# changelog

author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.7.0.211-2.6.17.1
changelog:
  - Produce debug symbols for libpulse-java.so
  - Set IT_CFLAGS=-g so that debug symbols for the pulse audio
  - native library are being produced. This is needed to fix
  - rpmdiff errors of missing .debug_info in pulse-java.so.debug.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.231-2.6.19.0
changelog:
  - Bump to 2.6.19 (including tapsets) and OpenJDK 7u231-b01.
  - Fix fsg.sh to fail if patching fails.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.211-2.6.17.2
changelog:
  - Synchronise Requires with java-1.8.0-openjdk
  - Replace liblcms.so and libsctp.so in _privatelibs with libjavalcms.so and libjavasctp.so
  - Add libjavagtk.so and libmawt.so to _privatelibs
  - Remove duplicate fontconfig build requirement
  - Remove unneeded Requires for fontconfig, lcms2 and libjpeg (all dynamically linked against)
  - Add _isa to NSS requirements
  - Move policytool desktop file and man page to java-1.7.0-openjdk where the binary is
  - Resolves: rhbz#1608957


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.241-2.6.20.0
changelog:
  - Bump to 2.6.20 and OpenJDK 7u241-b01.
  - Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.241-2.6.20.1
changelog:
  - Bump to 2.6.20 and OpenJDK 7u241-b01.
  - Drop PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Drop JDK-8226318/RH1738637 which is now included upstream.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.7.0.261-2.6.22.1
changelog:
  - Add release notes from IcedTea.
  - Mark license files with appropriate macro.
  - Resolves: rhbz#1810557


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-4.b11
changelog:
  - Rename SystemTap tapset tarball to avoid conflicts with previous version.
  - Resolves: rhbz#1438514


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-6.b12
changelog:
  - Update to aarch64-jdk8u131-b12 and aarch64-shenandoah-jdk8u131-b12 for AArch64 8168699 fix
  - Resolves: rhbz#1443417


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.131-8.b12
changelog:
  - Restore cacerts symlink as some broken apps hardcode the path (see RH1448802)
  - Resolves: rhbz#1319875


author: Zhengyu Gu <zgu@redhat.com> - 1:1.8.0.131-10.b12
changelog:
  - Added 8181055-pr3394-rh1448880.patch to fix a corner case of previous change
  - Resolves: rhbz#1448880


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.131-11.b12
changelog:
  - make to use latest c-j-c and so fix persisting issues with java.security and other configfiles
  - 1183793 is missing blocker
  - Resolves: rhbz#1448880


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-1.b12
changelog:
  - Reverting to java-1.7.0-openjdk on AArch64 as rhel-7.4-z-java-unsafe-candidate using wrong suffix.
  - Resolves: rhbz#1499207


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.151-5.b12
changelog:
  - Backport "8180048: Interned string and symbol table leak memory during parallel unlinking" (gnu_andrew)
  - Resolves: rhbz#1515212


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.161-0.b12
changelog:
  - Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
  - Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
    8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
    8175887 and 8180048 (RH1449870).(mbalao)
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-0.b12
changelog:
  - Switch bootstrap back to java-1.7.0-openjdk on all architectures, depending on RH1482244 fix
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-0.b12
changelog:
  - Replace tarballs with version including AArch64 fix for 8174962 (S8194686)
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.161-0.b13
changelog:
  - Update to b13 including Zero fix for 8174962 (S8194739) and restoring tzdata2017c update
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.151-5.b13
changelog:
  - Update to aarch64-jdk8u151-b13 and aarch64-shenandoah-jdk8u151-b13.
  - Drop upstreamed patch for 8075484.
  - Resolves: rhbz#1508017


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16
changelog:
  - Update to aarch64-jdk8u152-b16 and aarch64-shenandoah-jdk8u152-b16.
  - Update 8145913/PR3466/RH1498309 patch following upstream addition of 8152172 (AES for PPC)
  - Add new file cmsalpha.c to %{name}-remove-intree-libraries.sh
  - Remove upstreamed patches for 8153711/PR3313/RH1284948, 8162384/PR3122/RH1358661, 8173941/PR3226,
  -    8175813/PR3394/RH1448880, 8175887/PR3415, 8146086/PR3439/RH1478402, 8180048/PR3411/RH1449870 and
  -    8164293/PR3412/RH1459641
  - Resolves: rhbz#1508017


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16
changelog:
  - Update to tzdata2017c (8190258/PR3499) to resolve TCK failure due to mismatch with system version.
  - Resolves: rhbz#1508017


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.152-1.b16
changelog:
  - Backport 8191137 and add updates to the translations (8191840 in OpenJDK 7)
  - Resolves: rhbz#1512647


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.161-1.b12
changelog:
  - Update to aarch64-jdk8u161-b12 and aarch64-shenandoah-jdk8u161-b12 (mbalao)
  - Drop upstreamed patches for 8075484 (RH1490713), 8153711 (RH1284948),
    8162384 (RH1358661), 8164293 (RH1459641), 8173941, 8175813 (RH1448880),
    8175887 and 8180048 (RH1449870).(mbalao)
  - drop more of usptreamed patches 565,566,567,568
    ( 8184673-pr3475-rh1487266.patch  8191840-pr3503-rh1512647.patch  8191137-pr3503-rh1512647.patch 8190258-pr3499-tzdata2017c.patch)
  - Resolves: rhbz#1528233


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.162-0.b12
changelog:
  - Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
  - Remove upstreamed patches for 8181055/PR3394/RH1448880,
  -  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
  -  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
  -  8181810/PR3466/RH1498319.
  - Resolves: rhbz#1559766


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.171-1.b10
changelog:
  - Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-1.b10
changelog:
  - Cleanup from previous commit.
  - Remove unused upstream patch 8167200.hotspotAarch64.patch.
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-3.b10
changelog:
  - Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-3.b10
changelog:
  - Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.171-7.b10
changelog:
  - Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
  - Resolves: rhbz#1559766


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.172-4.b11
changelog:
  - Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
  - Resolves: rhbz#1593737


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-0.b03
changelog:
  - Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
  - Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-1.b04
changelog:
  - Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-2.b04
changelog:
  - Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181-7.b13
changelog:
  - Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
  - Remove 8187577/PR3578 now applied upstream.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b15-0
changelog:
  - Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
  - Update to aarch64-shenandoah-jdk8u181-b15.
  - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
  - Move buildver to where it should be in the OpenJDK version.
  - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
  - Update pr3539-rh1548475.patch to apply after 8187045.
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0
changelog:
  - Update to aarch64-shenandoah-jdk8u181-b16.
  - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream.
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u191-b10.
  - Drop 8146115/PR3508/RH1463098 applied upstream.
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b15-0
changelog:
  - Move to single OpenJDK tarball build, based on aarch64/shenandoah-jdk8u.
  - Update to aarch64-shenandoah-jdk8u181-b15.
  - Drop 8165489-pr3589.patch which was only applied to aarch64/jdk8u builds.
  - Move buildver to where it should be in the OpenJDK version.
  - Split ppc64 Shenandoah fix into separate patch file with its own bug ID (PR3620).
  - Update pr3539-rh1548475.patch to apply after 8187045.
  - Resolves: rhbz#1594249


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.181.b16-0
changelog:
  - Update to aarch64-shenandoah-jdk8u181-b16.
  - Drop PR3619 & PR3620 Shenandoah patches which should now be fixed upstream.
  - Resolves: rhbz#1633822


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b13-0
changelog:
  - Fix jdk8073139-pr1758-rh1191652-ppc64_le_says_its_arch_is_ppc64_not_ppc64le_jdk.patch paths to pass git apply
  - Resolves: rhbz#1633817


