introducing version string in filename
  - Buildroot cleanup


author: Petr Šabata <contyk@redhat.com> - 0.6.21-1
changelog:
  - 0.6.21 bump
  - A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814,
    CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 & CVE-2012-2845)
  - Drop the pre-generated docs and introduce a doc subpackage


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-6
changelog:
  - Related: rhbz#749103 can restore iText requirement now that
    iText doesn't pull in the entire gcj stack


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-9
changelog:
  - repack source to remove bundled multi-license .jars
  - encodings/Grapheme-Cluster-Properties.txt is under UCD


author: Debarshi Ray <rishi@fedoraproject.org> - 0.10.4-4
changelog:
  - Ensure that the new exiv2 soname is used during the build
  - Adapt to Exiv2::BasicIo API change
    Resolves: rhbz#1486570


author: Ray Strode <rstrode@redhat.com> 2.32.1-4
changelog:
  - drop /etc/skel entry. libgnome creates it by default if it's
    not around and it needs it anyway. Better not to clutter users
    home directories just because they install glade.


author: Till Maas <opensource@till.name> - 3.6.0-7
changelog:
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code


author: Kalev Lember <klember@redhat.com> - 3.21.92-1
changelog:
  - Update to 3.21.92
  - Don't set group tags
  - Use make_install macro
  - Use license macro for COPYING
  - Use desktop-file-validate instead of desktop-file-install
  - Tighten -devel deps with the _isa macro


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.1-2
changelog:
  - Requires a new enough librest as we use symbols not available in older
    librest
    Related: rhbz#1116844


author: Fabiano Fidêncio <fidencio@redhat.com> 0.3.3-2
changelog:
  - Fix crash when VM has several ISO domains
    Resolves: rhbz#1274356
  - Add OvirtProxy::sso-token support for oVirt 4.0
    Resolves: rhbz#1324457


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-3
changelog:
  - Add upstream patch fixing unwanted authentication dialog for foreign menu
    when using remote-viewer ovirt://
    Resolves: rhbz#1346256


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-4
changelog:
  - Add upstream patch forcing use of the older v3 REST API as we don't support
    yet the v4 API
    Resolves: rhbz#1346215


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 0.3.3-5
changelog:
  - New storage format added in oVirt 4.1
    Resolves: rhbz#1346215
  - Check if operation was cancelled before disconnecting signal
    Resolves: rhbz#1431275


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.4-1
changelog:
  - Rebase to latest 0.3.4 upstream release. Still quite a few patches as
    there was no 0.3.5 release yet
    Resolves: rhbz#1584266


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 0.3.4-2
changelog:
  - Parse XML nodes automatically
    Related: rhbz#1427467
  - Set detailed error message for async call
    Related: rhbz#1427467


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 0.3.4-4
changelog:
  - Use certificate data from XML
    Resolves: rhbz#https://bugzilla.redhat.com/show_bug.cgi?id=1402909


author: Rex Dieter <rdieter@fedoraproject.org> - 0.8.2-7
changelog:
  - libgpod.pc Requires: libimobiledevice-1.0 ... overlinking (#818594)
  - tighten subpkg deps (via %_isa)
  - omit -devel deps that (should) get autodetected already


author: Caolán McNamara <caolanm@redhat.com> 1.14.26-1
changelog:
  - latest version
  - drop integrated gnome689706.gsf_input_dup.patch
  - libgsf-python is gone with "excise old bit-rotted python support"


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.32.7-3
changelog:
  - Rebase to libguestfs 1.32 in RHEL 7.3
    resolves: rhbz#1218766
  - The full tests are now run after the package has been built.
  - New tool and subpackage: virt-dib (safe diskimage-builder replacement).
  - New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
    (see https://bugzilla.redhat.com/1194158).
  - New tool: virt-get-kernel.
  - Depend on java-headless instead of full java.
  - New tool: virt-v2v-copy-to-local.
  - Disable virt-v2v subpackage on ppc64 etc
    resolves: rhbz#1287826
  - v2v: Remove VirtualBox Additions correctly
    resolves: rhbz#1296606
  - Add clearer warnings sections to all man pages
    resolves: rhbz#1293527
  - v2v: Disable the --in-place option.
  - v2v: Support conversion of Windows > 7
    resolves: rhbz#1190669
  - Add code to verify tarball signatures.
  - General performance improvements.
  - v2v: Prevent duplicate -b, -n, -oa options
    resolves: rhbz#1326266
    resolves: rhbz#1325825
  - v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
  - v2v: Fix alignment issues in treeviews in conversion dialog
    resolves: rhbz#1340407
  - p2v: spinner should be hidden when it stops spinning
    resolves: rhbz#1341564
  - p2v: ethtool command is not supported on p2v client
    resolves: rhbz#1341608
  - p2v: Add ifconfig command to ISO
    resolves: rhbz#1342447
  - p2v: Warn if virt-p2v-make-disk used on a partition
    resolves: rhbz#1342337
  - Build using OCaml with fix for CVE-2015-8869.
    resolves: rhbz#1343101
  - customize: Add --uninstall option (upstream 1343375)
  - p2v: Document permissions on id_rsa file
    resolves: rhbz#1343414
  - p2v: Print full curl error message
    resolves: rhbz#1343423
  - get-kernel: Fix --format auto
    resolves: rhbz#1341984
  - v2v: Provide better <Origin/> information to RHEV-M
    resolves: rhbz#1342398
  - customize: Give an error if --truncate-recursive path does not exist
    resolves: rhbz#1345809
  - sysprep: Add --network option so that --install option can be used
    resolves: rhbz#1345813
  - p2v: Print proper error if incorrect password is given
    resolves: rhbz#1227599
  - p2v: Print ssh error if incorrect hostname is given
    resolves: rhbz#1167916
  - p2v: Display progress of operation in non-GUI mode
    resolves: rhbz#1229386
  - p2v: Add a dialog confirming the user really means to cancel
    resolves: rhbz#1340464
  - p2v: log window should process colour escapes and backspaces
    resolves: rhbz#1314244
  - v2v: Fix installation of virtio drivers with *.dll files
    resolves: rhbz#1311373
  - p2v: Improve error message when ssh login to conversion server fails
    resolves: rhbz#1348900
  - v2v: Remove --dcpath parameter from manual
    resolves: rhbz#1315237
  - v2v: Fix conversion of guests with floppy drives
    resolves: rhbz#1309706
  - p2v: Better error when sudo requires a password
    resolves: rhbz#1340809
  - v2v: Refuse to convert if there is < 1GB free in temporary directory
    resolves: rhbz#1316479
  - inspection: Get Windows drive letters for GPT disks
    resolves: rhbz#1349237
  - p2v: Add disk utils and display serial number of disks
    resolves: rhbz#855058
  - p2v: Fix timeout error when connecting to unresponsive ssh server
    resolves: rhbz#1350363
  - Remove external dependency generator.  Use supermin RPM deps instead.
    related: rhbz#1309796
  - p2v: Flush messages to the journal immediately
    resolves: rhbz#1229386
  - customize: Fix --install on ppc64le
    resolves: rhbz#1264835
  - lib: Fix finding icons in Windows 7 64 bit guests
    resolevs: rhbz#1352761
  - v2v: Add virsh --quiet flag when running virt-v2v --quiet
    resolves: rhbz#1358142
  - lib: Fix inspection of ISOs with latest libosinfo
    resolves: rhbz#1359652
  - dib: Fix run_command exit handlers on failure
    resolves: rhbz#1362357
  - dib: Rework run of extra-data.d hooks
    resolves: rhbz#1362354
  - Miscellaneous fixes to man pages and --help output
    resolves: rhbz#1362668
  - lib: Specify backing format for read-only files
    resolves: rhbz#1354335
  - Fix --selinux-relabel option
    resolves: rhbz#1362669
  - sparsify: Fix --in-place option with UEFI guest
    resolves: rhbz#1364347
  - p2v: Use latest linux-firmware in ISO
    resolves: rhbz#1364419
  - v2v: Fix guest name when using -i disk
    resolves: rhbz#1365005
  - p2v: Fix GUI message.
  - v2v: Make fstrim message clearer
    resolves: rhbz#1366456
  - v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
    resolves: rhbz#1367615
  - lib: Fix assert-fail if port is missing in libvirt XML
    resolves: rhbz#1370424


author: Pino Toscano <ptoscano@redhat.com> - 1:1.36.3-6
changelog:
  - Rebase to libguestfs 1.36 in RHEL 7.4.
    resolves: rhbz#1359086
  - v2v: always use names for libvirt pools
    resolves: rhbz#1141631
  - v2v: correctly find GRUB in RHEL UEFI guests
  - v2v: uninstall VMware tools packages from guests
    resolves: rhbz#1155150
  - v2v: install RHEV-APT only when using -o rhev/-o vdsm
    resolves: rhbz#1161019
  - New API: btrfs-filesystem-show
    resolves: rhbz#1164765
  - p2v: always enable debugging when running virt-v2v
    resolves: rhbz#1167623
  - libguestfs prefers virtio-pci on aarch64
    resolves: rhbz#1237250
  - v2v: make sure to copy all the driver files on Windows
    resolves: rhbz#1255610
  - Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
    Requires to >= 1.3.10-5.8.el7
    resolves: rhbz#1311890
  - v2v: ignore all the environment variables for proxy when exporting from
    vCenter
    resolves: rhbz#1354507
  - virt-sysprep can deal with full-LUKS encrypted guests
    resolves: rhbz#1362649
  - All the tools have bash completion scripts.
    resolves: rhbz#1367738
  - v2v: do not remove Processor and Intelppm nodes in Windows guests
    resolves: rhbz#1372668
  - Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
    regular expression in file_contexts file
    resolves: rhbz#1374232
  - v2v: set all the properties on creation when exporting to Glance
    resolves: rhbz#1374405
  - v2v: set hw_video_model when exporting to Glance
    resolves: rhbz#1374651
  - v2v: fix OVA conversion as root using the libvirt backend
    resolves: rhbz#1375157
  - Various improvements and fixes to the documentation
    resolves: rhbz#1377081
    resolves: rhbz#1390876
    resolves: rhbz#1398070
    resolves: rhbz#1425306
  - v2v: support <listen type='socket'> and <listen type='none'>
    resolves: rhbz#1378022
  - v2v: allow libvirt >= 2.1.0 for vCenter conversions
    resolves: rhbz#1379240
  - p2v: enable mnemonics in the GUI
    resolves: rhbz#1379289
  - Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
    resolves: rhbz#1382275
  - Correctly parse mount options in btrfs entries in /etc/fstab.
    resolves: rhbz#1383517
  - Read secrets from libvirt domains, when inspecting them
    resolves: rhbz#1392798
  - v2v: add --vdsm-compat=1.1 flag for VDSM
    resolves: rhbz#1400205
  - Fix inspection with UsrMove and /usr in a separate partition
    resolves: rhbz#1401474
  - v2v: improve import compatibility with OVAs produced by AWS
    resolves: rhbz#1402301
  - resize: allow URIs for the output disk
    resolves: rhbz#1404182
  - Disable EDD when launching the appliance
    resolves: rhbz#1404287
  - v2v: increase the memory allocated to the appliance
    resolves: rhbz#1418283
  - p2v: switch from GTK+ 2 to GTK+ 3
  - p2v: add dbus-devel as BuildRequires to disable suspension during the
    conversion
  - libguestfs-java: bump the java-headless Require to >= 1.7.0, matching the
    Build-Require, and the generated bytecode
    resolves: rhbz#1364518
  - Do not try to use/write to /var/cache/yum & /var/log/yum.log
  - Bump ocaml-findlib-devel BuildRequires to >= 1.3.3-7.el7, because of
    RHBZ#1403897
  - v2v: remove --dcpath & --dcPath from --help output too
    resolves: rhbz#1429430
  - v2v: force VNC as display for -i disk, as SDL is not supported
    resolves: rhbz#1372671
  - v2v, p2v: rename rhvm network to ovirtmgmt
    resolves: rhbz#1429491
  - v2v: when exporting to local disk, check that UEFI firmware is installed
    before conversion
    resolves: rhbz#1429506
  - dib: actually generate SHA256 checksums when using --checksum
    resolves: rhbz#1430184
  - v2v: do not mention SUSE Xen hosts as supported
    resolves: rhbz#1430203
  - v2v: depend on OVMF/AAVMF, for converting EFI guests
    resolves: rhbz#1429643
  - v2v: use absolute path when using an OVA as backing file
    resolves: rhbz#1430680
  - v2v: support Debian/Ubuntu guests
    resolves: rhbz#1387213
  - sysprep: remove DHCP_HOSTNAME entries
    resolves: rhbz#1427529
  - v2v: avoid repeated "run virt-v2v -v -x" message on error
    resolves: rhbz#1167623
  - bash-completion: add script for virt-v2v-copy-to-local
    resolves: rhbz#1367738
  - v2v: fix virtio block driver installation for Windows 10 and Windows 2016
    resolves: rhbz#1434737
  - Replace the libosinfo dependency with osinfo-db, since we are only using
    the osinfo database.
  - v2v: fix virtio driver installation for Windows 8 UEFI
    resolves: rhbz#1431579
  - v2v: new 'vmx' import method
    resolves: rhbz#1441197
  - v2v: properly identify Windows 2016 guests when exporting them to RHV-M
    resolves: rhbz#1447202
  - Run pvresize in non-interactive mode
    resolves: rhbz#1460692
  - resize: make sure the input disk is read-only
    resolves: rhbz#1463714
  - Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
    resolves: rhbz#1463646


author: Pino Toscano <ptoscano@redhat.com> - 1:1.36.10-6
changelog:
  - Rebase to libguestfs 1.36.10 in RHEL 7.5.
    resolves: rhbz#1472272
  - Build against OCaml 4.05
    resolves: rhbz#1447981
  - Enable the copyonread flag when running the appliance using libvirt.
    resolves: rhbz#1466563
  - Make sure kernel-rt is never used as Requires.
    resolves: rhbz#1471651
  - v2v: disable unconfiguration of manually installed VMware tools.
    resolves: rhbz#1477905
  - v2v: prefer pigz or pxz for uncompressing OVA files, if available
    resolves: rhbz#1448739
  - resize: handle empty UUIDs for swap partitions
    resolves: rhbz#1482737
  - v2v: remove mention of --dcpath in an error message
    resolves: rhbz#1486197
  - Disables the QEMU image file locking when opening disks as read-only
    resolves: rhbz#1417306
    resolves: rhbz#1503497
  - Briefly document the format used for URIs
    resolves: rhbz#1450325
  - v2v: deal with grub2 configurations without a default set
    resolves: rhbz#1472288
  - v2v: warn when a guest has passthrough devices
    resolves: rhbz#1472719
  - v2v: fix three regular expressions
    resolves: rhbz#1494555
  - v2v: enable conversion of full-disk LUKS-encrypted Linux guests
    resolves: rhbz#1451665
  - v2v: new 'vddk' import method
    resolves: rhbz#1477912
    resolves: rhbz#1513884
  - Enable libguestfs to work on z Systems
    resolves: rhbz#1479526
  - p2v: fx check for sudo requiring a password
    resolves: rhbz#1500673
  - v2v: handle disks with snapshots in vCenter
    resolves: rhbz#1172425
  - rescue: backport improved version
    resolves: rhbz#1438710
  - v2v: improve bootloader detection
    resolves: rhbz#1508299
  - v2v: parse MAC address of network interfaces in OVF files
    resolves: rhbz#1506572
  - Unconditionally depend on libvirt-daemon-kvm >= 3.9.0-1, which will always
    pull the right qemu-kvm too, and thus remove the unversioned dependencies
    on it
    resolves: rhbz#1500870
  - v2v: fix RPM file owned test
    resolves: rhbz#1503958
  - Do not open read-only disks using <shareable/> in the libvirt backend
    resolves: rhbz#1518517
  - v2v: handle better when grubby does not report any default kernel
    resolves: rhbz#1519204
  - v2v: enhance vmx import method to access via SSH
    resolves: rhbz#1523767
  - builder: fix caching of templates when using --cache-all-templates
    resolves: rhbz#1523650


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.50
changelog:
  - v2v:
    * When debugging, dump OVF to stderr.
    * Ignore missing kernels from grub
      resolves: rhbz#1230412
    * Calculate VMware dcPath correctly (1256823)
    * Map empty VMware network or bridge name to default (1257895)
  - p2v:
    * Wait for network to come online before testing connection
      resolves: rhbz#1256222
  - Fix tests to run correctly with libguestfs-winsupport 7.2.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.51
changelog:
  - v2v: Fix handling of extra slashes in dcPath calculation
    resolves: rhbz#1258342 rhbz#1256823
  - v2v: Fix -oa preallocation option
    resolves: rhbz#1251909


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.52
changelog:
  - v2v: Warn if Group Policy or AV software may result in 7B boot failure
    (1260689)
  - v2v: Fix OVF XML to enable qxl display
    resolves: rhbz#1260590