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b13-0
changelog:
  - Update to aarch64-shenandoah-jdk8u191-b13.
  - Update tarball generation script in preparation for PR3667/RH1656676 SunEC changes.
  - Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-0
changelog:
  - Update to aarch64-shenandoah-jdk8u191-b14.
  - Adjust JDK-8073139/PR1758/RH1191652 to apply following 8155627 backport.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.191.b14-1
changelog:
  - Add 8131048 & 8164920 (PR3574/RH1498936) to provide a CRC32 intrinsic for PPC64.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-0
changelog:
  - Update to aarch64-shenandoah-jdk8u192-b12.
  - Remove patches included upstream
    - JDK-8031668/PR2842
    - JDK-8148351/PR2842
    - JDK-6260348/PR3066
    - JDK-8061305/PR3335/RH1423421
    - JDK-8188030/PR3459/RH1484079
    - JDK-8205104/PR3539/RH1548475
    - JDK-8185723/PR3553
    - JDK-8186461/PR3557
    - JDK-8201509/PR3579
    - JDK-8075942/PR3602
    - JDK-8203182/PR3603
    - JDK-8206406/PR3610/RH1597825
    - JDK-8206425
    - JDK-8036003
    - JDK-8201495/PR2415
    - JDK-8150954/PR2866/RH1176206
  - Re-generate patches (mostly due to upstream build changes)
    - JDK-8073139/PR1758/RH1191652
    - JDK-8143245/PR3548 (due to JDK-8202600)
    - JDK-8197429/PR3546/RH1536622 (due to JDK-8189170)
    - JDK-8199936/PR3533
    - JDK-8199936/PR3591
    - JDK-8207057/PR3613
    - JDK-8210761/RH1632174 (due to JDK-8207402)
    - PR3559 (due to JDK-8185723/JDK-8186461/JDK-8201509)
    - PR3593 (due to JDK-8081202)
    - RH1566890/CVE-2018-3639 (due to JDK-8189170)
    - RH1649664 (due to JDK-8196516)
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.192.b12-0
changelog:
  - Add port of 8189170 to AArch64 which is missing from upstream 8u version.
  - Resolves: rhbz#1661577


author: Jiri Vanek jvanek@redhat.com - 1:1.8.0.201.b09-2
changelog:
  - Replaced pcsc-lite-devel (which is in optional channel) with pcsc-lite-libs.
  - added rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch to make jdk work with pcsc


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.201.b09-3
changelog:
  - Update patch for RH1566890.
    - Renamed rh1566890_speculative_store_bypass_so_added_more_per_task_speculation_control_CVE_2018_3639 to
      rh1566890-CVE_2018_3639-speculative_store_bypass.patch
    - Added dependent patch,
      rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.201.b13-0
changelog:
  - Update to aarch64-shenandoah-jdk8u201-b13.
  - Drop JDK-8160748 & JDK-8189170 AArch64 patches now applied upstream.
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.202.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u202-b08.
  - Remove patches included upstream
    - JDK-8211387/PR3559
    - JDK-8207057/PR3613
    - JDK-8165852/PR3468
    - JDK-8073139/PR1758/RH1191652
    - JDK-8044235
    - JDK-8172850/RH1640127
    - JDK-8209639/RH1640127
    - JDK-8131048/PR3574/RH1498936
    - JDK-8164920/PR3574/RH1498936
  - Re-generate patches
    - JDK-8210647/RH1632174
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-0
changelog:
  - Update to aarch64-shenandoah-jdk8u212-b02.
  - Remove patches included upstream
    - JDK-8197429/PR3546/RH153662{2,3}
    - JDK-8184309/PR3596
    - JDK-8210647/RH1632174
  - Re-generate patches
    - JDK-8203030
  - Add casts to resolve s390 ambiguity in calls to log2_intptr
  - Resolves: rhbz#1693468


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:1.8.0.222.b03-0.1.ea
changelog:
  - Don't produce javadoc/javadoc-zip sub packages for the debug variant build.
  - Don't perform a bootcycle build for the debug variant build.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-0.1.ea
changelog:
  - Provide Javadoc debug subpackages for now, but populate them from the normal build.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-0.1.ea
changelog:
  - Use normal_suffix for Javadoc zip filename to copy, as there is is no debug version.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b04-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b04.
  - Drop remaining JDK-8210425/RH1632174 patch now AArch64 part is upstream.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b07 and Shenandoah merge 2019-06-13.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b08-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b08.
  - Adjust PR3083/RH134640 to apply after JDK-8182999
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b09-0
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b09.
  - Switch to GA mode for final release.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b01-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b01.
  - Switch to EA mode.
  - Drop JDK-8210761/RH1632174 as now upstream.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b05.
  - Drop upstreamed patch JDK-8141570/PR3548.
  - Adjust context of JDK-8143245/PR3548 to apply against upstream JDK-8141570.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b05-shenandoah-merge-2019-09-09.
  - Update version logic to handle -shenandoah* tag suffix.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-0
changelog:
  - Update to aarch64-shenandoah-jdk8u232-b09.
  - Switch to GA mode for final release.
  - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Resolves: rhbz#1753423


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-1
changelog:
  - Remove CVE-2018-3639 mitigation due to performance regression and
      OpenJDK position on speculative execution vulnerabilities.
      https://mail.openjdk.java.net/pipermail/vuln-announce/2019-July/000002.html
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b01-0.1.ea
changelog:
  - Revert SSBD removal for now, until appropriate messaging has been decided.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b05.
  - Attempt to fix Shenandoah formatting failures on S390, introduced by JDK-8232102.
  - Revise b05 snapshot to include JDK-8236178.
  - Add additional Shenandoah formatting fixes revealed by successful -Wno-error=format run
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b07-0
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b07.
  - Switch to GA mode for final release.
  - Remove Shenandoah S390 patch which is now included upstream as JDK-8236829.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b08.
  - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-3
changelog:
  - Mark net.properties as a config file (based on Fedora patch by James Cassell)
  - Resolves: rhbz#1710928


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-4
changelog:
  - Update generate_source_tarball.sh script to use the PR3756 patch and retain the secp256k1 curve.
  - Regenerate source tarball using the updated script and add the -'4curve' suffix.
  - Resolves: rhbz#1746874


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:1.8.0.232.b09-5
changelog:
  - Replace JDK-8231991 backport with upstream version and include JDK-8234107 fixup.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.242.b08-1
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b08.
  - Remove local copies of JDK-8031111 & JDK-8132111 as replaced by upstream versions.
  - Fix paths in jdk8231991-mouse_wheel_focus.patch after git apply --stat complaints.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b03-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u252-b03.
  - Adjust PR2974/RH1337583 & PR3083/RH1346460 following context changes in JDK-8230978
  - Resolves: rhbz#1810557


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.252.b09-0
changelog:
  - Update to aarch64-shenandoah-jdk8u242-b09.
  - Switch to GA mode for final release.
  - Resolves: rhbz#1810557


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b06-0.1.ea
changelog:
  - Sync SystemTap & desktop files with upstream IcedTea release 3.15.0, removing previous workarounds
  - Sync stapinstall handling with RHEL 8 implementation
  - Need to support noarch for creating source RPMs for non-scratch builds.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b07.
  - Require tzdata 2020a so system tzdata matches resource updates in b07
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b09.
  - With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b10.
  - Switch to GA mode for final release.
  - Update release notes for 8u262 release.
  - Fix typo in jfr_arches which leads to ppc64 being wrongly excluded.
  - Split JDK-8042159 patch into per-repo patches as upstream.
  - Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b07-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b07.
  - Drop JDK-8243541 backport now applied upstream.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.4.ea
changelog:
  - With JDK-8248399 fixed, a broken jfr binary is no longer installed on architectures without JFR.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b09-0.5.ea
changelog:
  - Restructure the build so a minimal initial build is then used for the final build (with docs)
  - This reduces pressure on the system JDK and ensures the JDK being built can do a full build
  - Introduce jfr_arches for architectures which support JFR.
  - Introduce sa_arches for architectures which support the serviceability agent.
  - Introduce share_arches for architectures which support class sharing (-Xshare:dump).
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.262.b10-1
changelog:
  - Update to aarch64-shenandoah-jdk8u262-b10.
  - Switch to GA mode for final release.
  - Update release notes for 8u262 release.
  - Split JDK-8042159 patch into per-repo patches as upstream.
  - Update JDK-8042159 JDK patch to apply after JDK-8238002 changes to Awt2dLibraries.gmk
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.265.b01-0
changelog:
  - Update to aarch64-shenandoah-jdk8u265-b01.
  - Update release notes for 8u265 release.
  - Resolves: rhbz#1860456


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.265.b01-1
changelog:
  - ASSEMBLY_EXCEPTION LICENSE THIRD_PARTY_README moved to fully versioned dirs
  - Resolves: rhbz#1861222


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b05-shenandoah-merge-2020-08-28.
  - Add additional s390 log2_intptr case in shenandoahUtils.cpp introduced by JDK-8245464
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b05-0.2.ea
changelog:
  - Enable JFR on x86, now we have JDK-8252096: Shenandoah: adjust SerialPageShiftCount for x86_32 and JFR
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b06-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b06.
  - Update tarball generation script to use PR3799, following inclusion of JDK-8245468 (TLSv1.3)
  - Resolves: rhbz#1876665


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.272.b09-0.1.ea
changelog:
  - Set vendor property and vendor URLs
  - Made URLs to be preconfigured by OS
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b09-0.1.ea
changelog:
  - Include a test in the RPM to check the build has the correct vendor information.
  - Use 'oj_' prefix on new vendor globals to avoid a conflict with RPM's vendor value.
  - Improve quoting of vendor name
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u272-b10.
  - Switch to GA mode for final release.
  - Update release notes for 8u272 release.
  - Add backport of JDK-8254177 to update to tzdata 2020b
  - Require tzdata 2020b due to resource changes in JDK-8254177
  - Delay tzdata 2020b dependency until tzdata update has shipped.
  - Adjust JDK-8062808/PR3548 following constantPool.hpp context change in JDK-8243302
  - Adjust PR3593 following g1StringDedupTable.cpp context change in JDK-8240124 & JDK-8244955
  - This tarball is embargoed until 2020-10-20 @ 1pm PT.
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.272.b10-1
changelog:
  - Add backport of JDK-8215727: "Restore JFR thread sampler loop to old / previous behaviour"
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.275.b01-0
changelog:
  - Update to aarch64-shenandoah-jdk8u275-b01 (GA)
  - Update release notes for 8u275.
  - Resolves: rhbz#1895062


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.282.b01-0.1.ea
changelog:
  - Added patch600: rh1750419-redhat_alt_java.patch
  - Replaced alt-java placeholder with real patched alt-java
  - Removed patch529: rh1566890-CVE_2018_3639-speculative_store_bypass.patch
  - Removed patch531: rh1566890-CVE_2018_3639-speculative_store_bypass_toggle.patch
  - Both surpassed by new patch
  - Resolves: rhbz#1901690


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b01-0.1.ea
changelog:
  - Extend RH1750419 alt-java fix to include external debuginfo, following JDK-8252395 in 8u282-b01
  - Resolves: rhbz#1901690


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b02-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b02 (EA)
  - Update release notes for 8u282-b02.
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b03-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b03 (EA)
  - Update release notes for 8u282-b03.
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b04-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b04 (EA)
  - Update release notes for 8u282-b04.
  - Remove upstreamed patch PR3519
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b05-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b05 (EA)
  - Update release notes for 8u282-b05 and make some minor corrections.
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b06-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b06 (EA)
  - Update release notes for 8u282-b06.
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b07 (EA)
  - Update release notes for 8u282-b07.
  - Fix placement issue in release notes, caught by comparing with vanilla version.
  - Resolves: rhbz#1903903


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.282.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u282-b08 (GA)
  - Update release notes for 8u282-b08.
  - This tarball is embargoed until 2021-01-19 @ 1pm PT.
  - Resolves: rhbz#1908963


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b04-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b04 (EA)
  - Update release notes for 8u292-b04.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b05 (EA)
  - Update release notes for 8u292-b05.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.1.ea
changelog:
  - Re-organise S/390 patches for upstream submission, separating 8u upstream from Shenandoah fixes.
  - Add new formatting case found in memprofiler.cpp on debug builds to PR3593 patch.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b05-0.2.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b05-shenandoah-merge-2021-03-11 (EA)
  - Update release notes for 8u292-b05-shenandoah-merge-2021-03-11.
  - Extend s390 patch to fix issue caused by JDK-8252660 backport and lack of JDK-8188813 in 8u.
  - Revise JDK-8252660 s390 failure to make _soft_max_size a jlong so pointer types are accurate.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b06-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b06 (EA)
  - Update release notes for 8u292-b06.
  - Require tzdata 2020f due to JDK-8259048
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b07 (EA)
  - Update release notes for 8u292-b07.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b08-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b08 (EA)
  - Update release notes for 8u292-b08.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b09-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b09 (EA)
  - Update release notes for 8u292-b09.
  - Resolves: rhbz#1938081


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.292.b10-0
changelog:
  - Update to aarch64-shenandoah-jdk8u292-b10 (GA)
  - Update release notes for 8u292-b10.
  - This tarball is embargoed until 2021-04-20 @ 1pm PT.
  - Resolves: rhbz#1938201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b01-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b01 (EA)
  - Update release notes for 8u302-b01.
  - Switch to EA mode.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b02-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b02 (EA)
  - Update release notes for 8u302-b02.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b03 (EA)
  - Update release notes for 8u302-b03.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b03-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b03-shenandoah-merge-2021-06-23 (EA)
  - Update release notes for 8u302-b03-shenandoah-merge-2021-06-23.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b04-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b04 (EA)
  - Update release notes for 8u302-b04.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b05-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b05 (EA)
  - Update release notes for 8u302-b05.
  - Remove JDK-8266929/RH1960024 as now upstream.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b06-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b06 (EA)
  - Update release notes for 8u302-b06.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b07-0.0.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b07 (EA)
  - Update release notes for 8u302-b07.
  - Resolves: rhbz#1967809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.302.b08-0
changelog:
  - Update to aarch64-shenandoah-jdk8u302-b08 (EA)
  - Update release notes for 8u302-b08.
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-07-20 @ 1pm PT.
  - Resolves: rhbz#1972395


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b01-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b01 (EA)
  - Update release notes for 8u312-b01.
  - Switch to EA mode.
  - Remove "-clean" suffix as no 8u312 builds are unclean.
  - Related: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b02-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b02 (EA)
  - Update release notes for 8u312-b02.
  - Related: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b03-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b03 (EA)
  - Update release notes for 8u312-b03.
  - Related: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b04-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b04 (EA)
  - Update release notes for 8u312-b04.
  - Related: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b05 (EA)
  - Update release notes for 8u312-b05.
  - Related: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.2.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b05-shenandoah-merge-2021-10-07
  - Update release notes for 8u312-b05-shenandoah-merge-2021-10-07.
  - Resolves: rhbz#1999735


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b05-0.3.ea
changelog:
  - Add patch to improve performance of common separators in Scanner.useLocale
  - Move alt-java patch to correct section.
  - Resolves: rhbz#1862929


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.312.b07-1
changelog:
  - Update to aarch64-shenandoah-jdk8u312-b07 (EA)
  - Update release notes for 8u312-b07.
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-10-19 @ 1pm PT.
  - Resolves: rhbz#2011826


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b04-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b04 (EA)
  - Update release notes for 8u322-b04.
  - Require tzdata 2021c as of JDK-8274407.
  - Switch to EA mode.
  - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
  - Related: rhbz#2022809


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b06 (EA)
  - Update release notes for 8u322-b06.
  - Switch to GA mode for final release.
  - Require tzdata 2021e as of JDK-8275766.
  - Update tarball generation script to use git following shenandoah-jdk8u's move to github
  - Resolves: rhbz#2039366


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b01-0.1.ea
changelog:
  - Update to shenandoah-jdk8u332-b01 (EA)
  - Update release notes for shenandoah-8u332-b01.
  - Switch to EA mode.
  - Related: rhbz#2047529


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b06-0.1.ea
changelog:
  - Update to shenandoah-jdk8u332-b06 (EA)
  - Update release notes for shenandoah-8u332-b06.
  - Resolves: rhbz#2047529


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-1
changelog:
  - Update to shenandoah-jdk8u332-b09 (GA)
  - Update release notes for 8u332-b09.
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2022-04-19 @ 1pm PT.
  - Resolves: rhbz#2073422


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-1
changelog:
  - Update to shenandoah-jdk8u342-b07
  - Update release notes for shenandoah-8u342-b07.
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Remove redundant "REPOS" variable from tarball script
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Rebase JDK-8186464 patch so it applies after JDK-8190753
  - Resolves: rhbz#2106502


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-1
changelog:
  - Update to shenandoah-jdk8u345-b01 (GA)
  - Update release notes for 8u345-b01.
  - Resolves: rhbz#2112383