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.28.1-1.53
changelog:
  - v2v: Error if certain options appear twice on the command line (1261242)
  - v2v: Add --dcpath parameter to allow dcPath to be overridden (1256823)
  - v2v: Partially revert: Fix OVF XML to enable qxl display (1260590)
  - v2v: Detect AVG Technologies as AV software (1261436)
    resolves: rhbz#1261281


author: Pino Toscano <ptoscano@redhat.com> - 1:1.38.2-12
changelog:
  - Rebase to libguestfs 1.38.2 in RHEL 7.6.
    resolves: rhbz#1551055
  - v2v: warn about unknown VMware controller types
    resolves: rhbz#1510801
  - df: show correct sizes in human-readable mode for filesystems with
    block size = 512
    resolves: rhbz#1525262
  - v2v: fix example URL in man page
    resolves: rhbz#1540535
  - Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
    resolves: rhbz#1541525
  - Fix qemu-img-ma dependency in non-x86_64 architectures
    resolves: rhbz#1568676
  - v2v: update "resume=/dev/sdaX" entries in GRUB command lines
    resolves: rhbz#1532224
  - v2v: fix virtio-rng and memballoon OVF fragment for RHV
    resolves: rhbz#1550168
  - v2v: detect whether the root filesystem was not mounted in read-write mode
    resolves: rhbz#1567763
  - v2v: import OVAs with snapshots
    resolves: rhbz#1570407
  - v2v: ship a newer version of rhev-apt.exe
    resolves: rhbz#1571237
  - Move the osinfo-db dependency to libguestfs-tools-c, since it's the only
    place where it used now (by virt-builder-repository).
  - v2v: new 'rhv-upload' method to stream images directly to oVirt/RHV using
    oVirt REST API
    resolves: rhbz#1557273
  - Start lvmetad earlier when booting the appliance
    resolves: rhbz#1581810
  - v2v: fix kernel detection in Ubuntu guests since 18.04
    resolves: rhbz#1591248
  - v2v: convert the CPU topology correctly
    resolves: rhbz#1541908
  - Add a new inspect_get_osinfo API, and add its result to the output of
    virt-inspector
    resolves: rhbz#1544842
  - Pass absolute paths to NBD sockets when using the libvirt backend
    resolves: rhbz#1588451
  - v2v: do not write only <vendor> without <model> in libvirt XMLs
    resolves: rhbz#1591789
  - v2v: depend on nbdkit, nbdkit-plugin-python2, and nbdkit-plugin-vddk,
    used for -it vddk, and -o rhv-upload
    resolves: rhbz#1589776
    resolves: rhbz#1608718
  - v2v/p2v: disable on aarch64, since it is not supported (nor even working)
    there
    resolves: rhbz#1601488
  - v2v: handle srN devices in libvirt XML (for virt-p2v)
    resolves: rhbz#1612785
  - Do not use the -cpu parameter under any circumstances for ppc64le.
    resolves: rhbz#1605071


author: EL Errata <el-errata_ww@oracle.com> - 1:1.38.2-12.0.1
changelog:
  - Set DISTRO_ORACLE_LINUX corresponding to ol
  - Remove 0001-update-distro-for-oracle.patch
    To support OL, update related code about /etc/os-release [bug 28760753]
  - Update packagelist.in for OL


author: Pino Toscano <ptoscano@redhat.com> - 1:1.38.2-12.el7_6.1
changelog:
  - v2v: update documentation regarding SHA-2 certificates in Windows 7 and
    Windows Server 2008 R2
    resolves: rhbz#1632788
  - v2v: fix rhev-apt firstboot command for Windows
    resolves: rhbz#1625216


author: Pino Toscano <ptoscano@redhat.com> - 1:1.40.2-5
changelog:
  - Rebase to libguestfs 1.40.2 in RHEL 7.7.
    resolves: rhbz#1621895
  - v2v: uninstall the VMware Tools correctly
    resolves: rhbz#1465849
    resolves: rhbz#1481930
  - v2v: fix VMware vCenter roles needed for conversion
    resolves: rhbz#1530967
  - v2v: preserve the VM Generation ID
    resolves: rhbz#1598350
  - Query QEMU to known whether KVM is supported
    resolves: rhbz#1605071
  - v2v: add --mac option
    resolves: rhbz#1607274
  - v2v: install ovirt-guest-agent-common on Linux guests migrated to RHV
    resolves: rhbz#1619665
    resolves: rhbz#1691659
  - v2v: provide a way to query for the estimated size of the disks
    resolves: rhbz#1622785
  - Correctly inspect the newer versions of openSUSE (15, Factory, Thumbleweed)
    resolves: rhbz#1634248
  - p2v: add an option to Shutdown the machine after the conversion
    resolves: rhbz#1642044
  - v2v: fix epoch when querying installed RPM packages
    resolves: rhbz#1669395
  - Use a better icon for RHEL >= 7 guests
    resolves: rhbz#1679482
  - v2v: improve the architecture detection of Linux kernel modules
    resolves: rhbz#1690574
  - v2v: ship a newer version of rhev-apt.exe
    resolves: rhbz#1688155
  - v2v: update nbdkit information in documentation
    resolves: rhbz#1605242
  - v2v: warn when a guest has 'direct' network interfaces
    resolves: rhbz#1151902
  - v2v: use proper SELinux label for nbdkit sockets
    resolves: rhbz#1698437


author: Pino Toscano <ptoscano@redhat.com> - 1:1.40.2-5.el7_7.1
changelog:
  - v2v: fix a couple of Python 2 porting issues in the nbdkit Python script
    for 'rhv-upload'
    resolves: rhbz#1726168


author: Pino Toscano <ptoscano@redhat.com> - 1:1.40.2-7
changelog:
  - v2v: -o rhv-upload: improve wait logic after finalize
    resolves: rhbz#1680361
  - v2v: fix DISKTYPE value in generated .ovf files
    resolves: rhbz#1750719


author: EL Errata <el-errata_ww@oracle.com> - 1:1.40.2-10.0.1
changelog:
  - Set DISTRO_ORACLE_LINUX corresponding to ol
  - Remove 0001-update-distro-for-oracle.patch
    To support OL, update related code about /etc/os-release [Orabug: 28760753]
  - Update packagelist.in for OL


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream version
  - Do not use deprecated GLib functionality
  - Unref the GMainloop after it has been run, not when just quit


author: Marek Kasik <mkasik@redhat.com> - 0.2.4-1
changelog:
  - Update to 0.2.4
  - Backport several important patches from current master
  - Revert addition of GXPSImage (it would change ABI)
  - Resolves: #1384959


author: Marek Kasik <mkasik@redhat.com> - 0.2.5-1
changelog:
  - Update to newly released 0.2.5
  - Preserve ABI by exporting the same set of methods as before
  - Resolves: #1384959


author: Marek Kasik <mkasik@redhat.com> - 0.3.0-2
changelog:
  - Ensure gxps_archive_read_entry() fills the GError in case of failure
  - Handle errors returned by archive_read_data()
  - Resolves: #1574844


author: Doug Ledford <dledford@redhat.com> - 1.3.11-1
changelog:
  - Update to latest upstream release (dependency for another package)
  - Enable valgrind in build
  - Related: bz1092538


author: Doug Ledford <dledford@redhat.com> - 1.3.12-1
changelog:
  - Build on s390
  - Update to latest version to work with OPA enabled libibumad
  - Related: bz1169962, bz1186159


author: Jarod Wilson <jarod@redhat.com> 1.2.0-1
changelog:
  - Update to libiec61883 v1.2.0 release
  - Rework installtests patch to not require autoreconf
  - Make iso channel allocation work w/o local fw node r/w


author: Tim Waugh <twaugh@redhat.com> 0.2.11-9
changelog:
  - The python sub-package now requires the exactly-matching main
    package (bug #605169).
  - Fixed strict aliasing warnings (bug #605170).


author: Peter Hutterer <peter.hutterer@redhat.com> 1.6.3-3
changelog:
  - Fix touchpad tap timestamps (#1491525)
  - Fix missing show-keycodes entry in man page (#1491532)
  - Change palm detection thresholds (#1491537)
  - Ignore tap motion threshold for nfingers > nslots (#1491533)
  - Fix a memory leak on destroy
  - Ignore hovering touches while tapping
  - Fix a man page typo


author: Peter Hutterer <peter.hutterer@redhat.com> 1.5.2-2
changelog:
  - Swap to the correct tarball so we match the checksums from upstream (had a
    local mixup of tarballs)


author: Rex Dieter <rdieter@fedoraproject.org> 3.52.6-3
changelog:
  - capitalize Name,Summary,Version tags
  - -devel: capitalize Summary
  - fix spurious permissions on header files
  - refresh upstream source
  - -admin,-devel: add %defattr(...)


author: Rex Dieter <rdieter@fedoraproject.org> 3.52.6-4
changelog:
  - -devel: install headers to /usr/include/libiodbc/ to better avoid
    conflicts and need for bogus unixODBC-devel dep


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-41
changelog:
  - Resolves: rhbz#1445445 - Smart card login fails if same cert mapped to
                             IdM user and AD user


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-43
changelog:
  - Resolves: rhbz#1440132 - fiter_users and filter_groups stop working
                             properly in v 1.15


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-44
changelog:
  - Resolves: rhbz#1457927 - getent failed to fetch netgroup information
                             after changing default_domain_suffix to
                             ADdomin in /etc/sssd/sssd.conf


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-47
changelog:
  - Resolves: rhbz#1430415 - ldap_purge_cache_timeout in RHEL7.3 invalidate
                             most of the entries once the cleanup task kicks in


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-48
changelog:
  - Resolves: rhbz#1459846 - krb5: properly handle 'password expired'
                             information retured by the KDC during
                             PKINIT/Smartcard authentication


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-49
changelog:
  - Resolves: rhbz#1450107 - SSSD doesn't handle conflicts between users
                             from trusted domains with the same name when
                             shortname user resolution is enabled


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-50
changelog:
  - Resolves: rhbz#1457926 - Wrong search base used when SSSD is directly
                             connected to AD child domain


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-50.1
changelog:
  - Resolves: rhbz#1478250 - Idle nss file descriptors should be closed
                             [rhel-7.4.z]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-50.2
changelog:
  - Resolves: rhbz#1478252 - Querying the AD domain for external domain's
                             ID can mark the AD domain offline [rhel-7.4.z]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.15.2-50.3
changelog:
  - Resolves: rhbz#1482927 - sssd_be is utilizing more CPU during sudoi
                             rules refresh [rhel-7.4.z]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.15.2-50.4
changelog:
  - Resolves: rhbz#1489290 - samba shares with sssd authentication broken
                             on 7.4 [rhel-7.4.z]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.15.2-50.6
changelog:
  - Add a patch that was missed in 1.15.2-50.4
  - Related: rhbz#1489290 - samba shares with sssd authentication broken
                            on 7.4 [rhel-7.4.z]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.15.2-50.7
changelog:
  - Resolves: rhbz#1506142 - SSSD can crash due to ABI changes in
                             libldb >= 1.2.0 (1.1.30) [rhel-7.4.z]
  - Resolves: rhbz#1506682 - sssd_client: add mutex protected call to the
                             PAC responder [rhel-7.4.z]
  - Resolves: rhbz#1499658 - CVE-2017-12173 sssd: unsanitized input when
                             searching in local cache database [rhel-7.4.z]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.15.2-50.8
changelog:
  - Resolves: rhbz#1508972 - Accessing IdM kerberos ticket fails while id
                             mapping is applied [rhel-7.4.z]
  - Resolves: rhbz#1509177 - Race condition between refreshing the cr_domain
                             list and a request that is using the list can
                             cause a segfault is sssd_nss [rhel-7.4.z]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-19.1
changelog:
  - Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-19.2
changelog:
  - Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-19.4
changelog:
  - Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-19.5
changelog:
  - Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.0-19.6
changelog:
  - Resolves: rhbz#1594178 - Login with sshkeys stored in ipa not working after update to RHEL-7.5 [rhel-7.5.z]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.0-19.7
changelog:
  - Resolves: rhbz#1596292 - home dir disappear in sssd cache on the IPA master for AD users [rhel-7.5.z]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.0-19.8
changelog:
  - Resolves: rhbz#1601360 - SSSD bails out saving desktop profiles in case an invalid profile is found [rhel-7.5.z]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-10
changelog:
  - Resolves: rhbz#1421194 - SSSD doesn't use AD global catalog for
                             gidnumber lookup, resulting in unacceptable
                             delay for large forests


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-11
changelog:
  - Related: rhbz#1507614 - Improve Smartcard integration if multiple
                            certificates or multiple mapped identities are
                            available
  - Resolves: rhbz#1523010 - IPA user able to authenticate with revoked
                             cert on smart card
  - Resolves: rhbz#1520984 - getent output is not showing home directory
                             for IPA AD trusted user
  - Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                            threads


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-12
changelog:
  - Resolves: rhbz#1512027 - NSS by-id requests are not checked against
                             max_id/min_id ranges before triggering the
                             backend


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-13
changelog:
  - Resolves: rhbz#1523010 - IPA user able to authenticate with revoked cert
                             on smart card


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-15
changelog:
  - Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                             subdomain initialization - IPA AD Trust
  - Related: rhbz#1482555 - sysdb index improvements - missing ghost
                            attribute indexing, unneeded objectclass index
                            etc..
  - Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                            on RHEL clients joined to AD via sssd [RHEL 7]
  - Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                             gidNumber = 0
  - Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                            a primed cache
  - Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                            threads


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-16
changelog:
  - Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                             with no specific host/hostgroup set
  - Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
  - Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                            on RHEL clients joined to AD via sssd [RHEL 7]


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-17
changelog:
  - Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                             server


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.0-18
changelog:
  - Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
  - Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-4
changelog:
  - Resolves: rhbz#1590603 - EMBARGOED CVE-2018-10852 sssd: information leak from the sssd-sudo responder [rhel-7]
  - Resolves: rhbz#1450778 - Full information regarding priority of lookup of principal in keytab not in man page


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-5
changelog:
  - Resolves: rhbz#1583725 - SSSD AD uses LDAP filter to detect POSIX attributes stored in AD GC also for regular AD DC queries
  - Resolves: rhbz#1416528 - sssd in cross realm trust configuration should be able to use AD KDCs from a client site defined in sssd.conf or a snippet
  - Resolves: rhbz#1592964 - Groups go missing with PAC enabled in sssd


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-6
changelog:
  - Resolves: rhbz#1582975 - The search filter for detecting POSIX attributes in global catalog is too broad and can cause a high load on the servers


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-7
changelog:
  - Resolves: rhbz#1600822 - SSSD bails out saving desktop profiles in case an invalid profile is found


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.2-8
changelog:
  - Resolves: rhbz#1607313 - When sssd is running as non-root user, the sudo pipe is created as sssd:sssd but then the private pipe ownership fails


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.2-10
changelog:
  - Resolves: rhbz#1586127 - Spurious check in the sssd nss memcache can cause the memory cache to be skipped


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.16.2-12
changelog:
  - Resolves: rhbz#1610667 - sssd_ssh leaks file descriptors when more than one certificate is converted into an SSH key
  - Resolves: rhbz#1583360 - The IPA selinux provider can return an error if SELinux is completely disabled


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.2-13
changelog:
  - Resolves: rhbz#1593756 - sssd needs to require a newer version of
                             libtalloc and libtevent to avoid an issue
                             in GPO processing


author: Michal Židek <mzidek@redhat.com> - 1.16.3-1
changelog:
  - Resolves: rhbz#1645047 - sssd only sets the SELinux login context if it
                             differs from the default [rhel-7.6.z]


author: Michal Židek <mzidek@redhat.com> - 1.16.3-2
changelog:
  - Resolves: Bug 1649784 - SSSD not fetching all sudo rules from
                            AD [rhel-7.6.z]


author: Michal Židek <mzidek@redhat.com> - 1.16.3-4
changelog:
  - Resolves: rhbz#1659083 - SSSD must be cleared/restarted periodically in
              order to retrieve AD users through IPA Trust [rhel-7.6.z]


author: Michal Židek <mzidek@redhat.com> - 1.16.3-5
changelog:
  - Resolves: rhbz#1659507 - SSSD's LDAP authentication provider does not work
                             if ID provider is authenticated with GSSAPI [rhel-7.6.z]


author: Michal Židek <mzidek@redhat.com> - 1.16.2-13.6
changelog:
  - Resolves: rhbz#1683578 - sssd_krb5_locator_plugin introduces delay in
                             cifs.upcall krb5 calls [rhel-7.6.z]


author: Michal Židek <mzidek@redhat.com> - 1.16.2-13.8
changelog:
  - Resolves: rhbz#1690759 - RHEL STIG pointing sssd Packaging issue [rhel-7.6.z]
                           - Part 2.


author: Michal Židek <mzidek@redhat.com> - 1.16.4-14
changelog:
  - Resolves: rhbz#1684979 - The HBAC code requires dereference to be enabled
                             and fails otherwise


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.4-15
changelog:
  - Resolves: rhbz#1685581 - Extend cached_auth_timeout to cover subdomains
                             /trusts


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.4-17
changelog:
  - Resolves: rhbz#1711832 - The files provider does not handle resetOffline
                             properly


author: Jakub Hrozek <jhrozek@redhat.com> - 1.16.4-18
changelog:
  - Resolves: rhbz#1710286 - The server error message is not returned if
                             password change fails


author: Michal Židek <mzidek@redhat.com> - 1.16.4-21
changelog:
  - Resolves: rhbz#1714952 - [sssd] RHEL 7.7 Tier 0 Localization
  - Rebuild japanese gmo file explicitly


author: Michal Židek <mzidek@redhat.com> - 1.16.4-21.1
changelog:
  - Resolves: rhbz#1758566 - negative cache does not use values from 'filter_users'
                             config option for known domains [rhel-7.7.z]


author: EL Errata <el-errata_ww@oracle.com> - 1.16.4-21.0.1
changelog:
  - Revert Redhat's change of disallowing duplicated incomplete gid
    when "id_provider=ldap" is used, which caused regression in AD
    environment. [Orabug: 29286774] [Doc ID 2605732.1]


author: Michal Židek <mzidek@redhat.com> - 1.16.4-21.2
changelog:
  - Resolves: rhbz#1801207 - id command taking 1+ minute for returning user
                             information [rhel-7.7.z] (


author: Alexey Tikhonov <atikhono@redhat.com> - 1.16.4-21.3
changelog:
  - Resolves: rhbz#1807934 - sssd failover leads to delayed and failed logins
                             [rhel-7.7.z]


author: Michal Židek <mzidek@redhat.com> - 1.16.4-12
changelog:
  - Resolves: rhbz#1576524 - RHEL STIG pointing sssd Packaging issue
                           - This was partially fixed by the rebase, but one
                             spec file change was missing.


author: Michal Židek <mzidek@redhat.com> - 1.16.4-29
changelog:
  - Resolves: rhbz#1713352 - Implicit files domain gets activated when no
                             sssd.conf present and sssd is started


author: Michal Židek <mzidek@redhat.com> - 1.16.4-30
changelog:
  - Resolves: rhbz#1530741 - Trusted domain user logins succeed after using
                             ipa trustdomain-disable


author: Michal Židek <mzidek@redhat.com> - 1.16.4-31
changelog:
  - Resolves: rhbz#1746878 - Let IPA client read IPA objects via LDAP and not
                             a extdom plugin when resolving trusted users and
                             groups


author: Michal Židek <mzidek@redhat.com> - 1.16.4-32
changelog:
  - Resolves: rhbz#1530741 - Trusted domain user logins succeed after using ipa
                             trustdomain-disable


author: Michal Židek <mzidek@redhat.com> - 1.16.4-34
changelog:
  - Resolves: rhbz#1768404 - automount on RHEL7 gives the message
                             'lookup(sss): setautomntent: No such file or
                             directory'


author: Michal Židek <mzidek@redhat.com> - 1.16.4-37
changelog:
  - Resolves: rhbz#1784620 - Force LDAPS over 636 with AD Access Provider
  - just bumping the version to fix generated dates in man pages


author: Michal Židek <mzidek@redhat.com> - 1.16.4-37.1
changelog:
  - Resolves: rhbz#1801208 - id command taking 1+ minute for returning user
                             information [rhel-7.8.z]
                           - Also updates spec file to not replace
                             /pam.d/sssd-shadowutils on update


author: Alexey Tikhonov <atikhono@redhat.com> - 1.16.4-37.2
changelog:
  - Resolves: rhbz#1816031 - SSSD is crashing: dbus_watch_handle() is invoked
                             with corrupted 'watch' value [rhel-7.8.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.16.4-37.3
changelog:
  - Resolves: rhbz#1817380 - Removing an IPA sub-group should NOT remove the members
                             from indirect parent that also belong to other subgroups
                             [rhel-7.8.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.16.4-37.4
changelog:
  - Resolves: rhbz#1842861 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing [rhel-7.8.z]
  - Resolves: rhbz#1845009 - [Bug] Reduce logging about flat names [rhel-7.8.z]


author: Alexey Tikhonov <Alexey Tikhonov> 1.16.5-2
changelog:
  - Resolves: rhbz#1513371 - [abrt] [faf] sssd: raise(): /usr/libexec/sssd/sssd_be[PROXY] killed by 6
  - Resolves: rhbz#1568083 - subdomain lookup fails when certmaprule contains DN
  - Resolves: rhbz#1781539 - PKINIT with KCM does not work
  - Resolves: rhbz#1786341 - SSSD doesn't honour the customized ID view created in IPA
  - Resolves: rhbz#1709818 - override_gid did not work for subdomain.
  - Resolves: rhbz#1719718 - Validator warning issue : Attribute 'dns_resolver_op_timeout' is not allowed in section 'domain/REMOVED'. Check for typos
  - Resolves: rhbz#1787067 - sssd (sssd_be) is consuming 100 CPU, partially due to failing mem-cache
  - Resolves: rhbz#1822461 - background refresh task does not refresh updated netgroup entries
  - Added missing 'Requires' to resolves some of rpmdiff tool warnings


author: Alexey Tikhonov <Alexey Tikhonov> 1.16.5-3
changelog:
  - Resolves: rhbz#1683946 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working setup


author: Alexey Tikhonov <Alexey Tikhonov> 1.16.5-4
changelog:
  - Resolves: rhbz#1829806 - [Bug] Reduce logging about flat names
  - Resolves: rhbz#1800564 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package


author: Alexey Tikhonov <Alexey Tikhonov> 1.16.5-6
changelog:
  - Resolves: rhbz#1819013 - pam_sss reports PAM_CRED_ERR when providing wrong password for an existing IPA user, but this error's description is misleading
  - Resolves: rhbz#1800571 - Multiples Kerberos ticket on RHEL 7.7 after lock and unlock screen


author: Alexey Tikhonov <Alexey Tikhonov> 1.16.5-7
changelog:
  - Resolves: rhbz#1835813 - sssd boots offline if symlink for /etc/resolv.conf is broken/missing
  - Resolves: rhbz#1837545 - Users must be informed better when internal WATCHDOG terminates process.


author: Alexey Tikhonov <Alexey Tikhonov> 1.16.5-8
changelog:
  - Resolves: rhbz#1553784 - Document how to prevent invalid selinux context for default home directories in SSSD-AD direct integration.
  - Resolves: rhbz#1836910 - Rhel7.7 server have an issue regarding dyndns update for PTR-records which is done by sssd on active directory DNS servers.
                             It is done in two steps (two different nsupdate messages).


author: Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10
changelog:
  - Resolves: rhbz#1804005 - sssd doesn't follow the link order of AD Group Policy Management
  - Resolves: rhbz#1773409 - sssd is failing to discover other subdomains in the forest if LDAP entries do not contain AD forest root information
  - Resolves: rhbz#1551077 - GDM failure loop when no user mapped for smart card
  - Resolves: rhbz#1507683 - GDM password prompt when cert mapped to multiple users and promptusername is False


author: Todd Vierling <todd.vierling@oracle.com> - 1.16.5-10.0.1
changelog:
  - sssd_be crash when refresh_expired_interval is set [orabug 31220112]
  - Revert Redhat's change of disallowing duplicated incomplete gid
    when "id_provider=ldap" is used, which caused regression in AD
    environment. [Orabug: 29286774] [Doc ID 2605732.1]


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.2
changelog:
  - Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
  - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
  - just bumping the version to build for proper target


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.3
changelog:
  - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
    (Previous attempt to fix this issue was incomplete)


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.4
changelog:
  - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
    (Previous attempt to fix this issue was incomplete (again))


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.5
changelog:
  - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]
    (Previous attempt to fix this issue was incomplete (again))
  - just bumping the version to build for proper target


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.6
changelog:
  - Resolves: rhbz#1899593 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr() [rhel-7.9.z]
  - Resolves: rhbz#1888409 - sssd component logging is now too generic in syslog/journal [rhel-7.9.z]
  - Resolves: rhbz#1852659 - sssd service is starting even though it is disabled state [rhel-7.9.z]
  - Resolves: rhbz#1893443 - User lookups over the InfoPipe responder fail intermittently [rhel-7.9.z]
  - Resolves: rhbz#1871288 - krb5_child denies ssh users when pki device detected [rhel-7.9.z]
  - Resolves: rhbz#1853703 - Unexpected behavior and issue with filter_users/filter_groups option [rhel-7.9.z]
  - Resolves: rhbz#1756240 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains [rhel-7.9.z]
  - Resolves: rhbz#1851112 - LDAP bind can fail due to unconfigurable DNS server timeouts that inhibit SSSD failover [rhel-7.9.z]


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.7
changelog:
  - Resolves: rhbz#1875514 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [rhel-7.9.z]
  - Resolves: rhbz#1772513 - SSSD is generating lot of LDAP queries in a very large environment [rhel-7.9.z]
  - Resolves: rhbz#1736845 - [RFE] Backporting certificate matching rules for files, AD and LDAP provider [rhel-7.9.z]


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.8
changelog:
  - Resolves: rhbz#1910131 - sssd throwing error " Unable to parse name test' [1432158283]: The internal name format cannot be parsed" at debug_level 2 [rhel-7.9.z]
  - Resolves: rhbz#1922244 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0. [rhel-7.9.z]
  - Resolves: rhbz#1935685 - SSSD not detecting subdomain from AD forest (7.9z)
  - Resolves: rhbz#1945552 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-7.9.z]
  - Resolves: rhbz#1839972 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR [rhel-7.9.z]


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.9
changelog:
  - Resolves: rhbz#1988463 - Missing search index for `originalADgidNumber` [rhel-7.9.z]
  - Resolves: rhbz#1968330 - id lookup is failing intermittently
  - Resolves: rhbz#1964415 - Memory leak in the simple access provider
  - Resolves: rhbz#1985457 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-7.9.z]


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.11
changelog:
  - Resolves: rhbz#1968316 - SSSD: User authentication failing after server reboot.
  - Resolves: rhbz#2000238 - disabled root ad domain causes subdomains to be marked offline
  - Resolves: rhbz#1984591 - After sssd update to 1.16.5-10.el7_9.8.x86_64 the customer is facing slow connection/authentication (due to discovery of unexpected AD domains)


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.12
changelog:
  - Resolves: rhbz#2006382 - IPA Intermittence fetching groups
  - Resolves: rhbz#2006866 - sssd_be segfault due to empty forest root name
  - Resolves: rhbz#2031729 - IPA clients fail to resolve override group names.
  - Resolves: rhbz#2032867 - AD Domain in the AD Forest Missing after sssd latest update


author: Alexey Tikhonov <Alexey Tikhonov> 1.16.5-10.1
changelog:
  - Resolves: rhbz#1854317 - sssd crashes after last update to sssd-common-1.16.4-37.el7_8.1 with servers configured with multiple domains [rhel-7.9.z]
  - Resolves: rhbz#1859554 - Secondary LDAP group go missing from 'id' command on RHEL 7.8 with sssd-1.16.2-37.el7_8.1 [rhel-7.9.z]


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.13
changelog:
  - Resolves: rhbz#2079441 - SSSD update prompts for smartcard pin twice - After update to 7.9 [rhel-7.9.z]
  - Resolves: rhbz#2073352 - Use right sdap_domain in ad_domain_info_send [rhel-7.9.z]


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.14
changelog:
  - Resolves: rhbz#2097014 - SSSD -> sssd_be and sssd_ifp coredump [rhel-7.9.z]
  - Resolves: rhbz#2107380 - sssd timezone issues sudonotafter [rhel-7.9.z]
  - Resolves: rhbz#2116207 - SSSD starting offline after reboot [rhel-7.9.z]


author: Alexey Tikhonov <atikhono@redhat.com> 1.16.5-10.15
changelog:
  - Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z]
  - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z]


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> 1.16.5-10.16
changelog:
  - Resolves: RHEL-16003 - sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy [rhel-7.9.z]


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.0-3
changelog:
  - Fixed issues reported by coverity (bz #1026820)
  - Do not mark /etc/ld.so.conf.d/ as config (bz #1011126)
  - Resolves: #1026820 
  - Resolves: #1011126


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.9.0-7.el7
changelog:
  - libiscsi-Discovery-return-multiple-portals-for-the-same-disco.patch [bz#1266523]
  - libiscsi-iscsi-ls-skip-link-local-IPv6-addresses.patch [bz#1266523]
  - Resolves: bz#1266523
    (iscsi-ls doesn't work if target has more than one portal)


author: Honza Horak <hhorak@redhat.com> 1.2.4-2
changelog:
  - Changed license from GPLv2 to GPLv2+ to correspond with source
  - Added license LGPLv2+ due to make_isohybrid_mbr.c


author: Matthias Clasen <mclasen@redhat.com> - 1.2.8-2
changelog:
  - Don't ship api docs twice (they were included in both
    the main and the devel package, by accident (need to save
    space on the f19 live images)


author: Nikola Forró <nforro@redhat.com> - 1.2.90-7
changelog:
  - Fix CVE-2018-11212 (#1586062)
  - Fix CVE-2016-3616 (#1318509), CVE-2018-11213 (#1589091)
    and CVE-2018-11214 (#1589110)
  - Fix CVE-2018-11813 (#1591203)


author: Matthias Runge <mrunge@matthias-runge.de> 1.08-8
changelog:
  - rename to liblockfile
  - sorting file to main and -devel package
  - explicitly list files in files-section


author: Matthias Runge <mrunge@matthias-runge.de> 1.08-9
changelog:
  - change description and summary of -devel-subpackage
  - make wildcard for man-pages even match against uncompressed files


author: Mahaveer Darade <mah.darade@gmail.com> - 0.3.5-1
changelog:
  - upgrade to upstream version 0.3.5
  - drop patch0, merged upstream
    liblognorm-0.3.4-rename-to-lognormalizer.patch
  - remove trailing whitespace


author: Jiri Vymazal <jvymazal@redhat.com> 2.0.2-2
changelog:
  RHEL 7.6 erratum
  - added patch with skipempty support
    resolves: rhbz#1565219
  - removed no longer used patch file


author: Rui Matos <rmatos@redhat.com> - 2.5.2-11
changelog:
  - Resolves: CVE-2017-13738, CVE-2017-13740, CVE-2017-13741,
    CVE-2017-13742, CVE-2017-13743, CVE-2017-13744, CVE-2014-8184


author: Ville-Pekka Vainio <vpivaini AT cs.helsinki.fi> - 7.12-7
changelog:
  - Add patch to link malshow with -lm, hopefully fixes FTBFS caused by
    https://fedoraproject.org/wiki/Features/ChangeInImplicitDSOLinking


author: Michal Ruprich <mruprich@redhat.com> - 1.2.0-5
changelog:
  - Resolves: #1643464 - Add libmaxminddb package as a successor of deprecated GeoIP package
  - Lowering the release to 1.2.0-5 due to current version in el8 - having larger version would break the migration from el7 to el8


author: Remi Collet <remi@fedoraproject.org> - 1.0.14-1
changelog:
  - update to 1.0.14
  - libmemcachedprotocol removed
  - sasl support is back
  - run test during build
  - report various issues to upstream
    https://bugs.launchpad.net/libmemcached/+bug/1079994 (bigendian)
    https://bugs.launchpad.net/libmemcached/+bug/1079995 (config.h)
    https://bugs.launchpad.net/libmemcached/+bug/1079996 (dtrace)
    https://bugs.launchpad.net/libmemcached/+bug/1079997 (-ldl)
    https://bugs.launchpad.net/libmemcached/+bug/1080000 (touch)


author: Remi Collet <remi@fedoraproject.org> - 1.0.15-1
changelog:
  - update to 1.0.15
  - libmemcachedprotocol is back
  - add memaslap command line tool
  - report various issues to upstream
    https://bugs.launchpad.net/libmemcached/+bug/1094413 (libevent)
    https://bugs.launchpad.net/libmemcached/+bug/1094414 (c99 MODE)


author: Remi Collet <remi@fedoraproject.org> - 1.0.16-1
changelog:
  - update to 1.0.16
  - ignore test result for memaslap (XFAIL but PASS)
    https://bugs.launchpad.net/libmemcached/+bug/1115357


author: Václav Pavlín <vpavlin@redhat.com> - 0.9.33
changelog:
  - Update to latest uptsream release 0.9.33 due to
    security issues.
    Resolves: rhbz#1039393, rhbz#1039387


author: Nathaniel McCallum <nathaniel@natemccallum.com> - 1.0.1-5
changelog:
  - Remove conflict with libproxy, its not really necessary since
    we already have the latest libproxy in rawhide.


author: Karel Zak <kzak@redhat.com> 2.23.2-36
changelog:
  - fix #1344102 - fdisk does not handle 4kN devices correctly in 'Blocks' calculation
  - fix #1344720 - when fdisk detects gpt table, expected menu items seem to be missing in the 'm' output
  - fix #1323916 - logger unnecessarily splits messages sent via stdin into 1024 byte chunks
  - fix #1344726 - [RFE] fdisk: output UID from gpt in fdisk when detecting that a gpt partition table is present
  - fix #1362662 - fdisk -l fails/stops on first passive/not ready device, works on RHEL6
  - fix #1369436 - losetup man page incorrect syntax for Setup loop device
  - fix #1392656 - [LLNL 7.4 Bug] fix buffer overflows in util-linux with upstream patch
  - fix #1370959 - [FJ7.3 Bug]: man 8 umount is wrong.
  - fix #1357746 - mount -av" report NFS "successfully mounted" but it is not.
  - fix #1417722 - umount -a results in selinux being reported as Disabled
  - fix #1402825 - RHEL7: "sfdisk -s" can't list the disk size
  - fix #1403973 - /usr/bin/more crash on repeat search on failed regex match
  - fix #1403971 - /usr/bin/more crash in end_it due to double free
  - fix #1358095 - ipcs shows wrong gid information
  - fix #1358097 - ipcs shows strange status message in ja locale
  - fix #1378100 - fix swapon discard option parsing
  - fix #1416467 - [RFE] Add support for posix_fallocate(3) call in fallocate(1) utility
  - fix #1358755 - Backport request for zramctl on util-linux v2.23.2
  - fix #1392661 - [LLNL 7.4 Bug] add zfs patches to util-linux
  - fix #1360764 - SMT: "Threads Per Core" will automatically change when odd or even number of vcpu are enabled online.
  - fix #1397709 - [7.4 FEAT] Refresh code for lscpu to support s390x cpu topology
  - fix #1402183 - [HPE 7.3 Bug] fdisk -l does not list non-BTT NVDIMM devices


author: Karel Zak <kzak@redhat.com> 2.23.2-41
changelog:
  - fix #1451704 - IMSM RAID on 4k disks not assembled on boot
  - force gettext messages refresh (for #1358097 bugfix)


author: Karel Zak <kzak@redhat.com> 2.23.2-43.el7_4.1
changelog:
  - fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages


author: Karel Zak <kzak@redhat.com> 2.23.2-44
changelog:
  - fix #1478002 - systemd read-only container produces errors
  - fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages
  - fix #1498462 - agetty not parsing /etc/os-release correctly when processing /etc/issue
  - fix #1490984 - Please update fdisk's manual page
  - fix #1487031 - [GSS][RFE]The Ceph disk type is unknown then we run the command "fdisk -l"
  - fix #1468646 - lscpu output missing Hypervisor
  - fix #1455398 - flock --timeout=0 doesn't work on RHEL7
  - fix #1336432 - journald: SYSLOG_IDENTIFIER is invalid when running logger
  - fix #1427500 - util-linux: script does not retry on EINTR when logging command output
  - fix #1336432 - journald: SYSLOG_IDENTIFIER is invalid when running logger
  - fix #1296233 - login(1) writes 0.0.0.0 IP address to wtmp when executed with "-h <ipv4-mapping-to-ipv6>" hostname


author: Karel Zak <kzak@redhat.com> 2.23.2-45
changelog:
  - fix #1501953 - blkid shows wrong return code on failure with ambivalent results
  - fix #1486777 - wipefs printing duplicate gpt clear messages
  - fix #1454652 - fix test suite


author: Karel Zak <kzak@redhat.com> 2.23.2-49
changelog:
  - fix #1520906 - make hostname in login(1) prompt optional
  - fix #1521163 - [RFE] blkid can identify magic number and UUID of VDO volume