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-1
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - * This tarball is embargoed until 2022-10-18 @ 1pm PT. *
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2
changelog:
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Add test to ensure timezones can be translated
  - Related: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.1.ea
changelog:
  - Update to shenandoah-jdk8u362-b07 (EA)
  - Update release notes for shenandoah-8u362-b07.
  - Switch to EA mode for 8u362 pre-release builds.
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150191


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-1
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Fix broken links and missing release notes in older releases.
  - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
    - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
    - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
    - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.372.b07-1
changelog:
  - Update to shenandoah-jdk8u372-b07 (GA)
  - Update release notes for shenandoah-8u372-b07.
  - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2159458


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b01-0.1.ea
changelog:
  - Update to shenandoah-jdk8u382-b01 (EA)
  - Update release notes for shenandoah-8u382-b01.
  - Switch to EA mode.
  - Remove JDK-8271199 patch which is now upstream.
  - Related: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b04-0.1.ea
changelog:
  - Update to shenandoah-jdk8u382-b04 (EA)
  - Update release notes for shenandoah-8u382-b04.
  - Related: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1
changelog:
  - Update to shenandoah-jdk8u372-b05 (GA)
  - Update release notes for shenandoah-8u372-b05.
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-1
changelog:
  - Update to shenandoah-jdk8u382-b05 (GA)
  - Update release notes for shenandoah-8u382-b05.
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2221106


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.392.b08-1
changelog:
  - For non debug subpackages, ghosted all alternatives (rhbz1649776)
  - For non system JDKs, if-outed versionless provides.
  - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
  - Related: RHEL-11319


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-1
changelog:
  - Update to shenandoah-jdk8u392-b08 (GA)
  - Update release notes for shenandoah-8u392-b08.
  - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Regenerate PR2462 patch following JDK-8315135
  - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
  - Add missing JFR alternative ghost
  - Move jcmd to the headless package
  - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
  - Resolves: RHEL-12212
  - Resolves: RHEL-13574
  - Resolves: RHEL-13575
  - Resolves: RHEL-13576
  - Resolves: RHEL-11319
  - Resolves: RHEL-13577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-3
changelog:
  - Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
  - Resolves: RHEL-19630


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b01-0.1.ea
changelog:
  - Update to shenandoah-jdk8u402-b01 (EA)
  - Update release notes for shenandoah-8u402-b01.
  - Switch to EA mode.
  - Sync NEWS with vanilla branch version.
  - Related: RHEL-17914


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.1.ea
changelog:
  - Update to shenandoah-jdk8u402-b06 (GA)
  - Update release notes for shenandoah-8u402-b06.
  - Drop local copy of JDK-8312489 which is now included upstream
  - Switch to GA mode.
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-17914
  - Resolves: RHEL-20965


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.ea
changelog:
  - Update to shenandoah-jdk8u412-b01 (EA)
  - Update release notes for shenandoah-8u412-b01.
  - Switch to EA mode.
  - Related: RHEL-30926


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.1.ea
changelog:
  - Invoke xz in multi-threaded mode
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
  - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
  - Use backward-compatible patch syntax
  - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
  - generate_source_tarball.sh: Remove trailing period in echo
  - generate_source_tarball.sh: Use long-style argument to grep
  - generate_source_tarball.sh: Add license
  - generate_source_tarball.sh: Add indentation instructions for Emacs
  - Remove -T0 argument from systemtap tar invocation
  - Related: RHEL-30926


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.ea
changelog:
  - Turn off xz multi-threading on i686 as it fails with an out of memory error
  - Normalise whitespace
  - Move to upstream tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources
  - generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity
  - generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork
  - generate_source_tarball.sh: Adapt version logic to work with 8u
  - generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086)
  - generate_source_tarball.sh: Update examples in header for clarity
  - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
  - generate_source_tarball.sh: Only add --depth=1 on non-local repositories
  - Move maintenance scripts to a scripts subdirectory
  - icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository
  - jconsole.desktop.in: Restored by running icedtea_sync.sh
  - policytool.desktop.in: Likewise.
  - Restore IcedTea sources correctly in spec file
  - discover_trees.sh: Set compile-command and indentation instructions for Emacs
  - discover_trees.sh: shellcheck: Do not use -o (SC2166)
  - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: Add authorship
  - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
  - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
  - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: Set compile-command and indentation instructions for Emacs
  - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
  - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
  - generate_source_tarball.sh: Handle an existing checkout
  - generate_source_tarball.sh: Sync indentation with java-21-openjdk version
  - generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS
  - Related: RHEL-30926


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.ea
changelog:
  - Update to shenandoah-jdk8u412-b07 (EA)
  - Update release notes for shenandoah-8u412-b07.
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - Resolves: RHEL-30926


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1
changelog:
  - Update to shenandoah-jdk8u412-b08 (GA)
  - Update release notes for shenandoah-8u412-b08.
  - Complete release note for Certainly roots
  - Switch to GA mode.
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Related: RHEL-30926


author: Sourav Sharma <sourav.ss.sharma@oracle.com> - 1:1.8.0.412.b08-1.0.1
changelog:
  - Fixes openjdk below given CVE issues
  - CVE-2024-21131 Improve-UTF8-String-supports
  - CVE-2024-21138 Better-symbol-storage
  - Fixes bad immediate dominator info openjdk bug8262017
  - Fixes malformed control flow openjdk bug8303466
  - CVE-2024-21140 Improved-loop-handling
  - CVE-2024-21144 Enhance-Pack-200-loading
  - CVE-2024-21145 Improve-2D-image-handling
  - CVE-2024-21147 Improve-array-management


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.212.b02-1
changelog:
  - Add missing part of JDK-8213419 for AArch64 removing duplicate uabs definitions
  - Yet another cast to resolve s390 ambiguity in call to log2_intptr
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b01-1
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b01.
  - Refactor PR2888 after inclusion of 8129988 upstream. Now includes PR3575.
  - Drop 8171000, 8197546 & PR3634 as applied upstream.
  - Adjust 8214206 fix for S390 as BinaryMagnitudeSeq moved to shenandoahNumberSeq.cpp
  - Resolves: rhbz#1705328


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b02-1
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b02.
  - Drop 8064786/PR3599 & 8210416/RH1632174 as applied upstream (8064786 silently in 8176100).
  - Resolves: rhbz#1705328


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1
changelog:
  - Update to aarch64-shenandoah-jdk8u222-b03.
  - Set milestone to "ea" as this is not the final release.
  - Drop 8210425 patches applied upstream. Still need to add AArch64 version in aarch64/shenandoah-jdk8u.
  - Re-generate JDK-8141570 & JDK-8143245 patches due to 8210425 zeroshark.make changes.
  - Resolves: rhbz#1705328


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.222.b03-1
changelog:
  - Handle milestone as variables so we can alter it easily and set the docs zip filename appropriately.
  - Drop unused use_shenandoah_hotspot variable.
  - Resolves: rhbz#1705328


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.28-5
changelog:
  - Add patch, RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch,
    so as to disable dsin/dcos math intrinsics on aarch64. Work-around for
    JDK-8210461.
  - Resolves: rhbz#1570856


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.28-6
changelog:
  - Add patch, RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch,
    so as to disable log math intrinsic on aarch64. Work-around for
    JDK-8210858
  - Resolves: rhbz#1570856


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.ea.28-8
changelog:
  - removed version less provides
  - javadocdir moved to arched dir as it is no longer noarch
  - Resolves: rhbz#1570856


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.28-9
changelog:
  - Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
    RHBZ-1624122.
  - Add patch, JDK-8210416-RHBZ-1632174-fdlibm-opt-fix.patch, so as to
    optimize compilation of fdlibm library.
  - Add patch, JDK-8210425-RHBZ-1632174-sharedRuntimeTrig-opt-fix.patch, so
    as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
  - Add patch, JDK-8210647-RHBZ-1632174-libsaproc-opt-fix.patch, so as to
    optimize compilation of libsaproc (extra c flags won't override
    optimization).
  - Add patch, JDK-8210761-RHBZ-1632174-libjsig-opt-fix.patch, so as to
    optimize compilation of libjsig.
  - Add patch, JDK-8210703-RHBZ-1632174-vmStructs-opt-fix.patch, so as to
    optimize compilation of vmStructs.cpp (part of libjvm.so).
  - Reinstate filtering of opt flags coming from redhat-rpm-config.