author: Karel Zak <kzak@redhat.com> 2.23.2-54
changelog:
  - fix #1581611 - lslogins never shows lock passwords as PWD-LOCK
  - fix #1579439 - RHEL 7.5 - lscpu shows wrong sockets, threads on max config (32TB) POWER8 machine (util-linux)
  - fix #1566674 - [RFE] Add warnings that have to be acknowledged to the -l flag in umount or remove the option
  - fix #1566390 - [RHEL-7.5] losetup can not detach all loop devices
  - fix #1562125 - "setarch ppc<*>" fails with "Unrecognized architecture"
  - fix #1528567 - [RFE] Provide 'dig-holes' functionality for fallocate
  - fix #1528959 - rbind creates duplicate entries in /proc/mounts
  - fix #1538721 - mount man page says sync option has no effect for ext4
  - fix #1252764 - icrnl is not set when autologin is used
  - fix #1561200 - [RFE] - sulogin: improve support for locked root account
  - fix #1566432 - [RHEL-7.5] losetup: /dev/loop1: failed to set up loop device


author: Karel Zak <kzak@redhat.com> 2.23.2-59
changelog:
  - fix #1618711 - exec option in mount unable to override the implicit noexec in user option
  - fix #1616264 - Login to emergency shell failed


author: Karel Zak <kzak@redhat.com> 2.23.2-59.el7_6.1
changelog:
  - fix #1664752 - Bull (Atos) server lands up in invalid stty settings on the serial console after boot preventing login


author: Karel Zak <kzak@redhat.com> 2.23.2-61
changelog:
  - #1203378 - Cannot use swapon with fallocated XFS swapfile
  - #1632944 - blkid/lsblk does not recognize exfat filesystem without a label
  - #1633657 - mount -a always tries to mount CIFS share subdir despite being already mounted
  - #1639465 - Bad formatting in agetty.8 man page
  - #1667942 - libsmartcols: scols_print_table_to_string() doesn't work
  - #1678451 - Unable to mount to a directory that matches a dm device under /dev


author: Karel Zak <kzak@redhat.com> 2.23.2-62
changelog:
  - fix #1734545 - blkid_get_dev() leak file descriptor to underlying block device
  - fix #1712768 - lsmem segfaults on ppc64 wih -o
  - fix #1690102 - setarch(8) does not check error return values properly.
  - fix #1734261 - lscpu not showing Physical socket, chips information


author: Karel Zak <kzak@redhat.com> 2.23.2-64
changelog:
  - fix #1788896 - Internal testsuite: libmount tests failed
  - fix #1802240 - systemd-udev segmentation fault in crc32() at lib/crc32.c (libblkid)
  - fix #1816183 - "mount -a" should ignore already mounted bind mounts.
  - fix #1747710 - please backport the "uid=forget" and "gid=forget" UDF mount options to libmount
  - fix #1784579 - RHEL-7: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit


author: Karel Zak <kzak@redhat.com> 2.23.2-65
changelog:
  - fix #1826719 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir
  - fix #1745657 - mismatch between spec file and uuidd runtime directory


author: Karel Zak <kzak@redhat.com> 2.23.2-65.el7_9.1
changelog:
  - fix #1905956 - RHEL-7: chrt regression: unwanted 'nice' value reset on sched_setattr() [rhel-7.9.z]
  - fix #1905954 - RHEL-7: chrt regression: unexpected default scheduler [rhel-7.9.z]
  - fix #1883013 - RHEL-7: chrt command does not support the -R option [rhel-7.9.z]


author: John5342 <john5342 at, fedoraproject.org> 4.2-1
changelog:
  - Rebase to new upstream version
  - Drop patches (they were already both upstream waiting for this new release)
  - No real changes in this version since we already carried all patches except the version change


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-0.4.alpha
changelog:
  - Avoid 'test/md5.c:126:3: warning: dereferencing type-punned pointer
    will break strict-aliasing rules' by adding -fno-strict-aliasing flag.


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-0.6.alpha
changelog:
  - Fixes for CVE-2018-14679 CVE-2018-14680 CVE-2018-14681 CVE-2018-14682
  - resolves: rhbz#1611550 rhbz#1611551 rhbz#1611552 rhbz#1611553


author: Christophe Fergeau <cfergeau@redhat.com> - 4.0.3-1
changelog:
  - New upstream 4.0.3 release, should fix a bug breaking metadata fetching
    from musicbrainz servers


author: Christophe Fergeau <cfergeau@redhat.com> - 5.0.1-1
changelog:
  - Package libmusicbrainz5, apart from the name/version it's identical to
    libmusicbrainz4 so this .spec is based on it.


author: Christophe Fergeau <cfergeau@redhat.com> - 5.0.1-2
changelog:
  - Address review comments (rhbz#832670)
      fix licence (LGPLv2+ -> LGPLv2)
      fix tarball URL
      remove obsolete use of RPM_BUILD_ROOT
      remove BuildRequires on pkg-config
      remove use of %defattr


author: Jiri Pirko <jpirko@redhat.com> - 1.2-1
changelog:
  - Update to 1.2
  - libndp: silently ignore packets with optlen 0 [1016064]
  - libndp: fix processing for larger options [1016064]
  - libndp: do not fail on receiving non-ndp packets [1016078]


author: Jiri Pirko <jpirko@redhat.com> - 1.2-3
changelog:
  - libndp: fix [cppcheck] Undefined behavior: Variable 'buf' is used as parameter and destination in s[n]printf() [1044084]


author: Lubomir Rintel <lrintel@redhat.com> - 1.2-5
changelog:
  - libndp: validate the IPv6 hop limit [CVE-2016-3698]
  - libndb: reject redirect and router advertisements from non-link-local [CVE-2016-3698]


author: Eric Garver <egarver@redhat.com> - 1.2-7
changelog:
  - libndp: add option flags to send messages
  - ndptool: add option to send messages types
  - libndp: fix type of field "na" in "struct ndp_msgna"
  - libndp: revert API change for ndp_msg_send() and add


author: Steve Dickson <steved@redhat.com> 0.25-13
changelog:
  - Strip newlines out of IDMAP_LOG messages (bz 1261124)
  - Fixed some NEGATIVE_RETURNS that a Covscan scan found (bz 1271449)


author: Steve Dickson <steved@redhat.com> 0.25-15
changelog:
  - nss_getpwnam: correctly check for negative values (bz 1271449)
  - Fixed a memory leak in nss_name_to_gid() (bz 1271449)


author: Steve Dickson <steved@redhat.com> 0.25-16
changelog:
  - Add options to aid id mapping in multi domain environments (bz 1378557)
  - Query DNS for the the NFSv4 domain (bz 980925)


author: Steve Dickson <steved@redhat.com> 0.25-18
changelog:
  - Enlarge the TXT record to lager than 127 characters (bz 1498210)
  - Allow white spaces in static IP mapping (bz 1455923)


author: Phil Sutter <psutter@redhat.com> [1.0.6-5.el7]
changelog:
  - expr: lookup: give support for inverted matching (Phil Sutter) [1441084]
  - tests: stricter string attribute validation (Phil Sutter) [1441084]


author: Phil Sutter <psutter@redhat.com> [1.0.6-6.el7]
changelog:
  - chain: dynamically allocate name (Phil Sutter) [1353320]
  - src: Avoid returning uninitialized data (Phil Sutter) [1353319]
  - expr/limit: Drop unreachable code in limit_to_type() (Phil Sutter) [1353312]
  - ruleset: Initialize ctx.flags before calling nftnl_ruleset_ctx_set() (Phil Sutter) [1353322]
  - src: Fix nftnl_*_get_data() to return the real attribute length (Phil Sutter) [1353322]
  - expr/ct: prevent array index overrun in ctkey2str() (Phil Sutter) [1353309]
  - utils: Don't return directly from SNPRINTF_BUFFER_SIZE (Phil Sutter) [1353311]
  - set: prevent memleak in nftnl_jansson_parse_set_info() (Phil Sutter) [1353311]


author: Phil Sutter <psutter@redhat.com> [1.0.8-2.el7]
changelog:
  - trace: Check return value of mnl_attr_parse_nested() (Phil Sutter) [1510538]
  - set_elem: Don't return garbage in nftnl_set_elems_parse() (Phil Sutter) [1510538]
  - ruleset: Avoid reading garbage in nftnl_ruleset_cb() (Phil Sutter) [1510538]
  - object: Avoid returning garbage in nftnl_obj_do_parse() (Phil Sutter) [1510538]
  - gen: Remove a pointless call to mnl_nlmsg_get_payload() (Phil Sutter) [1510538]
  - data_reg: Add a missing break in nftnl_data_reg_snprintf (Phil Sutter) [1510538]


author: Thomas Haller <thaller@redhat.com> - 3.2.21-9
changelog:
  - improve local port handling for netlink socket with EADDRINUSE (rh #1249158)
  - rtnl: backport support for link-netnsid attribute (rh #1255050)


author: Lubomir Rintel <lrintel@redhat.com> - 1.4.0-1
changelog:
  - Update to network-manager-applet 1.4.0 release
  - c-e: add editor for teaming devices (rh #1079465)


author: Lubomir Rintel <lrintel@redhat.com> - 1.8.0-0.1.git20170326.f260f8a
changelog:
  - Update to network-manager-applet 1.8 snapshot
  - c-e: add missing mnemonic characters to buttons (rh #1434317)
  - c-e: fix handling of devices without permanent MAC address in devices combo box (rh #1380424)


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.0.9-1
changelog:
  - Updated to 0.0.9
  - Dropped obsolete Group, Buildroot, %clean and %defattr
  - Switched to .bz2 sources
  - Dropped included patches


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.1.0-3
changelog:
  - Resolves: rhbz#1712458 - [machines] The function of 'Auto-detect guest
                             operating system' is not available on rhel 7.7


author: Fabiano Fidêncio <fidencio@redhat.com> - 1.1.0-4
changelog:
  - Resolves: rhbz#1727842 - CVE-2019-13313 libosinfo: osinfo-install-script
                             option leaks password via command line argument


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-4
changelog:
  - disable TPACKET_V3 memory mapped packet capture on AF_PACKET socket, use TPACKET_V2 instead (#1085096)


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-5
changelog:
  - display also first packet when capturing in cooked mode (#1176612)
  - make sure that userland bpf filter interpreter is given snaplen such that size of
    cooked header is account for


author: Michal Sekletar <msekleta@redhat.com> - 14:1.5.3-6
changelog:
  - libpcap now correctly recognizes Netlink datalink type (#1031974)
  - fix vlan tagged packet filtering (#1079525)


author: Tom Lane <tgl@redhat.com> 2:1.5.10-3
changelog:
  - Remove compat subpackage (it's now a separate package "libpng12")
  - Minor specfile cleanup per suggestions from Tom Callaway
  Related: #845110


author: Tom Lane <tgl@redhat.com> 2:1.5.12-1
changelog:
  - Update to libpng 1.5.12 for minor bug fixes
  - Activate chunk size limits by default, with a very generous default limit


author: Petr Hracek <phracek@redhat.com> - 2:1.5.13-7
changelog:
  - Security fix for CVE-2015-8126
  - Changing png_ptr to info_ptf based on upstream
  - Related: #1283576


author: Petr Hracek <phracek@redhat.com> - 2:1.5.13-7
changelog:
  - Security fix for CVE-2015-8126
  - Changing png_ptr to info_ptr base on upstream
  - Related: #1283575


author: Tomas Mraz <tmraz@redhat.com> 1.1.0-1
changelog:
  - fix leak when throwing PWQError exception
  - added pkgconfig file
  - call the simplicity checks before the cracklib check
  - add enforce_for_root option to the PAM module
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.1.1-1
changelog:
  - use rpm built-in filtering of provides (rhbz#830153)
  - remove strain debug fprintf() (rhbz#831567)


author: Tomas Mraz <tmraz@redhat.com> 1.2.0-1
changelog:
  - add maxsequence check for too long monotonic character sequence.
  - clarified alternative licensing to GPLv2+.
  - add local_users_only option to skip the pwquality checks for
    non-locals. (thanks to Stef Walter)


author: Tomas Mraz <tmraz@redhat.com> 1.2.1-1
changelog:
  - properly free pwquality settings
  - add extern "C" to public header
  - updated translations from Transifex


author: Tomas Mraz <tmraz@redhat.com> 1.2.2-1
changelog:
  - manual page fixes
  - make it possible to set the maxsequence configuration value
  - updated translations from Transifex


author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-1
changelog:
  - fix problem with parsing the pam_pwquality options
    patch by Vladimir Sorokin.
  - updated translations from Transifex
  - treat empty user or password as NULL
  - move the library to /usr


author: Tomáš Mráz <tmraz@redhat.com> 1.2.3-5
changelog:
  - fix brittle configuration settings (#1259633)
  - fix abort when generating large passwords on some architectures


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 3.2-4
changelog:
  - Specify CC_FLAGS and COMP_LINK_FLAGS so that an extra -O switch and setting an
    rpath are avoided.


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.11-1
changelog:
  - Substitute vars in URL in the lr_downloadtarget_new()
  - New module repoconf for reading of *.repo files
  - Add LRE_VALUE code + LR_REPOCONF_ERROR error domain
  - Fail if gpgcheck enabled but repomd.xml signature is not available
  - Support for RHEL6
  - Add LRO_GNUPGHOMEDIR option
  - Refactoring to prevent RhBug: 1144741
  - fastest_mirror: Use <0.0 (-1.0) instead of DBL_MAX when a connection time wasn't measured
  - Add sanity checks in order to avoid bugs like: 1166533, 1160087
  - Refactoring


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.12-1
changelog:
  - downloader: Allow max one resume + nicer message if xattr cannot be set (RhBug: 1130685)
  - downloader: Resume only files that were originaly downloaded by Librepo (RhBug: 1130685)
  - downloader: Show also calculated checksums in error message about bad checksum
  - Python: Return all strings in unicode


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.13-1
changelog:
  - Fix ABI compatibility (RhBug: 1185180)
  - fastestmirror: Add LRO_FASTESTMIRRORTIMEOUT option
  - downloader: Move broken mirror at the end of the list of mirrors (RhBug: 1183998)
  - Make building tests and docs optional
  - librepo: Don't download remote mirrorlist/metalink when LRO_LOCAL is specified (Resolves #41)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.14-1
changelog:
  - tests: Use g_assert_cmpuint instead of ck_assert_uint_eq (Pullrequest #43)
  - Add LRO_OFFLINE
  - Python: Handle: Raise ValueError instead of TypeError when an unknown option is specified
  - Python: Result: Use ValueError instead of TypeError when an unknown option value is specified
  - Add LR_VERSION constant with version string
  - python: Import contants from C librepo module in a loop
  - repoconf: Add support for failover and skip_if_unavailable options
  - handle: Change of LRO_LOCAL causes invalidation of internal mirrorlist (related to RhBug: 1188600)
  - Load local mirrorlists when LRO_LOCAL is on (related to RhBug: 1188600)
  - util: Add lr_is_local_path()
  - New module repoconf for reading *.repo files
  - Add LRO_HTTPHEADER option (RhBug: 1181123)


author: Tomas Mlcoch <tmlcoch at redhat.com> - 1.7.15-1
changelog:
  - Do not inlude header in the body output (RhBug: 1207685)
  - metalink: Proper error handling
  - New LRR_RPMMD_* contants
  - Support for client certificates
  - Use 'metadata in the rpm-md format' instead of 'yum metadata' (Issue #51)
  - CMakeLists.txt: do not check for CXX
  - build: Use solely pkg-config to find glib


author: Colin Walters <tmlcoch@redhat.com> - 1.7.16-1
changelog:
  - Add LRI_LOWSPEEDTIME and LRI_LOWSPEEDLIMIT
  - downloader: Don't consider CURLE_RECV_ERROR and CURLE_SEND_ERROR as fatal errors (RhBug: 1219817)
  - test_repoconf: Fix SIGSEGV in repoconf_assert_na (RhBug: 1222471)
  - repoconf: Proper handling of gint64 and guint64 types
  - build: Be compatible with cmake 2.8
  - handle: Do not free temporary error msg if there is no one (RhBug: 1219822)
  - utils/make_rpm.sh: Accept rpmbuild options as second argument (Issue #49)
  - Python: call lr_global_init() during module initialization
  - Add global function log_set_file that allow user to set a file where logs will be written (Issue #53)
  - util: Honor RFC 3986 (Issue #55)


author: Marek Blaha <mblaha@redhat.com> - 1.8.1-1
changelog:
  - Add yumrecord substitution mechanism (mluscon)
  - Fix a memory leak in signature verification (cwalters)
  - Add new option LRO_FTPUSEEPSV
  - downloader prepare_next_transfer(): simplify long line
  - downloader prepare_next_transfer(): add missing error check
  - downloader prepare_next_transfer(): cleanup error path
  - downloader prepare_next_transfer() - fix memory leak on error path (Alan Jenkins)
  - handle: Don't use proxy cache for downloads of metalink/mirrorlist
  - handle: Don't set CURLOPT_HTTPHEADER into curl handle immediately when specified
  - downloader: Implement logic for no_cache param in LrDownloadTarget (RhBug: 1297762)
  - Add no_cache param to LrDownloadTarget and lr_downloadtarget_new()
  - New test: always try to download from the fastest mirror (Alexander Todorov)


author: Jakub Filak <jfilak@redhat.com> - 2.1.11-31
changelog:
  - save all files changed by the reporter in the reporting GUI
  - Fixes CVE-2015-5302
  - Related: #1266853


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-32
changelog:
  - Save remote name in reported_to
  - Add a function for compressing dumpdirs
  - Introduce global configuration + option for excluded elements
  - attach the URL of the uploaded problem to the relevant report
  - Resolves: #1300780


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-33
changelog:
  - lib: allow report SELinux denial from sealert under common user
  - mailx: stop creating dead.letter on mailx failures
  - mailx: introduce debug parameter -D
  - mailx: mail formatting: add comment right after %oneline
  - mailx: use problem report api to define an emais' content
  - lib: remove unused function make_description_bz
  - rhtsupport: attach all dump dir's element to a new case
  - rhtsupport: add pkg_vendor, reproducer and reproducible to description
  - rhtsupport: use problem report API to create description
  - lib: add Problem Format API
  - augeas: trim spaces before key value
  - rhtsupport: Discourage users from reporting in non Red Hat stuff
  - rhtsupport: Discourage users from opening one-shot crashes
  - report-gtk: Require Reproducer for RHTSupport
  - Add workflow for RHEL anonymous report
  - bugzilla: don't report private problem as comment
  - lib: move CREATE_PRIVATE_TICKET to the global configuration
  - event config: add support for 'restricted access'
  - report-gtk: offer users to create private ticket
  - bugzilla: make the event configurable
  - uploader: /etc/libreport/plugins/upload.conf as default conf file
  - dd: make function uid_in_group() public
  - uploader: add possibility to set SSH keyfiles
  - uploader: move username and password to the advanced options
  - uploader: allow empty username and password
  - curl: add possibility to configure SSH keys
  - Resolves #1289513, #1277849, #1289513, #1279453, #1258482, #1236613, #1261358, #1281312, #1309317, #1264921


author: Matej Habrnal <mhabrnal@redhat.com> - 2.1.11-36
changelog:
  - introduce 'stop_on_not_reportable' option
  - fix a double free of config at exit in reporter-rhtsupport
  - Related: #1373094, #1257159


author: EL Errata <el-errata_ww@oracle.com> - 2.1.11-38.0.1
changelog:
  - Update workflow xml for Oracle [18945470]
  - Add oracle-enterprise.patch and oracle-enterprise-po.patch
  - Remove libreport-plugin-rhtsupport and libreport-rhel
  - Added orabug20390725.patch to remove redhat reference [bug 20390725]
  - Added Bug20357383.patch to remove redhat reference [bug 20357383]


author: Martin Kutlak <mkutlak@redhat.com> - 2.1.11-39
changelog:
  - Introduce workflow for adding data to existing case
  - Change default URL to the FAF server
  - wizard: fix 'Show log' window not displaying correctly
  - augeas: fix parsing spaces in configuration files
  - Related: #1303326, #1435256, #1463313


author: Lukas Lemes <lukas.lemes@oracle.com> - 2.1.11-53.0.1
changelog:
  - Update workflow xml for Oracle [Orabug: 18945470]
  - Add oracle-enterprise.patch and oracle-enterprise-po.patch
  - Remove libreport-plugin-rhtsupport and libreport-rhel
  - Added orabug20390725.patch to remove redhat reference [Orabug: 20390725]
  - Added Bug20357383.patch to remove redhat reference [Orabug: 20357383]


author: EL Errata <el-errata_ww@oracle.com> - 2.1.11-38.0.1
changelog:
  - Remove -Werror to fix build issue
  - Update workflow xml for Oracle [18945470]
  - Add oracle-enterprise.patch and oracle-enterprise-po.patch
  - Remove libreport-plugin-rhtsupport and libreport-rhel
  - Added orabug20390725.patch to remove redhat reference [bug 20390725]
  - Added Bug20357383.patch to remove redhat reference [bug 20357383]


author: Martin Kutlak <mkutlak@redhat.com> - 2.1.11-43
changelog:
  - dd: extend the scope of DD_DONT_WAIT_FOR_LOCK
  - dd: log lock warning only once not x times per sec
  - dd: add functions for opening dd item
  - testsuite: Add macros for value comparison
  - testsuite: assert for common function results
  - testsuite: expose the last check result
  - testsuite: fix dd_open_item_file test
  - tests: include testsuite.h in the dist archive
  - spec: include testsuite headers in the devel package
  - Related: #1588272, #1613236


author: Paul Moore <pmoore@redhat.com> - 2.2.1-1
changelog:
  - Removed '--disable-static' from the build to ensure that scmp_sys_resolver
    is self contained and resolve RPATH issues


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-2
changelog:
  - Fix location of selinuxfs mount point (#1321086)
  - Only mount /proc if necessary
  - procattr: return einval for <= 0 pid args
  - procattr: return error on invalid pid_t inpu


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Fix setexecfilecon() to work better in a chroot (#1329931)
  - Fix typo in sefcontext_compile.8 (#1320062)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-4
changelog:
  - Clarify is_selinux_mls_enabled() description
  - Explain how to free policy type from selinux_getpolicytype()
  - Compare absolute pathname in matchpathcon -V
  - Add selinux_snapperd_contexts_path()
  - Modify audit2why analyze function to use loaded policy
  - Sort object files for deterministic linking order
  - Respect CC and PKG_CONFIG environment variable
  - Avoid mounting /proc outside of selinux_init_load_policy()
  - Fix multiple spelling errors


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-10
changelog:
  - Add missing av_permission values (#1025931)
  - Set an appropriate errno in booleans.c (#1402140)
  - Change matchpathcon usage to match with matchpathcon manpage (#1412797)


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Sort object files for deterministic linking order
  - Support overriding Makefile RANLIB
  - Respect CC and PKG_CONFIG environment variable
  - Fix multiple spelling errors
  - genhomedircon: %{USERID} and %{USERNAME} support and code cleanups


author: Petr Lautrbach <plautrba@redhat.com> 2.5-4
changelog:
  - genhomedircon: add support for Development/Debug syntax
  - genhomedircon: generate contexts for logins mapped to the default user
  - Validate and compile file contexts before installing
  - Swap tcp and udp protocol numbers


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-8
changelog:
  - Save linked policy, skip re-link when possible
  - Replace access(,F_OK) checks to make setuid programs work (#1186431)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-9
changelog:
  - Update semanage to allow runtime labeling of Infiniband Pkeys (#1466274)
  - Update semanage to allow runtime labeling of ibendports (#1466274)
  - Keep copy of file_contexts.homedirs in policy store (#1409813)
  - Add support for listing fcontext.homedirs file (#1409813)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-12
changelog:
  - Do not change file mode of seusers and users_extra (#1512639)
  - Improve warning for installing disabled module (#1337199)


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-14
changelog:
  - Include user name in ROLE_REMOVE audit events (#1622045)
  - Improve "reset umask before creating directories"


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-3
changelog:
  - Correctly detect unknown classes in sepol_string_to_security_class
  - Sort object files for deterministic linking order
  - Fix neverallowxperm checking on attributes
  - Remove libsepol.map when cleaning
  - Add high-level language line marking support to CIL
  - Change logic of bounds checking to match change in kernel
  - Fix multiple spelling errors
  - Only apply bounds checking to source types in rules
  - Fix CIL and not add an attribute as a type in the attr_type_map
  - Build policy on systems not supporting DCCP protocol
  - Fix extended permissions neverallow checking
  - Fix CIL neverallow and bounds checking
  - Android.mk: Add -D_GNU_SOURCE to common_cflags


author: Petr Lautrbach <plautrba@redhat.com> 2.5-5
changelog:
  - Warn instead of fail if permission is not resolved
  - Ignore object_r when adding userrole mappings to policydb


author: Petr Lautrbach <plautrba@redhat.com> 2.5-6
changelog:
  - Fix memory leak in expand.c
  - Fix invalid read when policy file is corrupt
  - Fix possible use of uninitialized variables


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-7
changelog:
  - Define cgroup_seclabel policy capability (rhbz#1493517)
  - Fix unitialized jmp and invalid dereference


author: Vit Mojzis <vmojzis@redhat.com> - 2.5-8.1
changelog:
  - Define nnp_nosuid_transition policy capability (rhbz#1480519)
  - use IN6ADDR_ANY_INIT to initialize IPv6 addresses
  - Allow runtime labeling of ibendports (rhbz#1464489)
  - Allow runtime labeling of Infiniband Pkeys (rhbz#1464489)
  - Add IB end port handling to CIL (rhbz#1464489)
  - Add ibendport ocontext handling (rhbz#1464489)
  - Add support for ibendportcon labels (rhbz#1464489)
  - Add Infiniband Pkey handling to CIL (rhbz#1464489)
  - Add ibpkey ocontext handling (rhbz#1464489)
  - Add support for ibpkeycon labels (rhbz#1464489)
  - Remove unused attribute on a used argument from avrule_read() (rhbz#1464489)
  - Add binary module support for xperms
  - Add support for converting extended permissions to CIL


author: Dan Walsh <dwalsh@redhat.com> - 2.1.9-1
changelog:
  - Update to upstream 
  	* filename_trans: use some better sorting to compare and merge
  	* coverity fixes
  	* implement default type policy syntax
  	* Fix memory leak issues found by Klocwork
  - Add CONTRAINT_NAMES to the kernel


author: kwizart < kwizart at gmail.com > - 2.2.2-2
changelog:
  - Fix http://bugzilla.redhat.com/415121
  - Add disable-static
  - Don't use makeinstall macro
  - Update License field


author: Kalev Lember <kalev@smartlink.ee> - 2.2.8-4
changelog:
  - Spec cleanup
  - Use macro for automatically calculating ftp directory name with
    first two digits of tarball version.
  - Dropped R: pkgconfig from -devel as it's now automatically added by rpm
  - Own /usr/share/doc/libsigc++-2.0/ dir and mark /usr/share/devhelp/ as %doc
  - Require base package from -doc subpackage
  - Drop unneeded doxygen and graphviz BRs


author: Isaac Boukris <iboukris@redhat.com> - 4.10.16-2
changelog:
  - resolves: #1828354 - add additioanl hostnames to the keytab
  - resolves: #1836427 - add dnshostname option net-ads-join


author: Andreas Schneider <asn@redhat.com> - 4.10.16-8
changelog:
  - resolves: #1878205 - Fix restarting winbind on package upgrade
  - resolves: #1892632 - Fix CVE-2020-14318
  - resolves: #1891687 - Fix CVE-2020-14323
  - resolves: #1879834 - Fix CVE-2020-1472
  - resolves: #1892313 - Fix memory leak in winbindd (wbinfo -u)
  - resolves: #1868917 - Fix %U substitution for 'valid users' option
  - resolves: #1853272 - Fix 'require_membership_of' documentation in
                         pam_winbind{.conf} manpage


author: Andreas Schneider <asn@redhat.com> - 4.10.16-14
changelog:
  - resolves: #1937867 - Fix possible core dump with printing support
  - resolves: #1930747 - Ensure that libwbclient has been updated before
                         restarting services


author: Andreas Schneider <asn@redhat.com> - 4.10.16-16
changelog:
  - resolves: #2019661 - Fix CVE-2016-2124
  - resolves: #2019673 - Fix CVE-2020-25717
  - resolves: #2021428 - Add missing PAC buffer types to krb5pac.idl


author: Andreas Schneider <asn@redhat.com> - 4.10.16-18
changelog:
  - resolves: #2034800 - Fix usermap script regression caused by CVE-2020-25717
  - resolves: #2036595 - Fix MIT realm regression caused by CVE-2020-25717
  - resolves: #2046148 - Fix CVE-2021-44142


author: Andreas Schneider <asn@redhat.com> - 4.10.16-19
changelog:
  - resolves: #2081649 - Fix idmap_rfc2307 and idmap_nss returning wrong
                         mapping for uid/gid conflict


author: Shaleen Bathla <shaleen.bathla@oracle.com> - 4.10.16-25.0.3
changelog:
  - winbindd: Free is_parent before we terminate [Orabug: 36406548]
  - s3:passdb: Do not leak memory in pdb_tdb [Orabug: 36399464]


author: Andreas Schneider <asn@redhat.com> - 4.10.13-1
changelog:
  - resolves: #1785121 - Rebase to vesion 4.10.13
  - resolves: #1791208 - Fix CVE-2019-14907
  - resolves: #1737888 - Fix manual libwbclient alternative settings
  - resolves: #1634057 - Return correct stat for SMB1 with POSIX extensions


author: Andreas Schneider <asn@redhat.com> - 4.10.15-1
changelog:
  - related: #1785121 - Rebase to version 4.10.15
  - resolves: #1828924 - Fix typo in pam_winbind documentation about require_membership_of
  - resolves: #1801496 - Add missing ctdb directories


author: Andreas Schneider <asn@redhat.com> - 4.10.4-1
changelog:
  - resolves: #1497809 - Add --resolve-uids for 'smbstatus -L'
  - resolves: #1714947 - Fix idmap_tdb2 scripts


author: Andreas Schneider <asn@redhat.com> - 4.10.4-6
changelog:
  - resolves: #1753254 - Fix trusted domain enumeration in windind caused
                         a Active Directory update


author: Isaac Boukris <iboukris@redhat.com> - 4.10.4-7
changelog:
  - resolves: #1657428 - Fix spnego downgrade
  - resolves: #1663064 - Fix net ads join in hardened environments


author: Andreas Schneider <asn@redhat.com> - 4.10.4-11
changelog:
  - resolves: #1797560 - Fix Kerberos authentication with trusted domains
  - resolves: #1797561 - Fix smbclient mkdir log spam
  - resolves: #1797562 - Fix client tools log spam about messaging


author: Andreas Schneider <asn@redhat.com> - 4.6.2-7
changelog:
  - resolves: #1461336 - Fix smbclient username parsing
  - resolves: #1460937 - Fix username normalization with winbind


author: Andreas Schneider <asn@redhat.com> - 4.6.2-10
changelog:
  - resolves: #1484423 - Require at least krb5 version 1.15.1
  - resolves: #1484713 - Fix password changes for users via smbpasswd
  - resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
                         returned errors


author: Andreas Schneider <asn@redhat.com> - 4.7.0-1
changelog:
  - resolves: #1470048 - Rebase Samba to version 4.7.0
  - resolves: #1335710 - Improve performance of smbd for a lot
                         of new client connections


author: Andreas Schneider <asn@redhat.com> - 4.7.0-3
changelog:
  - related: #1470048 - Fix dependency issues
  - resolves: #1486318 - Move /var/lib/samba/lock to common package
  - resolves: #1497162 - Fix smbcacls command line password handling


author: Andreas Schneider <asn@redhat.com> - 4.7.1-3
changelog:
  - resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                         correctly
  - resolves: #1495490 - Fix client rename over SMB2
  - resolves: #1510598 - Fix client volume cmd over SMB2


author: Andreas Schneider <asn@redhat.com> - 4.7.1-5
changelog:
  - resolves: #1505940 - Fix 'net ads keytab list'
  - resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                         faster


author: Andreas Schneider <asn@redhat.com> - 4.7.1-6
changelog:
  - resolves: #1476153 - Handle SMB echo responses more gracefully
  - resolves: #1523212 - Fix SMB2 client read-after-free issue


author: Andreas Schneider <asn@redhat.com> - 4.7.1-7
changelog:
  - resolves: #1581369 - Fix segfault updating dns during 'net ads join'
  - resolves: #1581373 - Fix segfault during NT1 session setup
  - resolves: #1581376 - Fix segfault in keytab handling
  - resolves: #1581377 - Fix segfault in smbclient dfsgetinfo


author: Andreas Schneider <asn@redhat.com> - 4.8.1-1
changelog:
  - related: #1558560 - Rebase to newer Samba version
  - resolves: #1567896 - Fix possible crash if secrets db is emtpy
  - resolves: #1570020 - Fix a crash in smbd when dfsgetinfo is called


author: Andreas Schneider <asn@redhat.com> - 4.8.1-3
changelog:
  - resolves: #1575205 - Fix segfault when updating DNS with 'net ads join'
  - resolves: #1525511 - Fix idmap_rid dependency on trusted domain list


author: Andreas Schneider <asn@redhat.com> - 4.8.3-1
changelog:
  - related: #1558560 - Rebase to Samba version 4.8.3
  - resolves: #1579398 - Add winbind localauth krb5 plugin


author: Andreas Schneider <asn@redhat.com> - 4.8.3-4
changelog:
  - resolves: #1614132 - Fix delete-on-close after smb2_find
  - resolves: #1614265 - Fix CVE-2018-1139
  - resolves: #1614269 - Fix CVE-2018-10858


author: Andreas Schneider <asn@redhat.com> - 4.9.1-1
changelog:
  - resolves: #1649434 - Update to version 4.9.1
  - resolves: #1648852 - Fix out of bound array access in ctdb
  - resolves: #1647960 - Fix segfault in the debug system with hardended build
  - resolves: #1644328 - Fix segfault if wrong 'passdb backend' is configured
  - resolves: #1650452 - Add smbc_setOptionProtocols()
  - resolves: #1659513 - Fix testparm/pdbedit crash
  - resolves: #1529301 - Added new 'net ads spn' command
  - resolves: #1595277 - Fix manpage for 'net ads lookup'
  - resolves: #1600274 - Fix vfs_audit log which does not show full path names
  - resolves: #1623140 - Fix handling the 'disable netbios' option
  - resolves: #1624227 - Connect to spoolss with the correct version information
  - resolves: #1659533 - Fix new file and folder creation with vfs_glusterfs
  - resolves: #1579401 - Implement 'net ads leave --keep-account'
  - resolves: #1624227 - Fix spoolss client operations against newer Windows
                         versions
  - resolves: #1656405 - Fix looking up local system accounts


author: Andreas Schneider <asn@redhat.com> - 4.9.1-2
changelog:
  - resolves: #1674403 - Fix panic when setting 'force group' on a share with
                         an active connections
  - resolves: #1670720 - Fix installation of samba-python
  - resolves: #1669476 - Fix user lookup via UPN


author: Andreas Schneider <asn@redhat.com> - 4.9.1-3
changelog:
  - resolves: #1479451 - Fix 'net' command auth with Kerberos
  - resolves: #1686158 - Fix printing with CUPS
  - resolves: #1662408 - Fix username/password printing with CUPS


author: Andreas Schneider <asn@redhat.com> - 4.9.1-4
changelog:
  - resolves: #1690222 - Fix --max-protocol documentation of smbclient
  - resolves: #1518353 - Fix 'net ads join -Uadmin@forestdomain'
  - resolves: #1696524 - Fix CVE-2019-3880


author: Andreas Schneider <asn@redhat.com> - 4.9.1-8
changelog:
  - resolves: #1754838 - Fix username/password auth with smbspool
  - resolves: #1754835 - Fix builtin groups creation.


author: Andreas Schneider <asn@redhat.com> - 4.9.1-9
changelog:
  - resolves: #1759445 - Fix trusted domain enumeration in windind caused
                         a Active Directory update


author: Tom Callaway <spot@fedoraproject.org> - 0.4.8-9
changelog:
  - mark symbols which conflict with RPM as "internal", resolves bz 864324
    Thanks to Michele Baldessari


author: Ville Skyttä <ville.skytta@iki.fi> - 1.0.25-2
changelog:
  - Patch to use system libgsm instead of a bundled copy.
  - Make main package dep in -devel ISA qualified.
  - Drop -octave Provides (not actually built with octave > 3.0).
  - Don't build throwaway static lib.
  - Run test suite during build.