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.0.28-1
changelog:
  - Identify as GA version and no longer as early access (EA).
  - JDK 11 has been released for GA on 2018-09-25.


author: Andrew John Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.1-0.0.ea
changelog:
  - Update to jdk-11.0.10.0+1
  - Update release notes to 11.0.10.0+1
  - Use JEP-322 Time-Based Versioning so we can handle a future 11.0.9.1-like release correctly.
  - Still use 11.0.x rather than 11.0.x.0 for file naming, as the trailing zero is omitted from tags.
  - Revert configure and built_doc_archive hacks to build 11.0.9.1 from 11.0.9.0 sources, and synced with Fedora version.
  - Cleanup debug package descriptions and version number placement.
  - Switch to EA mode for 11.0.10 pre-release builds.
  - Drop JDK-8222286 & JDK-8254177 as applied upstream
  - Explicitly request bundled Harfbuzz (too risky to change this so late in the RHEL 7 lifecycle)
  - Resolves: rhbz#1903907


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea
changelog:
  - Update to jdk-11.0.10.0+2
  - Update release notes to 11.0.10.0+2
  - Update tarball generation script to use PR3818 which handles JDK-8171279 changes
  - Drop JDK-8250861 as applied upstream.
  - Resolves: rhbz#1903907


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.2-0.0.ea
changelog:
  - Completely revert hacks from previous release, using buildver in configure and tzdata 2020b
  - Resolves: rhbz#1903907


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.5-0.0.ea
changelog:
  - Update to jdk-11.0.10.0+5
  - Update release notes to 11.0.10.0+5
  - Drop JDK-8222527 as applied upstream.
  - Resolves: rhbz#1903907


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.8-0.0.ea
changelog:
  - Update to jdk-11.0.10.0+8
  - Update release notes to 11.0.10.0+8 and add missing JDK-8245051 from b04.
  - Resolves: rhbz#1903907


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.10.0.9-0
changelog:
  - Update to jdk-11.0.10.0+9
  - Update release notes to 11.0.10.0+9
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-01-19 @ 1pm PT.
  - Resolves: rhbz#1908970


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.2-0.1.ea
changelog:
  - Debug builds need to find their documentation from the release build.
  - RHEL 7 builds still include a doc package for debug builds, though debug builds do not build docs.
  - Resolves: rhbz#1930527


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 1:11.0.11.0.3-0.1.ea
changelog:
  - Fix issue where CheckVendor.java test erroneously passes when it should fail.
  - Add proper quoting so '&' is not treated as a special character by the shell.
  - Resolves: rhbz#1938082


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.11.0.9-0
changelog:
  - Update to jdk-11.0.11.0+9
  - Update release notes to 11.0.11.0+9
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-04-20 @ 1pm PT.
  - Resolves: rhbz#1940228


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.1-0.0.ea
changelog:
  - Update to jdk-11.0.12.0+1
  - Update release notes to 11.0.12.0+1
  - Switch to EA mode for 11.0.12 pre-release builds.
  - Update ECC patch following JDK-8226374 (bug ID yet to be confirmed)
  - Remove local JDK-8187450 backport as now included upstream.
  - Resolves: rhbz#1967811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.4-0.0.ea
changelog:
  - Update to jdk-11.0.12.0+4
  - Update release notes to 11.0.12.0+4
  - Correct bug ID JDK-8264846 to intended ID of JDK-8264848
  - Resolves: rhbz#1967811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.6-0.0.ea
changelog:
  - Update to jdk-11.0.12.0+6
  - Update release notes to 11.0.12.0+6
  - Skip 11.0.12.0+5 as 11.0.12.0+6 only adds a test change
  - Resolves: rhbz#1967811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-0
changelog:
  - Update to jdk-11.0.12.0+7
  - Update release notes to 11.0.12.0+7
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-07-20 @ 1pm PT.
  - Resolves: rhbz#1972395


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.12.0.7-3
changelog:
  - Restructure the build so a minimal initial build is then used for the final build (with docs)
  - This reduces pressure on the system JDK and ensures the JDK being built can do a full build
  - Related: rhbz#1999936


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.1-0.1.ea
changelog:
  - Update to jdk-11.0.13.0+1
  - Update release notes to 11.0.13.0+1
  - Update tarball generation script to use git following OpenJDK 11u's move to github
  - Switch to EA mode for 11.0.13 pre-release builds.
  - Remove non-Free test from source tarball.
  - Related: rhbz#1999936


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.13.0.8-1
changelog:
  - Update to jdk-11.0.12.0+8
  - Update release notes to 11.0.12.0+8
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2021-10-19 @ 1pm PT.
  - Resolves: rhbz#2012332


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.0.8-0.1.ea
changelog:
  - Replaced hardcoded 11 by featurever where appropriate
  - Fixed comment of `for slowdebug` to correct `any debug`
  - Related: rhbz#2022810


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.1.ea
changelog:
  - Update to jdk-11.0.14.0+8
  - Update release notes to 11.0.14.0+8
  - Switch to EA mode for 11.0.14 pre-release builds.
  - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
  - Rename blacklisted.certs to blocked.certs following JDK-8253866
  - Resolves: rhbz#2022810


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1
changelog:
  - Update to jdk-11.0.14.0+9
  - Update release notes to 11.0.14.0+9
  - Switch to GA mode for final release.
  - This tarball is embargoed until 2022-01-18 @ 1pm PT.
  - Resolves: rhbz#2039366


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.ea
changelog:
  - Update to jdk-11.0.15.0+1
  - Update release notes to 11.0.15.0+1
  - Switch to EA mode for 11.0.15 pre-release builds.
  - Related: rhbz#2047531


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-1
changelog:
  - Update to jdk-11.0.15.0+9
  - Update release notes to 11.0.15.0+9
  - Switch to GA mode for release
  - ** This tarball is embargoed until 2022-04-19 @ 1pm PT. **
  - Resolves: rhbz#2073422


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.9-2
changelog:
  - Remove security items from release notes that were only in 17u and N/A for 11u
  - Related: rhbz#2073422


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1
changelog:
  - Add additional patch during tarball generation to align tests with ECC changes
  - Related: rhbz#2106510


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1
changelog:
  - Update to jdk-11.0.16+8
  - Update release notes to 11.0.16+8
  - Use same tarball naming style as java-17-openjdk and java-latest-openjdk
  - Drop JDK-8284920 patch now upstreamed
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Make use of the vendor version string to store our version & release rather than an upstream release date
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Resolves: rhbz#2106510


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1
changelog:
  - Update to jdk-11.0.16.1+1
  - Update release notes to 11.0.16.1+1
  - Add patch to provide translations for Europe/Kyiv added in tzdata2022b
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2119512


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.ea
changelog:
  - Update to jdk-11.0.17+1
  - Update release notes to 11.0.17+1
  - Switch to EA mode for 11.0.17 pre-release builds.
  - Related: rhbz#2130373


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.ea
changelog:
  - Include Aleksey's patch for JDK-8291053 to try and get HarfBuzz to build again
  - Related: rhbz#2130373


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.1.ea
changelog:
  - Try to build using system HarfBuzz to avoid build failures with 4.4.1 & gcc 4.8.5
  - Related: rhbz#2130373


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-1
changelog:
  - Update to jdk-11.0.17+8 (GA)
  - Update release notes to 11.0.17+8
  - Switch to GA mode for release
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2
changelog:
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - Remove unneeded JDK-8291053 patch as we no longer build in-tree HarfBuzz
  - Related: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.1.ea
changelog:
  - Update to jdk-11.0.18+1
  - Update release notes to 11.0.18+1
  - Switch to EA mode for 11.0.18 pre-release builds.
  - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
  - Related: rhbz#2150192


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.2.ea
changelog:
  - Update to jdk-11.0.18+9
  - Update release notes to 11.0.18+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150192


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-1
changelog:
  - Update to jdk-11.0.18+10 (GA)
  - Update release notes to 11.0.18+10
  - Switch to GA mode for release
  - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. **
  - Related: rhbz#2150192


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-1
changelog:
  - Update to jdk-11.0.19.0+7
  - Update release notes to 11.0.19.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Rebase RH1750419 alt-java patch against 11.0.19+6
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.28-9
changelog:
  - Rework changes from 1:11.0.ea.22-6. RHBZ#1632174 supercedes
    RHBZ-1624122.
  - Add patch, jdk8210416-rh1632174-compile_fdlibm_with_o2_ffp_contract_off_on_gcc_clang_arches.patch, so as to
    optimize compilation of fdlibm library.
  - Add patch, jdk8210425-rh1632174-sharedRuntimeTrig_sharedRuntimeTrans_compiled_without_optimization.patch, so
    as to optimize compilation of sharedRuntime{Trig,Trans}.cpp
  - Add patch, jdk8210647-rh1632174-libsaproc_is_being_compiled_without_optimization.patch, so as to
    optimize compilation of libsaproc (extra c flags won't override
    optimization).
  - Add patch, jdk8210761-rh1632174-libjsig_is_being_compiled_without_optimization.patch, so as to
    optimize compilation of libjsig.
  - Add patch, jdk8210703-rh1632174-vmStructs_cpp_no_longer_compiled_with_o0, so as to
    optimize compilation of vmStructs.cpp (part of libjvm.so).
  - Reinstate filtering of opt flags coming from redhat-rpm-config.