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.25-12.1
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985024)


author: Jaroslav Mracek <jmracek@redhat.com> - 0.6.34-3
changelog:
  - Make sure that targeted updates don't do reinstalls
  - Resolves: bug#1668256
  - Fix NULL pointer dereference (CVE-2018-20532, CVE-2018-20533)
  - Resolves: bug#1669562
  - Resolves: bug#1669576
  - Fix illegal address access in pool_whatprovides (CVE-2018-20534)
  - Resolves: bug#1670453


author: Jan Grulich <jgrulich@redhat.com> - 1.4.4-11.20101004cvs
changelog:
  - Fix global buffer overflow
    Resolves: bz#1301202

  - Fix improper handling of CSRC count and extension header length in RTP header
    Resolves: bz#1323705

  - Fix buffer overflow in application of crypto profiles
    Resolves: bz#1141897


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-9
changelog:
  - curl consumes too much memory during scp download (#1080459)
  - prevent a not-connected agent from closing STDIN (#1147717)


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-12
changelog:
  - session: avoid printing misleading debug messages (#1503294)
  - scp: send valid commands for remote execution (#1489733)


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-12.el7_6.1
changelog:
  - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
  - fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
  - fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
  - fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)


author: Qing Lin <qing.lin@oracle.com> 1.4.3-12.0.1.el7_6.2
changelog:
  - [Orabug: 29909723] Added patch CVE-2019-3862
    added length checks to prevent out-of-bounds reads and writes in _libssh2_packet_add()(CVE-2019-3862)


author: Kamil Dudka <kdudka@redhat.com> 1.4.3-12.el7_6.3
changelog:
  - fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)


author: Kamil Dudka <kdudka@redhat.com> 1.8.0-2
changelog:
  - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
  - fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)
  - fix out-of-bounds reads with specially crafted SSH packets (CVE-2019-3861)
  - fix zero-byte allocation in SFTP packet processing resulting in out-of-bounds read (CVE-2019-3858)
  - fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
  - fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
  - fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)


author: Gris Ge <fge@redhat.com> 1.4.0-1
changelog:
  - Add Python3 support.
  - New sub rpm package python3-libstoragemgmt.
  - Add support of lmiwbem.
  - Allow plugin test to be run concurrently.
  - Bug fixes:
      * Fix megaraid plugin for dell PERC.
      * Fix local disk rotation speed query on NVMe disk.
      * Fix lsmcli incorrect try-expect on local disk query.
      * Fix all the gcc compile warnings.
      * Fix the obsolete usage of AC_OUTPUT in configure.ac.
  - Library adds:
      * Query serial of local disk:
          lsm_local_disk_serial_num_get()/lsm.LocalDisk.serial_num_get()
      * Query LED status of local disk:
          lsm_local_disk_led_status_get()/lsm.LocalDisk.led_status_get()
      * Query link speed of local disk:
          lsm_local_disk_link_speed_get()/lsm.LocalDisk.link_speed_get()


author: Gris Ge <fge@redhat.com> - 1.5.0-2
changelog:
  - Fix multilib confliction of nfs-plugin by move binrary file to
    another subpackage libstoragemgmt-nfs-plugin-clibs


author: Tony Asleson <tasleson@redhat.com> - 1.8.1-2
changelog:
  - https://bugzilla.redhat.com/show_bug.cgi?id=1872745
  - https://bugzilla.redhat.com/show_bug.cgi?id=1903665


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.8-1
changelog:
  - Rebase to libtalloc 2.1.8
  - Resolves: rhbz#1393811 - Rebase libtalloc to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.9-1
changelog:
  - Rebase to libtalloc 2.1.9
  - Resolves: rhbz#1393811 - Rebase libtalloc to enable samba rebase to
                             version 4.6.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.10-1
changelog:
  - Rebase to libtalloc 2.1.10
  - Resolves: rhbz#1470053 - Rebase libtalloc to enable samba rebase to
                             version 4.7.x


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.14-1
changelog:
  - Rebase to libtalloc 2.1.14
  - Resolves: rhbz#1658747 - Rebase libtalloc to version 2.1.14 for Samba


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.16-1
changelog:
  - Rebase to libtalloc 2.1.16
  - Resolves: rhbz#1736005 - Rebase libtalloc to version 2.1.16 for Samba


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.6-2
changelog:
  - Resolves: rhbz#1241015 - tdb deadlocks if you acquire allrecord_lock
                             and start two traverses


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.12-2
changelog:
  - Resolves: rhbz#1441231 - The tdb robust mutexes runtime check is not thread safe and ends in a deadlock


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.15-1
changelog:
  - Resolves: rhbz#1470049 - Rebase libtdb to enable samba rebase to
                             version 4.7.x


author: Marcelo Ricardo Leitner <mleitner@redhat.com> - 1.25-2
changelog:
  - Updated to 1.25 [1286840 1286063]
  - Added patch teamd-LACP-runner-does-not-set-Agg-bit-on-first-slav.patch [1347818]


author: Marcelo Ricardo Leitner <mleitner@redhat.com> - 1.25-4
changelog:
  - Added patches to avoid hung on shutdown [1330550]
  - Added patch to fix an out-of-bound write with zero-length hardware
    address [1286840]


author: Xin Long <lxin@redhat.com> - 1.25-5
changelog:
  - Added patch to escape some sensitive characters [1383997]
  - Added patch to check port link_up when a port is added for lb runner
    [1393430]


author: Xin Long <lxin@redhat.com> - 1.27-5
changelog:
  - Added patch to fix runner.sys_prio default in man docs [1533813]
  - Added patch to empty LDFLAGS before checking for libnl3 in configure.ac [1533847]
  - Added patch to not crash when trying to print unregistered device name [1563155]


author: Xin Long <lxin@redhat.com> - 1.27-7
changelog:
  - Added an option to force log output to stdout, stderr or syslog [1596917]
  - Fixed s32/u32 data storage on big endian [1545574]
  - Documented ARP Ping link_watch.vlanid option [1645169]
  - Sent LACPDU when port state transitions from DEFAULT to CURRENT [1645169]


author: Xin Long <lxin@redhat.com> - 1.29-1
changelog:
  - man teamd.conf: update some parameter default values [1732586]
  - 1.29 release
  - teamd: improve the error output for non-integer port prio
  - teamd: return 0 if tdport doesn't exist in teamd_config_port_set
  - teamd: add port_master_ifindex_changed for link_watch_port_watch_ops [1720137]
  - initscripts: fix if/fi align
  - teamd: fix a json object memleak in get_port_obj() [1704451]
  - libteam: set netlink event socket as non-blocking [1680655]
  - libteam: double NETLINK_RCVBUF to fix -ENOMEM error
  - teamd: add a default value 1000 for link_watch.interval
  - teamd: use enabled option_changed to sync enabled to link_up for lb runner [1629670]
  - teamd: tdport has to exist if item->per_port is set in __find_by_item_path
  - teamd: remove port if adding fails
  - teamd: lacp: update port state according to partner's sync bit
  - man: fix runner.min_ports default value
  - teamd: lw: nsna_ping: only send ns on enabled port [1730558]
  - teamd: lw: arp_ping: only check arp reply message
  - teamd: config: update local prio to kernel [1714440]
  - teamnl: update help message


author: Xin Long <lxin@redhat.com> - 1.29-2
changelog:
  - teamd/lacp: fix segfault due to NULL pointer dereference [1758072]
  - teamd: fix build error in expansion of macro teamd_log_dbgx [1758072]
  - teamd: update ctx->hwaddr after setting team dev to new hwaddr [1772799]
  - libteam: wapper teamd_log_dbg with teamd_log_dbgx [1758072]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.21-2
changelog:
  - Allow building with RHEL-7.0 libtalloc
  - Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.21-3
changelog:
  - BuildRequire the minimal applicable libtalloc version
  - Resolves: rhbz#1133919 - Rebase libtevent to version 0.9.21 or newer


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.33-1
changelog:
  - Resolves: #1470054 - Rebase libtevent to enable samba rebase to version
                         4.7.x


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.34-1
changelog:
  - Resolves: #1512414 - tevent can cause a Samba file corruption bug under
                         heavy threaded load


author: Hans de Goede <hdegoede@redhat.com> - 1:1.1.1-6
changelog:
  - run autoreconf for aarch64 support (#925898)
  - add a patch from upstream fixing a crash when compiled with gcc-4.8 (#959001)
  - cleanup spec-file


author: Nikola Forró <nforro@redhat.com> - 4.0.3-21
changelog:
  - Remove patches for CVEs:
    CVE-2014-8127, CVE-2014-8129, CVE-2014-8130,
    CVE-2014-9330, CVE-2015-7554, CVE-2015-8665,
    CVE-2015-8683, CVE-2015-8781, CVE-2015-8784
  - Add patches for CVEs:
    CVE-2016-3632, CVE-2016-3945, CVE-2016-3990,
    CVE-2016-3991, CVE-2016-5320
  - Update patches for CVEs:
    CVE-2014-9655, CVE-2015-1547, CVE-2015-8668
  - Related: #1299921


author: Nikola Forró <nforro@redhat.com> - 4.0.3-25
changelog:
  - Add patches for CVEs:
    CVE-2015-7554, CVE-2015-8683, CVE-2015-8665,
    CVE-2015-8781, CVE-2015-8782, CVE-2015-8783,
    CVE-2015-8784
  - Related: #1299921


author: Nikola Forró <nforro@redhat.com> - 4.0.3-26
changelog:
  - Add patches for CVEs:
    CVE-2016-9533, CVE-2016-9534, CVE-2016-9535,
    CVE-2016-9536, CVE-2016-9537, CVE-2016-9540,
    CVE-2016-5652, CVE-2015-8870
  - Resolves: #1412080


author: Nikola Forró <nforro@redhat.com> - 4.0.3-26
changelog:
  - Add patches for CVEs:
    CVE-2016-9533, CVE-2016-9534, CVE-2016-9535,
    CVE-2016-9536, CVE-2016-9537, CVE-2016-9540,
    CVE-2016-5652, CVE-2015-8870
  - Resolves: #1412081


author: Nikola Forró <nforro@redhat.com> - 4.0.3-28
changelog:
  - Fix CVE-2016-3186
  - Resolves: #1319503
  - Fix CVE-2018-7456
  - Resolves: #1561318
  - Fix CVE-2018-8905
  - Resolves: #1574548
  - Fix CVE-2018-10779
  - Resolves: #1598503
  - Fix CVE-2018-10963
  - Resolves: #1598726
  - Fix CVE-2018-12900
  - Resolves: #1600430
  - Fix CVE-2018-17100
  - Resolves: #1632578
  - Fix CVE-2018-17101
  - Resolves: #1632579
  - Fix CVE-2018-18557
  - Resolves: #1647737
  - Fix CVE-2018-18661
  - Resolves: #1647965


author: David Shea <dshea@redhat.com> - 0.4.1-2
changelog:
  - Make whitespace and indentation consistent (iain.lane@canonical.com)
  - Switched to a git-formatted patch for the FSF address to make things easier
    for me to track (dshea)
  - Create local copies of string properties. (dshea)
  - Moved CcTimezoneLocation into its own file. (dshea)
  - Don't close a NULL file pointer. (dshea)
  - Turn on and fix g-ir-scanner warnings. (dshea)
  - Added a .bzrignore file to ignore all the files generated by the build. (dshea)
  - Ignore the INSTALL file (dshea)
  - Added a function to clear the location set for a CcTimezoneMap (dshea)
  - Allow the timezone highlight to be manually set separately from the location. (dshea)


author: David Shea <dshea@redhat.com> - 0.4.1-4
changelog:
  - Merge fixes from lp:timezonemap
  - Add cc-timezone-location.h to timezonemapincludes_HEADERS so it gets installed (iain.lane)
  - Set en_name correctly (iain.lane)
  - Don't call g_type_init() on glib >= 2.35; it's deprecated (iain.lane)


author: David Shea <dshea@redhat.com> - 0.4.2-6
changelog:
  - Updated the time zone map images
  - Updated the city data from geonames.org
  - Fix a memory leak and potential crash with the locations list
  - Cycle through a smaller list of map locations on repeated clicks


author: David Shea <dshea@redhat.com> - 0.4.4-1
changelog:
  - Fixes for LP#1440157:
    Port to libsoup directly for geoname results
    Fix some memory leaks
    Do not reuse GCancellables
  - Upstream merges of SVG update and constrained location cycles


author: Steve Dickson <steved@redhat.com> 0.2.4-0.7
changelog:
  - Backported upstream debugging (bz 1273159)
  - Fixed memory leak in svc_vc_create (bz 1276685)
  - Fixed memory leaks in server-side GSS authenticator (bz 1282488)


author: Steve Dickson <steved@redhat.com> 0.2.4-0.16
changelog:
  - getnetconfig.c: fix a BAD_FREE (CWE-763) (bz 1631609)
  - Fix EOF detection on non-blocking socket (bz 1331554)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.1.2-2.el7
changelog:
  - Fix crash when loop-deleting non-loop device (#1036076)
  - Fix some thread safety issues (#1036099)
  - Fix lingering mount after CD-ROM drive is ejected (#835120)
  - Fix some uninitializes variables (#1056580)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.7.3-2
changelog:
  - Put back the hack to ensure hardening
    Related: rhbz#1477736
  - Fix the relationship between new udisks2 and storaged
    Related: rhbz#1477736


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.7.3-3
changelog:
  - Add and use a service for cleaning up mount point directories
    Resolves: rhbz#1384796
  - Do not try to create file watchers for RAIDs without redundancy
    Resolves: rhbz#1400056


author: Vojtech Trefny <vtrefny@redhat.com> - 2.7.3-7
changelog:
  - core: Add Encrypted.Resize method
    Resolves: rhbz#1567992
  - Fix checking for distribution and version in integration tests
    Resolves: rhbz#1508385
  - Do not skip integration tests on CentOS/RHEL
    Resolves: rhbz#1511974
  - Fix failing MDRAID integration test
    Resolves: rhbz#1511986


author: Tomas Bzatek <tbzatek@redhat.com> - 2.7.3-9
changelog:
  - Build udisks2-lsm subpackage (#1672664)
  - Fix sigint source removal on daemon exit (#1643350)
  - CVE-2018-17336: Fix format string vulnerability in udisks_log (#1637427)
  - Describe command options in the udisksctl man page (#1568269)


author: Miroslav Rezanina <mrezanin@redhat.com> 1.1-2
changelog:
  - lu-Fix-rpmdiff-failure.patch [bz#1229359]
  - lu-Fix-buffer-overflow-reported-by-Coverity.patch [bz#1233114]
  - Resolves: bz#1229359
    (Fix multilib support)
  - Resolves: bz#1233114
    (fix off-by-one in dwarf_to_unw_regnum (CVE-2015-3239))


author: Miroslav Rezanina <mrezanin@redhat.com> 1.1-5
changelog:
  - Version bumped [bz#1238864]
  - Resolves: bz#1238864
    libunwind: bump version to win against existing branches


author: Miroslav Rezanina <mrezanin@redhat.com> 1.1-6.el7
changelog:
  - Fix update from EPEL version [bz#1289950]
  - Resolves: bz#1289950
    (libunwind in RHEL 7.2 has a smaller release than the last libunwind package in EPEL-7)


author: Miroslav Rezanina <mrezanin@redhat.com> 1.2-2.el7
changelog:
  - Rebase to 1.2 [bz#1384435]
  - Resolves: bz#1384435
    (Rebase libunwind package (and add for ppc64le): libunwind)


author: Miloslav Trmač <mitr@redhat.com> - 0.58-2
changelog:
  - Always use secure_getenv() or __secure_getenv(), fail build if neither is
    available.  Patch by Viktor Hercinger <vhercing@redhat.com>.


author: Hans de Goede <hdegoede@redhat.com> - 0.8.8-1
changelog:
  - New upstream release 0.8.8
  - Add patches from upstream git to improve Pixart JPEG decoding
  - Add patch from upstream git to fix building with latest kernels (rhbz#823863)


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-2
changelog:
  - Add a few libv4l2rds patches from upstream, which bring libv4l2rds to its
    final API / ABI, so that apps build against it won't need a rebuild in the
    future


author: Benjamin Tissoires <benjamin.tissoires@redhat.com>
changelog:
  - Resolves rhbz #1253829 - fix 3 CVEs:
   - CVE-2015-5198: libvdpau incorrect check for security transition
   - CVE-2015-5199: libvdpau directory traversal in dlopen
   - CVE-2015-5200: libvdpau vulnerability in trace functionality


author: Wim ten Have <wim.ten.have@oracle.com> - 4.0.0-1
changelog:
  - BUILDINFO: commit=94e4b69d436915f6a51c7ae1a642692affa1b4ff
  - Set #ovm-4.0.1 buildrpm changes to version 4.0.0


author: Wim ten Have <wim.ten.have@oracle.com> - 4.0.0-2.el7
changelog:
  - BUILDINFO: commit=96e75ca2223c6b3e1beddb2e8d60142968462926
  - qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (Daniel P. Berrangé)   {CVE-2018-5748} {CVE-2018-1064}
  - log: fix deadlock obtaining hostname (related CVE-2018-6764) (Daniel P. Berrangé)   {CVE-2018-6764}
  - util: Fix syntax-check (Andrea Bolognani)  
  - virlog: determine the hostname on startup CVE-2018-6764 (Lubomir Rintel)   {CVE-2018-6764}


author: Wim ten Have <wim.ten.have@oracle.com> - 4.0.0-3.el7
changelog:
  - BUILDINFO: commit=6243d728b06bbef5eebe9d5825b178a500b5f8a3
  - buildrpm: fully disable xen dependency for OL7u4. (Wim ten Have)  [Orabug: 27818616]


author: Wim ten Have <wim.ten.have@oracle.com> - 4.0.0-4.el7
changelog:
  - BUILDINFO: commit=181fafde6d3ac51d79aba55787263b6399ad4023
  - storage: extend preallocation flags support for qemu-img (Wim ten Have)  [Orabug: 27103216]


author: Wim ten Have <wim.ten.have@oracle.com> - 4.0.0-5.el7
changelog:
  - BUILDINFO: commit=7f6a6aef31894e00f7c16946c567010f87a85ed0
  - Exadata required changes transitioning guests towards vNUMA (Wim ten Have)


author: Wim ten Have <wim.ten.have@oracle.com> - 4.10.0-2.el7
changelog:
  - BUILDINFO: commit=0e4be9ebf1099f0bb692d8a523ae286f6128aada
  - qemu: implement CPU packing (Wim ten Have)  
  - qemu: driver configuration changes to add CPU packing detail (Wim ten Have)  
  - libvirt: domain changes reserving capabilities for CPU packing (Wim ten Have)


author: Wim ten Have <wim.ten.have@oracle.com> - 4.10.0-3.el7
changelog:
  - BUILDINFO: commit=e1983231a407d33e0cc84d63062774acbf192565
  - qemuxml2argvdata: Fix tests for numatune added memset (Wim ten Have)  
  - domain: vNUMA bind memory under auto partitioning (Wim ten Have)


author: Menno Lageman <menno.lageman@oracle.com> - 4.4.0-2.el7
changelog:
  - BUILDINFO: commit=d619b4e4e81d3bcffa43df2af2fe7c7b52b85345
  - Update version to 4.4.0 (Menno Lageman)


author: Wim ten Have <wim.ten.have@oracle.com> - 4.4.0-3.el7
changelog:
  - BUILDINFO: commit=78eb927c310ee13bf4d7d5f80555b612a6da0293
  - qemuxml2argvdata: add tests that exercise autopartition vNUMA topology (Wim ten Have)  
  - qemu: enable vNUMA autoconf support for KVM architecture. (Wim ten Have)  
  - libxl: enable vNUMA autoconf support for Xen architecture. (Wim ten Have)  
  - domain: auto target guests providing the machine NUMA topology (Wim ten Have)


author: Wim ten Have <wim.ten.have@oracle.com> - 4.4.0-4.el7
changelog:
  - BUILDINFO: commit=69c7503bb6f81210bbf056c9305da15b5bdfc59d
  - qemuxml2argvdata: adjust tests that exercise autopartition vNUMA topology (Wim ten Have)  [Orabug: 28447977] 
  - domain: target auto partitioned guests by disjoint vNUMA cpu ranges (Wim ten Have)  [Orabug: 28447977]


author: Wim ten Have <wim.ten.have@oracle.com> - 4.7.0-2.el7
changelog:
  - BUILDINFO: commit=e5b1a9fd903207e44ce6064240df0ef408d83862
  - qemu: xml2argv, argv2xml fixes for mem-lock and cpu-pm targetted guests (Wim ten Have)  
  - qemu: parse and apply domain mem-lock and cpu-pm if such applies (Wim ten Have)  
  - domain: add hypervisor features mem-lock and cpu-pm support for kvm (Wim ten Have)  
  - qemu: xml2argv, argv2xml fixes for kvm-hint-dedicated targetted guests (Wim ten Have)  
  - qemu: parse and apply domain kvm-hint-dedicated if such applies (Wim ten Have)  
  - domain: add hypervisor feature kvm-hint-dedicated support for kvm (Wim ten Have)


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-3.el7
changelog:
  - BUILDINFO: commit=b335d6fa26d61fc28159d39b0644240b4733ef4b
  - qemu: Fix nr_hugepages host auto-tuning computation (Wim ten Have)  [Orabug: 29625524] 
  - qemu: fix driver SEGV reaping existing guests (Wim ten Have)  [Orabug: 29655677]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-5.el7
changelog:
  - qemu: disable setmem change requests for vNUMA targets (Wim ten Have)  [Orabug: 29797366] 
  - domain: Disable memballoon memory configuration support for vNUMA guests (Wim ten Have)  [Orabug: 29797366] 
  - qemu: Driver change to target for vNUMA setmaxmem change request (Wim ten Have)  [Orabug: 29749852] 
  - domain: Add domain memory config support for vNUMA guests (Wim ten Have)  [Orabug: 29749852] 
  - logging: restrict sockets to mode 0600 (Daniel P. Berrangé)  [Orabug: 29861433]  {CVE-2019-10132}
  - locking: restrict sockets to mode 0600 (Daniel P. Berrangé)  [Orabug: 29861433]  {CVE-2019-10132}
  - admin: reject clients unless their UID matches the current UID (Daniel P. Berrangé)  [Orabug: 29861433]  {CVE-2019-10132}


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-6.el7
changelog:
  - qemu: Driver change adding private lock to auto-tune hugepages (Wim ten Have)
    [Orabug: 29809943]


author: Mark Kanda <mark.kanda@oracle.com> - 5.0.0-7.el7
changelog:
  - cpu_map: Define md-clear CPUID bit (Jiri Denemark)  [Orabug: 29874181]
    {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130} {CVE-2019-11091}


author: Menno Lageman <menno.lageman@oracle.com> - 5.0.0-8.el7
changelog:
  - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (Ján Tomko)  [Orabug: 29955742]  {CVE-2019-10161}
  - domain: Define explicit flags for saved image xml (Eric Blake)  [Orabug: 29955742] 
  - api: disallow virDomainManagedSaveDefineXML on read-only connections (Ján Tomko)  [Orabug: 29955742]  {CVE-2019-10166}
  - api: disallow virConnectGetDomainCapabilities on read-only connections (Ján Tomko)  [Orabug: 29955742]  {CVE-2019-10167}
  - api: disallow virConnect*HypervisorCPU on read-only connections (Ján Tomko)  [Orabug: 29955742]  {CVE-2019-10168}


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-9.el7
changelog:
  - qemu: remove cpuhostmask and cpuguestmask from virCaps structure (Wim ten
    Have)  [Orabug: 29956508]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-10.el7
changelog:
  - qemuxml2argvdata: Fix tests for vNUMA nodes and threads per core match (Wim ten Have)  [Orabug: 29826947] 
  - qemu: Add SMT support to CPU packing (Wim ten Have)  [Orabug: 29826947] 
  - domain: Add support for SMT to auto vNUMA feature (Wim ten Have)  [Orabug: 29826947]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-11.el7
changelog:
  - qemu: Add hotplug support for vNUMA node topology (Wim ten Have)  
  - domain: correct vNUMA autopartition validation check (Wim ten Have)


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-12.el7
changelog:
  - qemu: Driver change to support vNUMA setvcpus config change request (Wim ten Have)  [Orabug: 30030162] 
  - domain: Add vNUMA auto partition support for persistent domains (Wim ten Have)  [Orabug: 30030162]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-14.el7
changelog:
  - qemuxml2argvdata: Adjust a test for vNUMA nodes and threads per core match (Wim ten Have)  [Orabug: 30189275] 
  - qemu: Fix vNUMA hotplug request checking the node mapped cores. (Wim ten Have)  [Orabug: 30189275] 
  - libvirt: Add vNUMA online and hotplug rendered detail (Wim ten Have)  [Orabug: 30189275]


author: Menno Lageman <menno.lageman@oracle.com> - 5.0.0-15.el7
changelog:
  - qemu: ensure whole cores during hot(un)plug on Exadata (Menno Lageman)  [Orabug: 30239774] 
  - qemu: exadata KVM set vcpu granularity must be number of CPUs in core (Menno Lageman)  [Orabug: 30224846]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-16.el7
changelog:
  - libvirt: Add single node vNUMA forced configuration enhancement (Wim ten Have)  [Orabug: 30380799] 
  - libvirt: vNUMA auto partitioning can't downscale vcpus/vcpu sets. (Wim ten Have)  [Orabug: 29995967] 
  - qemuxml2argvdata: Adjust numa-interleave test. (Wim ten Have)  [Orabug: 30258966] 
  - qemu: Fix CPU topology less vNUMA rendered guests. (Wim ten Have)  [Orabug: 30258966] 
  - libvirt: Fix vNUMA online and hotplug render detail. (Wim ten Have)  [Orabug: 30258966]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-2.el7
changelog:
  - BUILDINFO: commit=568af469d4e54975e0ffdf61a8f7063c57cb77eb
  - domain: fix vNUMA auto partition pinning on imbalanced configurations (Wim ten Have)  [Orabug: 29503554] 
  - qemu: fix driver initialization SEGV under initial bootstrap (Wim ten Have)  [Orabug: 29502935]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-4.el7
changelog:
  - logging: restrict sockets to mode 0600 (Daniel P. Berrangé)  [Orabug: 29861433]  {CVE-2019-10132}
  - locking: restrict sockets to mode 0600 (Daniel P. Berrangé)  [Orabug: 29861433]  {CVE-2019-10132}
  - admin: reject clients unless their UID matches the current UID (Daniel P. Berrangé)  [Orabug: 29861433]  {CVE-2019-10132}


author: Menno Lageman <menno.lageman@oracle.com> - 5.7.0-4.el7
changelog:
  - build: skip copyright check for gnulib (Menno Lageman)  
  - Revert "network: pull global chain init into separate method" (Menno Lageman)  [Orabug: 30611188] 
  - Revert "network: add more debugging of firewall chain creation" (Menno Lageman)  [Orabug: 30611188] 
  - Revert "network: delay global firewall setup if no networks are running" (Menno Lageman)  [Orabug: 30611188] 
  - qemu-submodule-init: Add Git submodule init script (Karl Heubaum)  [Orabug: 30796221]


author: Menno Lageman <menno.lageman@oracle.com> - 5.7.0-5.el7
changelog:
  - exadata: can not configure shared memory hosted disk devices for
    vhostmd.service (Menno Lageman)  [Orabug: 30598065]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-8.el7
changelog:
  - domain groups: End Of BETA (Wim ten Have)  
  - domaingroups: ExaData Domain Groups POC (Wim ten Have)  
  - domaingroup: preliminary virsh support for domain groups - drop #4 (Menno Lageman)  
  - tests: add various tests to exercise vNUMA host partitioning (Wim ten Have)  [Orabug: 29720293] 
  - qemu: driver changes for new vNUMA Host and Nodeset partitioning (Wim ten Have)  [Orabug: 29720293] 
  - XML definitions for guest vNUMA and parsing routines (Wim ten Have)  [Orabug: 29720293] 
  - Revert "exadata: can not configure shared memory hosted disk devices for vhostmd.service" (Menno Lageman)  
  - qemu: Forcibly mknod() even if it exists (Michal Prívozník)


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-9.el7
changelog:
  - vNUMA: distinguish standard and vNUMA memory 'setmaxmem' operations (Wim ten
    Have)  [Orabug: 30894536]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-10.el7
changelog:
  - domain groups: refresh dgbase depending host capabilities before rendering the cpuguestmask (Wim ten Have)  [Orabug: 30987361] 
  - conf: domain group validation errors should print correct group info (Menno Lageman)  [Orabug: 30988428] 
  - qemu: reserve hugepages when memoryBacking when live attaching memory (Wim ten Have)  [Orabug: 30985510] 
  - domain groups: avoid virDomainGroupInit if exadataConfig is disabled (Wim ten Have)  [Orabug: 30985907]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-11.el7
changelog:
  - domain groups: Add functionality to control NUMA node alignment (Wim ten Have)  [Orabug: 30988105] 
  - domain groups: A rename should always update active and config domain definitions (Wim ten Have)  [Orabug: 30999730]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-12.el7
changelog:
  - libvirt: vNUMA automatic host paritioning allows erroneous vcpu settings (Wim ten Have)  [Orabug: 31050313] 
  - remote: do not stop libvirtd after period of inactivity (Menno Lageman)  [Orabug: 31003707] 
  - remote: do not use socket activation by default (Menno Lageman)  [Orabug: 31003707] 
  - qemu driver: handle targetNode under memory hot-plug operations (Wim ten Have)  [Orabug: 31009716] 
  - domain groups: refresh dgbase host capabilities prior to defining a new group (Wim ten Have)  [Orabug: 31026069] 
  - domain groups: Always cleanup system.slice controlled hugepage reservations (Wim ten Have)  [Orabug: 31025853] 
  - domain groups: Enable DGs upon fresh groups arrival (Wim ten Have)  [Orabug: 31021247] 
  - domain groups: Skip undefined domain groups when validating lists (Wim ten Have)  [Orabug: 31030117]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-13.el7
changelog:
  - domain groups: Fix multiple Domain Group vCPU administration flaws (Wim ten Have)  [Orabug: 31145304] 
  - qemu: fix missing #if defined(ENABLE_EXADATA) (Menno Lageman)  
  - build: Fix qemu-submodule-init syntax-check issue (Wim ten Have)  
  - libvirt: Fix various introduced Fedora/RHEL build violations (Wim ten Have)  [Orabug: 31143337] 
  - qemu: don't hold both jobs for suspend (Jonathon Jongsma)  [Orabug: 31073098]  {CVE-2019-20485}
  - domain groups: qemu driver error refers to pCPUs instead of vCPUs (Wim ten Have)  [Orabug: 31075757] 
  - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (Jiang Kun)  [Orabug: 31070337]


author: Menno Lageman <menno.lageman@oracle.com> - 5.7.0-14.el7
changelog:
  - vmx: make 'fileName' optional for CD-ROMs (Pino Toscano)  [Orabug: 31350200] 
  - vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (Pino Toscano)  [Orabug: 31350200] 
  - domain group: Fix a potential SEGV while restoring guest domains (Wim ten Have)  [Orabug: 31285615] 
  - cpu_map: Distinguish Cascadelake-Server from Skylake-Server (Jiri Denemark)  [Orabug: 31214897] 
  - cpu_map: Add more -noTSX x86 CPU models (Christian Ehrhardt)  [Orabug: 31214897] 
  - qemuDomainGetStatsIOThread: Don't leak array with 0 iothreads (Peter Krempa)  [Orabug: 31251756]  {CVE-2020-12430}


author: Menno Lageman <menno.lageman@oracle.com> - 5.7.0-16.el7
changelog:
  - qemu: format 'x-aw-bits' on intel-iommu command line (Menno Lageman)  
  - qemu: format address wdith on intel-iommu command line (Menno Lageman)  
  - conf: add address width attribute to iommu (Menno Lageman)  
  - tests: add tests for host-phys-bits KVM feature (Menno Lageman)  [Orabug: 31354547] 
  - qemu: support host-phys-bits KVM feature (Menno Lageman)  [Orabug: 31374547] 
  - storage: Fix daemon crash on lookup storagepool by targetpath (Yi Li)  [Orabug: 31439483]  {CVE-2020-10703}


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-17.el7
changelog:
  - qemu: Fix cpu boundary checks when starting or configuring guest domains. (Wim ten Have)  [Orabug: 31469231] 
  - libvirt: Allocate max possible CPUs for QEMU to prepare guest memory (Wim ten Have)  [Orabug: 31064560]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-19.el7
changelog:
  - qemu: Verify use of hugepages when releasing its acquired status (Wim ten
    Have)  [Orabug: 31839035]


author: Menno Lageman <menno.lageman@oracle.com> - 5.7.0-20.el7
changelog:
  - qemu: remove use of qemuDomainObjBeginJobWithAgent() (Jonathon Jongsma)  [Orabug: 31990187]  {CVE-2019-20485}
  - qemu: don't hold monitor and agent job when setting time (Jonathon Jongsma)  [Orabug: 31990187]  {CVE-2019-20485}
  - qemu: don't hold a monitor and agent job for reboot (Jonathon Jongsma)  [Orabug: 31990187]  {CVE-2019-20485}
  - qemu: don't take agent and monitor job for shutdown (Jonathon Jongsma)  [Orabug: 31990187]  {CVE-2019-20485}
  - qemu: agent: set ifname to NULL after freeing (Ján Tomko)  [Orabug: 31964426]  {CVE-2020-25637}
  - rpc: require write acl for guest agent in virDomainInterfaceAddresses (Ján Tomko)  [Orabug: 31964426]  {CVE-2020-25637}
  - rpc: add support for filtering @acls by uint params (Ján Tomko)  [Orabug: 31964426]  {CVE-2020-25637}
  - rpc: gendispatch: handle empty flags (Ján Tomko)  [Orabug: 31964426]  {CVE-2020-25637}
  - qemu: blockcopy: Fix conditions when virStorageSource should be initialized (Peter Krempa)  [Orabug: 31517934] 
  - qemu: blockcopy: Report error on image format detection failure (Peter Krempa)  [Orabug: 31517934]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-21.el7
changelog:
  - exadata: Fix the validation when defining domain groups (Wim ten Have)  [Orabug: 32085856] 
  - Revert "qemu: don't take agent and monitor job for shutdown" (Menno Lageman)  [Orabug: 32080283] 
  - Revert "qemu: don't hold a monitor and agent job for reboot" (Menno Lageman)  [Orabug: 32080283] 
  - Revert "qemu: don't hold monitor and agent job when setting time" (Menno Lageman)  [Orabug: 32080283] 
  - Revert "qemu: remove use of qemuDomainObjBeginJobWithAgent()" (Menno Lageman)  [Orabug: 32080283] 
  - qemu: improve error message when guest vcpu count exceeds domain group limit (Menno Lageman)  [Orabug: 31985111] 
  - qemu: Autonomous hugepage acquisition for 2-MiB and 1-GiB guest memoryBacking. (Wim ten Have)  
  - qemu: Fix a qemuMemReleaseHostHugepages state error (Wim ten Have)  [Orabug: 32069203] 
  - qemu: avoid guest CPU process handling if exadataConfig is disabled (Wim ten Have)  [Orabug: 32053696] 
  - domain_conf: Relax SCSI addr used check (Michal Prívozník)  [Orabug: 31386162] 
  - domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (Michal Prívozník)  [Orabug: 31386162]