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.1.13-3
changelog:
  - Use upstream's version of Aarch64 intrinsics disable patch:
    - Removed:
      RHBZ-1628612-JDK-8210461-workaround-disable-aarch64-intrinsic.patch
      RHBZ-1630996-JDK-8210858-workaround-disable-aarch64-intrinsic-log.patch
    - Superceded by:
      jdk8211105-aarch64-disable_cos_sin_and_log_intrinsics.patch


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.1.13-4
changelog:
  - Update to shenandoah-jdk-11.0.1+13-20190101
  - Update tarball generation script in preparation for PR3681/RH1656677 SunEC changes.
  - Use remove-intree-libraries.sh to remove the remaining SunEC code for now.
  - Fix remove-intree-libraries.sh to not exit early and skip SunEC handling.
  - Fix PR1983 SunEC patch so that ecc_impl.h is patched rather than added
  - Add missing RH1022017 patch to reduce curves reported by SSL to those we support.
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.2.7-0
changelog:
  - Update to shenandoah-jdk-11.0.2+7 (January 2019 CPU)
  - Make tagsuffix optional and comment it out while unused.
  - Drop JDK-8211105/RH1628612/RH1630996 applied upstream.
  - Drop JDK-8209639/RH1640127 applied upstream.
  - Re-generate JDK-8210416/RH1632174 following JDK-8209786
  - Resolves: rhbz#1661577


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.1-0.1.ea
changelog:
  - Update to jdk-11.0.20+1 (EA)
  - Update release notes to 11.0.20+1
  - Switch to EA mode
  - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
  - Add missing Swing release note
  - Related: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1
changelog:
  - Update to jdk-11.0.20.0+8 (GA)
  - Update release notes to 11.0.20.0+8
  - Switch to GA mode for release
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1
changelog:
  - Update to jdk-11.0.20.1+1 (GA)
  - Update release notes to 11.0.20.1+1
  - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
  - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Synchronise runtime and buildtime tzdata requirements
  - Update README.md to match the version in later RHEL releases
  - Resolves: rhbz#2236229


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.21.0.9-1
changelog:
  - For non debug subpackages, ghosted all alternatives (rhbz1649776)
  - For non system JDKs, if-outed versionless provides.
  - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic
  - Related: RHEL-11320


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-1
changelog:
  - Update to jdk-11.0.21+9 (GA)
  - Update release notes to 11.0.21+9
  - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies
  - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Apply all patches using -p1
  - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
  - Add missing JFR alternative ghost
  - Move jcmd to the headless package
  - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
  - Disable the serviceability agent on Zero architectures even when the architecture itself is supported
  - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
  - Resolves: RHEL-12217
  - Resolves: RHEL-12910
  - Resolves: RHEL-12913
  - Resolves: RHEL-11320
  - Resolves: RHEL-13227
  - Resolves: RHEL-13217


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2
changelog:
  - Restore %{epoch}:%{javaver} versioning to jre, java, jre-headless, java-headless, java-devel & java-sdk
  - Resolves: RHEL-19642


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.6-0.1.ea
changelog:
  - Update to jdk-11.0.22+6 (EA)
  - Update release notes to 11.0.22+6
  - Switch to EA mode
  - Drop local copy of JDK-8312489 which is now included upstream
  - Resolves: RHEL-21031


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1
changelog:
  - Update to jdk-11.0.22+7 (GA)
  - Update release notes to 11.0.22+7
  - Switch to GA mode for release
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-20966


author: Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.1-0.1.ea
changelog:
  - Update to jdk-11.0.23+1 (EA)
  - Update release notes to 11.0.23+1
  - Switch to EA mode
  - Speed up PPC build by removing ppc64le --with-jobs=1 workaround


author: Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1
changelog:
  - Update to jdk-11.0.23+9 (GA)
  - Update release notes to 11.0.23+9
  - Switch to GA mode for release
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-30914


author: Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-2
changelog:
  - Fix 11.0.22 release date in NEWS
  - Restore ppc64le --with-jobs=1 workaround to avoid flaky ppc builds


author: Sourav Sharma <sourav.ss.sharma@oracle.com> - 1:11.0.23.0.9-2.0.3
changelog:
  - Fixes below CVE's
  - CVE-2024-21131 Improve-UTF8-String-supports
  - CVE-2024-21138 Better-symbol-storage
  - Fixes malformed control flow openjdk bug8303466 
  - CVE-2024-21140 Improved-loop-handling
  - CVE-2024-21144 Enhance-Pack-200-loading
  - CVE-2024-21145 Improve-2D-image-handling
  - CVE-2024-21147 Improve-array-management


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.3.6-0
changelog:
  - Update to shenandoah-jdk-11.0.3+6 (April 2019 EA)
  - Drop JDK-8210416/RH1632174 applied upstream.
  - Drop JDK-8210425/RH1632174 applied upstream.
  - Drop JDK-8210647/RH1632174 applied upstream.
  - Drop JDK-8210761/RH1632174 applied upstream.
  - Drop JDK-8210703/RH1632174 applied upstream.
  - Add cast to resolve s390 ambiguity in call to log2_intptr
  - Resolves: rhbz#1693468


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.4.11-0
changelog:
  - Update to shenandoah-jdk-11.0.4+11 (GA)
  - Switch to GA mode for final release.
  - Resolves: rhbz#1724452


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.5.1-0.0.ea
changelog:
  - Update to shenandoah-jdk-11.0.5+1 (EA)
  - Switch to EA mode for 11.0.5 pre-release builds.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.5.10-0
changelog:
  - Update to shenandoah-jdk-11.0.5+10 (GA)
  - Switch to GA mode for final release.
  - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream.
  - Resolves: rhbz#1753423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.6.1-0.1.ea
changelog:
  - Update to shenandoah-jdk-11.0.6+1 (EA)
  - Switch to EA mode for 11.0.6 pre-release builds.
  - Add support for jfr binary.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.6.10-0
changelog:
  - Update to shenandoah-jdk-11.0.6+10 (GA)
  - Switch to GA mode for final release.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.6.10-3
changelog:
  - Add JDK-8237396 backport to resolve Shenandoah TCK breakage in traversal mode.
  - Resolves: rhbz#1785753


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.7.10-0
changelog:
  - Update to shenandoah-jdk-11.0.7+10 (GA)
  - Switch to GA mode for final release.
  - Resolves: rhbz#1810557


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.4-0.0.ea
changelog:
  - Update to shenandoah-jdk-11.0.8+4 (EA)
  - Require tzdata 2020a due to resource changes in JDK-8243541
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.7-0.1.ea
changelog:
  - java-11-openjdk doesn't have a JRE tree, so don't try and copy alt-java there...
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.9-0.0.ea
changelog:
  - Update to shenandoah-jdk-11.0.8+9 (EA)
  - Update release notes for 11.0.8 release.
  - This tarball is embargoed until 2020-07-14 @ 1pm PT.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.8.10-0
changelog:
  - Update to shenandoah-jdk-11.0.8+10 (GA)
  - Switch to GA mode for final release.
  - Update release notes with last minute fix (JDK-8248505).
  - This tarball is embargoed until 2020-07-14 @ 1pm PT.
  - Resolves: rhbz#1838811


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.8.5-0.2.ea
changelog:
  - Disable stripping of debug symbols for static libraries part of
    the -static-libs sub-package.
  - Resolves: rhbz#1838811