author: Menno Lageman <menno.lageman@oracle.com> - 5.7.0-22.el7
changelog:
  - build: add dependency to help patch tooling (Menno Lageman)  [Orabug: 32284540] 
  - Exadata: fix active guest dgroup-delete requests (Wim ten Have)  [Orabug: 32095306] 
  - Exadata: fix a rogue Domain Groups dgroup-undefine flaw (Wim ten Have)  [Orabug: 31945084]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-23.el7
changelog:
  - util: remove unneeded cleanup labels (Wim ten Have)  [Orabug: 32399255] 
  - virnuma: Don't work around numa_node_to_cpus() for non-existent nodes (Wim ten Have)  [Orabug: 32379098]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-24.el7
changelog:
  - exadata: Add configurable libvirtd mlockall support (Wim ten Have)  [Orabug: 32479237] 
  - exadata: hint a configurable number of memory init threads to qemu (Wim ten Have)  [Orabug: 32460334] 
  - Exadata: domain group should allow for asymmetric creation (Wim ten Have)  [Orabug: 32060622]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-26.el7
changelog:
  - exadata: Fix autonomous hugepage acquisition barrier hang (Wim ten Have)  [Orabug: 32537538] 
  - exadata: Fix CPU Packing when out of pCPUs (Wim ten Have)  [Orabug: 32527311]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-27.el7
changelog:
  - Exadata: protect libvirt hugepage acquisition from QEMU async init (Wim ten
    Have)  [Orabug: 32561685]


author: Joe Jin <joe.jin@oracle.com> - 5.7.0-28.el7
changelog:
  - qemu_capabilities: Rework domain caps cache (Michal Prívozník)  [Orabug: 32664432] 
  - tests: fix virArchFromHost() redefine error (Joe Jin)  [Orabug: 32664432] 
  - qemu: cache host arch separately from virCapsPtr (Daniel P. Berrangé)  [Orabug: 32664432] 
  - cpu.c: Check properly for virCapabilitiesGetNodeInfo() retval (Michal Prívozník)  [Orabug: 32664432] 
  - virStorageSourceParseBackingJSONRaw: Parse 'offset' and 'size' attributes (Peter Krempa)  [Orabug: 32164351] 
  - tests: qemu: Add test data for the new <slice> element (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Add support for slices of type 'storage' (Peter Krempa)  [Orabug: 32164351] 
  - tests: qemublock: Add cases for creating image overlays on top of disks with <slice> (Peter Krempa)  [Orabug: 32164351] 
  - qemu: block: Properly format storage slice into backing store strings (Peter Krempa)  [Orabug: 32164351] 
  - qemu: domain: Store nodenames of slice in status XML (Peter Krempa)  [Orabug: 32164351] 
  - conf: Implement support for <slices> of disk source (Peter Krempa)  [Orabug: 32164351] 
  - docs: Document the new <slices> sub-element of disk's <source> (Peter Krempa)  [Orabug: 32164351] 
  - qemu: block: forbid creation of storage sources with <slice> (Peter Krempa)  [Orabug: 32164351] 
  - qemuDomainValidateStorageSource: Reject unsupported slices (Peter Krempa)  [Orabug: 32164351] 
  - qemuBlockStorageSourceGetFormatRawProps: format 'offset' and 'size' for slice (Peter Krempa)  [Orabug: 32164351] 
  - util: virstoragefile: Add data structure for storing storage source slices (Peter Krempa)  [Orabug: 32164351] 
  - tests: virstorage: Add test data for json specified raw image with offset/size (Peter Krempa)  [Orabug: 32164351] 
  - docs: formatdomain: Close <source> on one of disk examples (Peter Krempa)  [Orabug: 32164351] 
  - qemu: domain: Refactor formatting of node names into status XML (Peter Krempa)  [Orabug: 32164351] 
  - tests: virstorage: Add test cases for "json:" pseudo-URI without 'file' wrapper (Peter Krempa)  [Orabug: 32164351] 
  - virStorageSourceParseBackingJSON: Prevent arbitrary nesting with format drivers (Peter Krempa)  [Orabug: 32164351] 
  - virStorageSourceParseBackingJSON: Allow 'json:' pseudo URIs without 'file' wrapper (Peter Krempa)  [Orabug: 32164351] 
  - virStorageSourceJSONDriverParser: annotate 'format' drivers (Peter Krempa)  [Orabug: 32164351] 
  - virStorageSourceParseBackingJSON: Move deflattening of json: URIs out of recursion (Peter Krempa)  [Orabug: 32164351] 
  - virStorageSourceParseBackingJSON: Pass around original backing file string (Peter Krempa)  [Orabug: 32164351] 
  - qemu: enable blockdev support (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Instantiate pflash via -machine when using blockdev (Peter Krempa)  [Orabug: 32164351] 
  - qemu: command: Build the 'pflash' drives via -machine (Peter Krempa)  [Orabug: 32164351] 
  - qemu: command: Build -blockdev-s for backing of pflash (Peter Krempa)  [Orabug: 32164351] 
  - qemu: domain: Introduce helper to convert <loader> into virStorageSource (Peter Krempa)  [Orabug: 32164351] 
  - qemu: domain: Store virStorageSources representing pflash backing (Peter Krempa)  [Orabug: 32164351] 
  - qemu: command: Extract formatting of -drive for pflash (Peter Krempa)  [Orabug: 32164351] 
  - qemu: capabilities: Add detection of the 'savevm' fix for -blockdev (Peter Krempa)  [Orabug: 32164351] 
  - qemu: qapi: Add support for command features (Peter Krempa)  [Orabug: 32164351] 
  - qemu: caps: Add capability for dynamic 'auto-read-only' support for files (Peter Krempa)  [Orabug: 32164351] 
  - tests: qemucapabilities: Refresh data for unreleased qemu-4.2 on x86_64 (Peter Krempa)  [Orabug: 32164351] 
  - qemu: caps: Base support of 'backingStoreInput' domain feature on QEMU_CAPS_BLOCKDEV (Peter Krempa)  [Orabug: 32164351] 
  - docs: Document support for obeying <backingStore> of <disk> on input (Peter Krempa)  [Orabug: 32164351] 
  - conf: domcaps: Add 'backingStoreInput' domain capability (Peter Krempa)  [Orabug: 32164351] 
  - qemu: domcaps: Simplify adding new domaincaps based on qemu caps (Peter Krempa)  [Orabug: 32164351] 
  - domaincaps: Store domain capability features in an array (Peter Krempa)  [Orabug: 32164351] 
  - qemu: domcaps: Initialize all features (Peter Krempa)  [Orabug: 32164351] 
  - domcaps: Add function for initializing domain caps as unsupported (Peter Krempa)  [Orabug: 32164351] 
  - conf: domaincaps: Use virXMLFormatElement in virDomainCapsFormatFeatures (Peter Krempa)  [Orabug: 32164351] 
  - conf: domaincaps: Extract formatting of the <features> subelement (Peter Krempa)  [Orabug: 32164351] 
  - conf: domaincaps: Replace FORMAT_SINGLE macro by a function (Peter Krempa)  [Orabug: 32164351] 
  - conf: capabilities: Modernize virCapabilitiesFormatMemoryBandwidth (Peter Krempa)  [Orabug: 32164351] 
  - conf: caps: Modernize virCapabilitiesFormatCaches (Peter Krempa)  [Orabug: 32164351] 
  - conf: turn virDomainMemtuneFormat void (Peter Krempa)  [Orabug: 32164351] 
  - conf: domain: Split up formatting of <memtune> and <memoryBacking> (Peter Krempa)  [Orabug: 32164351] 
  - conf: Rename virDomainCapsFeature to virDomainProcessCapsFeature (Peter Krempa)  [Orabug: 32164351] 
  - conf: storagecaps: Fix broken attempt at being const-correct (Peter Krempa)  [Orabug: 32164351] 
  - conf: domaincaps: Fix broken attempt at being const-correct (Peter Krempa)  [Orabug: 32164351] 
  - qemu: caps: Make capability filler functions void (Peter Krempa)  [Orabug: 32164351] 
  - util: buffer: Add init macro for automatically setting child XML indent (Peter Krempa)  [Orabug: 32164351] 
  - qemu: snapshot: Fix inactive external snapshots when backing chain is present (Peter Krempa)  [Orabug: 32164351] 
  - qemu: blockjob: Transfer 'readonly' state of images after active layer block commit (Peter Krempa)  [Orabug: 32164351] 
  - qemu: command: Use XML based disk bus convertor in error message (Peter Krempa)  [Orabug: 32164351] 
  - storagefile: Fill in meta->externalDataStore (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Add externalDataStore member (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Split out virStorageSourceNewFromChild (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Don't access backingStoreRaw directly in FromBackingRelative (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Fill in meta->externalDataStoreRaw (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Add externalDataStoreRaw member (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Fix backing format \0 check (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Rename qcow2GetExtensions 'format' argument (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Rename qcow2GetBackingStoreFormat (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Push extension_end calc to qcow2GetBackingStoreFormat (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Push 'start' into qcow2GetBackingStoreFormat (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Use qcowXGetBackingStore directly (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Drop now unused isQCow2 argument (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Check version to determine if qcow2 or not (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: qcow1: Let qcowXGetBackingStore fill in format (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: qcow1: Fix check for empty backing file (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: qcow1: Check for BACKING_STORE_OK (Cole Robinson)  [Orabug: 32164351] 
  - qemu: snapshot: Don't update current snapshot until we're done (Peter Krempa)  [Orabug: 32164351] 
  - qemu: block: Replace snapshot transaction action generator (Peter Krempa)  [Orabug: 32164351] 
  - tests: qemumonitor: Add testing for the 'transaction' command and generators (Peter Krempa)  [Orabug: 32164351] 
  - qemu: monitor: Add transaction generators for snapshot APIs (Peter Krempa)  [Orabug: 32164351] 
  - qemu: monitor: Add transaction generators for dirty bitmap APIs (Peter Krempa)  [Orabug: 32164351] 
  - tests: qemucapabilities: fix 4.2.0 qemucapabilities (Joe Jin)  [Orabug: 32164351] 
  - qemu: checkpoint: Do ACL check prior to snapshot interlocking (Peter Krempa)  [Orabug: 32164351] 
  - qemu: driver: Remove misplaced qemuDomainObjEndJob in qemuDomainCheckpointGetXMLDesc (Peter Krempa)  [Orabug: 32164351] 
  - conf: Drop pointless 'domain' argument from virDomainSnapshotRedefinePrep (Peter Krempa)  [Orabug: 32164351] 
  - conf: Drop pointless 'domain' argument from virDomainCheckpointRedefinePrep (Peter Krempa)  [Orabug: 32164351] 
  - tests: qemucapabilities: Update caps of qemu-4.1 to released version (Peter Krempa)  [Orabug: 32164351] 
  - tests: add qemu capabilities data for qemu 4.2 (Peter Krempa)  [Orabug: 32164351] 
  - lxc: fix compile error (Joe Jin)  [Orabug: 32164351] 
  - qemu: driver: Remove QEMU_ADD_BLOCK_PARAM_LL macro (Peter Krempa)  [Orabug: 32164351] 
  - qemu: driver: Don't return anything from qemuDomainBlockStatsGatherTotals (Peter Krempa)  [Orabug: 32164351] 
  - qemu: driver: Remove pointless macro QEMU_BLOCK_STAT_TOTAL (Peter Krempa)  [Orabug: 32164351] 
  - qemu: monitor: Change fields in qemuBlockStats to 'unsigned' (Peter Krempa)  [Orabug: 32164351] 
  - qemu: monitor: Refactor cleanup in qemuMonitorJSONGetAllBlockStatsInfo (Peter Krempa)  [Orabug: 32164351] 
  - qemu: monitor: Refactor cleanup in qemuMonitorJSONGetOneBlockStatsInfo (Peter Krempa)  [Orabug: 32164351] 
  - qemu: monitor: Refactor cleanup in qemuMonitorJSONBlockStatsCollectData (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Remove stale comment for qemuDomainBlockStats (Peter Krempa)  [Orabug: 32164351] 
  - qemu_blockjob: Remove secdriver metadata for whole backing chain on job completion (Michal Prívozník)  [Orabug: 32164351] 
  - qemu: hotplug: Use VIR_AUTOFREE() instead VIR_FREE for strings (Daniel Henrique Barboza)  [Orabug: 32164351] 
  - qemu: snapshot: Do ACL check prior to checkpoint interlocking (Peter Krempa)  [Orabug: 32164351] 
  - qemuCheckDiskConfigAgainstDomain: Validate disk's SCSI address iff disk is SCSI (Xu Yandong)  [Orabug: 32164351] 
  - qemuSharedDeviceEntryRemove: Free domain name before VIR_DELETE_ELEMENT (Xu Yandong)  [Orabug: 32164351] 
  - qemu_capabilities: Temporarily disable dbus-vmstate capability (Michal Prívozník)  [Orabug: 32164351] 
  - Revert "qemu: add socket datagram capability" (Michal Prívozník)  [Orabug: 32164351] 
  - tests: qemustatusxml2xml: Fix disk target mess (Peter Krempa)  [Orabug: 32164351] 
  - snapshot: Store both config and live XML in the snapshot domain (Maxiwell S. Garcia)  [Orabug: 32164351] 
  - qemu: formatting XML from domain def choosing the root name (Maxiwell S. Garcia)  [Orabug: 32164351] 
  - qemu: Don't leak domain def when RevertToSnapshot fails (Jiri Denemark)  [Orabug: 32164351] 
  - qemu: Fix regression in snapshot-revert (Eric Blake)  [Orabug: 32164351] 
  - lib: Define and use autofree for virConfPtr (Michal Prívozník)  [Orabug: 32164351] 
  - qemu_conf: Use more of VIR_AUTOUNREF() (Michal Prívozník)  [Orabug: 32164351] 
  - qemu_conf: Use more of VIR_AUTOFREE() (Michal Prívozník)  [Orabug: 32164351] 
  - qemu_conf: Drop a pair of needless 'cleanup' labels (Michal Prívozník)  [Orabug: 32164351] 
  - virhostdev: Don't unref @pcidevs twice (Michal Prívozník)  [Orabug: 32164351] 
  - qemu_conf.c: introduce qemuAddRemoveSharedDeviceInternal (Daniel Henrique Barboza)  [Orabug: 32164351] 
  - qemu_conf.c: introduce qemuAddRemoveSharedDiskInternal (Daniel Henrique Barboza)  [Orabug: 32164351] 
  - qemu_conf.c: introduce qemuAddRemoveSharedHostdevInternal (Daniel Henrique Barboza)  [Orabug: 32164351] 
  - remote: fix UNIX socket path being incorrectly built for libvirtd (eater)  [Orabug: 32164351] 
  - lib: Grab write lock when modifying list of domains (Michal Prívozník)  [Orabug: 32164351] 
  - qemu: reset VM id after external devices stop (Marc-André Lureau)  [Orabug: 32164351] 
  - qemu: add dbus-vmstate capability (Marc-André Lureau)  [Orabug: 32164351] 
  - tests: fix xml2xml tpm-emulator.xml test (Marc-André Lureau)  [Orabug: 32164351] 
  - qemu: migration: Switch to blockdev mode for non-shared storage migration (Peter Krempa)  [Orabug: 32164351] 
  - qemu: migration: Refactor cleanup in qemuMigrationSrcNBDStorageCopy (Peter Krempa)  [Orabug: 32164351] 
  - qemu: migration: Refactor cleanup in qemuMigrationSrcNBDStorageCopyBlockdev (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Defer support checks for external active snapshots to blockdev code or qemu (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Add -blockdev support for external snapshots (Peter Krempa)  [Orabug: 32164351] 
  - qemu: snapshot: Skip overlay file creation/interogation if unsupported (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Merge use of 'reuse' flag in qemuDomainSnapshotDiskPrepareOne (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Disband qemuDomainSnapshotCreateSingleDiskActive (Peter Krempa)  [Orabug: 32164351] 
  - qemu: snapshot: Rename external disk snapshot handling functions (Peter Krempa)  [Orabug: 32164351] 
  - qemu: snapshot: Move error preservation to qemuDomainSnapshotDiskDataCleanup (Peter Krempa)  [Orabug: 32164351] 
  - qemu: snapshot: Save status and config XMLs only on success (Peter Krempa)  [Orabug: 32164351] 
  - qemu: snapshot: Fix image lock handling when taking a snapshot (Peter Krempa)  [Orabug: 32164351] 
  - qemu: driver: Fix shallow non-reuse block copy (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Explicitly pass backing store to qemuBuildStorageSourceChainAttachPrepareBlockdevTop (Peter Krempa)  [Orabug: 32164351] 
  - qemu: block: explicitly pass backing store to qemuBlockStorageSourceAttachPrepareBlockdev (Peter Krempa)  [Orabug: 32164351] 
  - qemu: command: Refactor qemuBuildStorageSourceChainAttachPrepareBlockdevInternal (Peter Krempa)  [Orabug: 32164351] 
  - qemu: block: Explicitly specify backingStore when creating format layer props (Peter Krempa)  [Orabug: 32164351] 
  - qemu: block: Unify conditions to format backing store of format node definition (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Prevent storage causing too much nested XML (Peter Krempa)  [Orabug: 32164351] 
  - qemu: domain: Refactor cleanup in qemuDomainDetermineDiskChain (Peter Krempa)  [Orabug: 32164351] 
  - qemu: hotplug: Setup disk throttling with blockdev (Peter Krempa)  [Orabug: 32164351] 
  - qemu: hotplug: Use VIR_AUTOFREE in qemuDomainAttachDiskGeneric (Peter Krempa)  [Orabug: 32164351] 
  - qemu: hotplug: Simplify cleanup in qemuDomainChangeMediaLegacy (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Fix qemuDomainObjTaint with virtlogd (Jiri Denemark)  [Orabug: 32164351] 
  - qemu: monitor: Fix formatting of 'offset' in qemuMonitorJSONSaveMemory (Peter Krempa)  [Orabug: 32164351] 
  - tests: qemublock: Use bigger numbers as dummy capacity/physical (Peter Krempa)  [Orabug: 32164351] 
  - qemu: block: Use correct type when creating image size JSON entries (Peter Krempa)  [Orabug: 32164351] 
  - Exadata: protect vNUMA/SMT from artificially injected faults (Wim ten Have)  [Orabug: 32708041] 
  - virnetserver: fix some memory leaks in virNetTLSContextReloadForServer (Jin Yan)  
  - virt-admin: Introduce command srv-update-tls (Zhang Bo)  [Orabug: 32768102] 
  - admin: Introduce virAdmServerUpdateTlsFiles (Zhang Bo)  [Orabug: 32768102] 
  - tls: Add a mutex lock on 'tlsCtxt' (Zhang Bo)  [Orabug: 32768102] 
  - virnetserver: Introduce virNetServerUpdateTlsFiles (Zhang Bo)  [Orabug: 32768102]