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.8-0.0.ea
changelog:
  - Update to jdk-11.0.9+8 (EA)
  - Remove JDK-8252258/RH1868406 now applied upstream.
  - Resolves: rhbz#1876665


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.10-0.1.ea
changelog:
  - Set vendor property and vendor URLs
  - Made URLs to be preconfigured by OS
  - Moved vendor_version_string to a better place
  - Resolves: rhbz#1876665


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-0
changelog:
  - Update to jdk-11.0.9+11
  - Update release notes for 11.0.9 release.
  - Add backport of JDK-8254177 to update to tzdata 2020b
  - Require tzdata 2020b due to resource changes in JDK-8254177
  - This tarball is embargoed until 2020-10-20 @ 1pm PT.
  - Resolves: rhbz#1876665


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.9.11-1
changelog:
  - Move all license files to NVR-specific JVM directory.
  - This bad placement was killing parallel installability and thus having a bad impact on leapp, if used.
  - Resolves: rhbz#1896609


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.9.11-1
changelog:
  - Update to jdk-11.0.9.1+1
  - RPM version stays at 11.0.9.11 so as to not break upgrade path.
  - Adds a single patch for JDK-8250861.
  - Resolves: rhbz#1895275


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.9.11-2
changelog:
  - Add backport of JDk-8222537 so the Host header is sent when using proxies.
  - Resolves: rhbz#1869530


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:11.0.ea.22-8
changelog:
  - Adjust system NSS patch, RHBZ-1565658-system-nss-SunEC.patch, so
    as to filter -Wl,--as-needed from linker flags. Fixes FTBFS issue.
  - Resolves: rhbz#1570856


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.ea.28-2
changelog:
  - jfr/*jfc files listed for all arches
  - lib/classlist do not exists s390, ifarch-ed via jit_arches out
  - specfile slightly improved to allow srpm rebuild on rhel8/fedoras
  - Resolves: rhbz#1570856


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.2.7-4
changelog:
  - Replace pcsc-lite-devel with pcsc-lite-libs so deps can be resolved without optional repository
  - Add JDK-8009550/RH910107 patch so OpenJDK checks for libpcsclite.so.1 (in pcsc-lite-libs)
  - Add missing ISA to cups-libs requirement
  - Remove duplicate lksctp-tools requirement
  - Resolves: rhbz#1684617


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.3.6-1
changelog:
  - Update to shenandoah-jdk-11.0.3+6 (April 2019 EA)
  - Drop JDK-8210416/RH1632174 applied upstream.
  - Drop JDK-8210425/RH1632174 applied upstream.
  - Drop JDK-8210647/RH1632174 applied upstream.
  - Drop JDK-8210761/RH1632174 applied upstream.
  - Drop JDK-8210703/RH1632174 applied upstream.
  - Resolves: rhbz#1677516


author: Jaromir Capik <jcapik@redhat.com> 0:5.0-6
changelog:
  - Fixing #835786 - javacc: Invalid upstream URL
  - Minor spec file changes according to the latest guidelines


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 3.3.1-2
changelog:
  - Remove workaround for guice-no_aop
  - Remove fedora-review subpackage
  - Resolves: rhbz#1016667
  - Related: rhbz#1015158


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 0:1.1.3-7
changelog:
  - Remove unneeded dependency from POM: maven-cobertura-plugin
  - Remove unneeded dependency from POM: maven-findbugs-plugin
  - Resolves: rhbz#880692


author: Jiri Popelka <jpopelka@redhat.com> - 2.0-5
changelog:
  - Moving from rpmfusion-free to Fedora because it will be free of known patents
    in all countries from 2012-04-04 onwards
  - Changed license from GPL to GPLv2+ and included up-to-date license file


author: Pierre-Yves Chibon <pingou@pingoured.fr> - 0.7-1
changelog:
  - Update to 0.7
  - Fix BR to not require maven2
  - Fix BR for new package name
  - Adjust spec to new guidelines


author: Michal Srb <msrb@redhat.com> - 9.0.3-4
changelog:
  - Add missing BR: maven-plugin-build-helper
  - Add MIT license text
  - Don't install CDDL license
  - More specific explanation why tests are disabled


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 9.0.3-6
changelog:
  - Clean unused conditional code
  - Remove unused system-related code
  - Remove jetty binary package
  - Install license files with jetty-util package


author: Stanislav Ochotnicky <sochotnicky@redhat.com> - 1.0-3
changelog:
  - Change remote-resources version compare from > to >=
  - Removed generation of javadocs (wasn't working anyway)


author: Chris Spike <spike@fedoraproject.org> 2.1-1.tzdata2012g
changelog:
  - Updated to 2.1
  - New tzdata (2012g)
  - Updated spec file according to latest java packaging guidelines


author: Pavel Alexeev <Pahan@Hubbitus.info> - 1:1.8.5-11
changelog:
  - Thanks to Ville Skyttä (bz#875343) build against libedit instead of readline
  	what simplify licensing apparently without any loss of functionality


author: Michal Srb <msrb@redhat.com> - 0-0.14.20090319svn
changelog:
  - Install license file with javadoc subpackage (Resolves: rhbz#975411)
  - Add file containing link to CC-BY license text


author: Juan Hernandez <juan.hernandez@redhat.com> 1.1.1-1
changelog:
  - Adapted (mostly copied, in fact) from the corresponding package from Mageia
    (http://www.mageia.org) with support from Gil Cattaneo <puntogil@libero.it>.


author: Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-4
changelog:
  - Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
  - Updated build requirements for NSPR
  - Updated build and runtime requirements for NSS
  - ## 'jss-post-rebase.patch' resolves the following issues ported from
    - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
    code for RFC5272+ (cfu)
  - Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
  - Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
    class. (edewata)
  - Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
  - Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
  - Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
    (edewata)
  - Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
  - Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
  - Mozilla Bugzilla #1350130 - Missing
    CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)


author: Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-5
changelog:
  - Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
    idm-console-framework < 1.1.17-4
  - Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files


author: Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-6
changelog:
  - Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
    release tag (mharmsen)
  - Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
    exporting EncryptedPrivateKeyInfo (ftweedal)
  - Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
    (ftweedal)


author: Matthew Harmsen <mharmsen@redhat.com> - 4.4.0-7
changelog:
  - Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
    Mozilla Bugzilla #1360207 - Fix incorrect if (ss->...) in SSL_ReconfigFD


author: Dogtag Team <pki-devel@redhat.com> 4.4.0-8
changelog:
  - Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
    (jmagne)
  - Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
    [RHEL-7.4.z] (ftweedal)
  - Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
    export fails [rhel-7.4.z] (ftweedal)


author: Dogtag Team <pki-devel@redhat.com> 4.4.0-9
changelog:
  - Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
    FIPSMODE [rhel-7.4.z] (jmagne)


author: Dogtag Team <pki-devel@redhat.com> 4.4.0-10
changelog:
  - Bugzilla #1506710 - JSS throws ObjectNotFoundException without message
    (edewata)
  - Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
    producing signatures (especially for EC) (cfu,dstutzman)


author: Dogtag Team <pki-devel@redhat.com> 4.4.0-11
changelog:
  - Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
    producing signatures (especially for EC) (cfu,dstutzman)
  - Bugzilla #1533667 - Add: standard algorithm names for all ECC signature
    types (cfu,dstutzman)
  - Bugzilla #1534761 - SignerInfo class inserts wrong version # into the
    resulting structure (cfu,dstutzman)


author: Dogtag Team <pki-devel@redhat.com> 4.4.2-12
changelog:
  - Bugzilla #1579202 - JSS has wrong encoding for ecdsa with sha*
    AlgorithmIdentifier [rhel-7.5.z] (cfu)


author: Dogtag Team <pki-devel@redhat.com> 4.4.2-13
changelog:
  - Bugzilla #1595759 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
    decode/encode process alters original data [rhel-7.5.z] (cfu)
  - Bugzilla #1596552 - JSS: Add support for TLS_*_SHA384 ciphers
    [rhel-7.5.z] (cfu)


author: Christina Fu <cfu@redhat.com> - 4.2.6-42
changelog:
  - Sync up patches from both Fedora and RHEL; adding two patches
    (cfu, edewata, mharmsen) from RHEL:
  - Bugzilla Bug #1238450 - UnsatisfiedLinkError on Windows (cfu)
  - make it compile on Windows platforms (cfu for nhosoi)


author: Elio Maldonado <emaldona@redhat.com> - 4.4.0-1
changelog:
  - Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
  - ## JSS 4.4.0 includes the following patches ported from downstream:
  - Mozilla Bugzilla #507536 - Add IPv6 functionality to JSS
  - Mozilla Bugzilla #1307872 - Expose NSS calls for OCSP settings
  - Mozilla Bugzilla #1307882 - RFE ecc - add ecc curve name support in JSS and
    CS interface
  - Mozilla Bugzilla #1307993 - Expose updated certificate verification function
    in JSS
  - Mozilla Bugzilla #1308000 - Incorrect socket accept error message due to bad
    pointer arithmetic
  - Mozilla Bugzilla #1308001 - Verification should fail when a revoked
    certificate is added
  - Mozilla Bugzilla #1308004 - Warnings should be cleaned up in JSS build
  - Mozilla Bugzilla #1308006 - DRM failed to recovery keys when in FIPS mode
    (HSM + NSS)
  - Mozilla Bugzilla #1308008 - Defects revealed by Coverity scan
  - Mozilla Bugzilla #1308009 - Add support for PKCS5v2; support for secure PKCS12
  - Mozilla Bugzilla #1308012 - DRM: during archiving and recovering, wrapping
    unwrapping keys should be done in the token
  - Mozilla Bugzilla #1308013 - JSS - HSM token name was mistaken for
    manufacturer identifier
  - Mozilla Bugzilla #1308017 - Un-deprecate previously deprecated methods in
    JSS 4.2.6
  - Mozilla Bugzilla #1308019 - Provide Tomcat support for TLS v1.1 and
    TLS v1.2 via NSS through JSS
  - Mozilla Bugzilla #1308026 - JSS certificate validation does not pass up exact
    error from NSS
  - Mozilla Bugzilla #1308027 - Merge pki-symkey into jss
  - Mozilla Bugzilla #1308029 - Resolve Javadoc build issues
  - Mozilla Bugzilla #1308047 - support ECC encryption key archival and recovery
  - Mozilla Bugzilla #1313122 - Remove bypass tests as latest NSS has removed
    PKCS#11 bypass support
  - Mozilla Bugzilla #1328675 - Simple problem unwrapping AES sym keys on token
  - Mozilla Bugzilla #1345174 - Cannot create system certs when using LunaSA HSM
    in FIPS Mode and ECC algorithms
  - Mozilla Bugzilla #1345613 - expose AES KeyWrap and add some useful OID
    functions
  - Mozilla Bugzilla #1346410 - Load JSS libraries appropriately
  - ## JSS 4.4.0 includes the following changes for building and testing:
  - Mozilla Bugzilla #1331765 - Simplify JSS Makefile build and test
  - Mozilla Bugzilla #1346420 - Document steps required to use the proper
    libjss4.so when running certain HMAC Algorithms tests


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.4-3
changelog:
  - Bugzilla #1534772 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
    decode/encode process alters original data (cfu)
  - Bugzilla #1554056 - JSS: Add support for TLS_*_SHA384 ciphers (cfu)


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.4-4
changelog:
  - Bugzilla #1671244 - x25519 allowed in FIPS mode [rhel-7.6.z] (ascheel)
  - Bugzilla #1671247 - CC: Enable AIA OCSP cert checking for entire cert
    chain [rhel-7.6.z] (jmagne)


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.4-5
changelog:
  - Bugzilla #1671247 - CC: Enable AIA OCSP cert checking for entire cert
    chain [rhel-7.6.z] (jmagne)


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.6-2
changelog:
  - Bugzilla #1747966 - CVE 2019-14823 jss: OCSP policy "Leaf and Chain" implicitly trusts the root certificate


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.7-2
changelog:
  - Bugzilla #1747967 - CVE 2019-14823 jss: OCSP policy "Leaf and Chain" implicitly trusts the root certificate


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.7-3
changelog:
  - Bugzilla #1710105 - JSS: add RSA PSS support (jmagne)
  - Bugzilla #1796642 - JSS -- remove hardcoded native library
    /usr/lib{64}/jss/libjss4.so (ascheel)


author: Dogtag PKI Team <pki-devel@redhat.com> 4.4.9-4
changelog:
  - Updated nspr-devel and nss-devel build requirements as well as nss runtime
    requirements [mharmsen]
  - RHEL-18401 - JSS - add AES support for TMS server-side keygen on latest
    HSM / FIPS environment [RHEL 7.9.z] [jmagne]
  - JSS: add RSA PSS support
    Add PSS cases to algorithm name translating method [jmagne]
  - Add GitLab synchronization job [edewata]
  - Add AES support for TMS server-side keygen on latest
    HSM / FIPS environment [RHCS 9.7.z]
    Back port AES KWP wrap alg support only for JSS in this branch to allow for
    the TMS bug referenced above to work. [jmagne]
  - Empty commit to fix commit msg from previous commit
    JSS- add AES support for TMS server-side keygen on latest HSM / FIPS
    environment [RHCS 9.7.z]
    Back port AES KWP wrap alg support only for JSS in this branch to allow for
    the TMS bug referenced above to work. [jmagne]
  - RHEL-23935 - JSS - PrettyPrintCert does not properly translate AIA
    information into a readable format [RHEL 7.9.z] [mfargett]
  - Fix AIA extension print
    The "Authority Info Access" extension was not included in the oid
    extension  map so it was not correctly printed.
    This add AIA extension to the oid map. [mfargett]
  - Fix SIA extension
    The "Subject Info Access" extension was not included in the oid
    extension  map so it was not correctly printed.
    This add SIA extension to the oid map. [mfargett]


author: Chris Spike <chris.spike@arcor.de> 2:1.0-0.8.20100930svn1125
changelog:
  - Updated to latest upstream svn revision
  - Installed pom.xml
  - Added 'net.sf.jtidy:jtidy' to maven depmap
  - Added 'jtidy:jtidy' to maven depmap


author: Michal Srb <msrb@redhat.com> - 0:4.11-7
changelog:
  - Drop "-SNAPSHOT" from version ID
  - See: https://lists.fedoraproject.org/pipermail/java-devel/2013-August/004923.html


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 4.11-9
changelog:
  - Update to current packaging guidelines
  - Drop old Obsoletes/Provides for junit4 rename
  - Disable test which fails with Java 8


author: Jan Grulich <jgrulich@redhat.com> 0.9.0.8-2
changelog:
  - remove mobile-broadband-mobile-provider-devel as BR
  - add ModemManager as runtime dependency
  - add mobile-broadband-mobile-provider as runtime dependency


author: Jan Grulich <jgrulich@redhat.com> - 4.10.5-10
changelog:
  - Avoid duplicates in solid device automounter kcm
    Resolves: bz#1084191
  - Enable automount overrides even when automatic mounting is disabled
    Resolves: bz#1084497


author: Jan Grulich <jgrulich@redhat.com> - 19-23.9
changelog:
  - Check if we have write access to home directory before creating default folders
    Resolves: bz#1579764


author: Jan Grulich <jgrulich@redhat.com> - 19-23.11
changelog:
  - Do not fail when HOME is defined as multiwords
    Resolves: bz#1786089

  - Do not fail when prelink is not installed or disabled
    Resolves: bz#1732607


author: Jan Grulich <jgrulich@redhat.com> - 19-23.11
changelog:
  - Do not fail when prelink is not installed or disabled (fixed syntax
    error in previous patch)
    Resolves: bz#1732607


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-8
changelog:
  - Powerdevil: do not notify about a non existent action
    Resolves: bz#1289149
  - Plasma taskmanager: close context menu when task is closed
    Resolves: bz#1262603


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-10
changelog:
  - Fix grouping of tasks in taskmanager applet
    Resolves: bz#1348917
  - Fix unlocking of kscreenlocker, unlock it just once
    Resolves: bz#1333441


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-13
changelog:
  - Sanitise notification HTML
    Resolves: bz#1568853

  - Increase cpu buffer size in ksysguard
    Resolves: bz#1611762


author: Jan Grulich <jgrulich@redhat.com> - 4.11.19-14
changelog:
  - Do not show disabled buttons in Plastik decoration theme
    Resolves: bz#1677641

  - Taskmanager: dismiss group when application is closed and there is enough space
    Resolve: bz#1698048


author: Daniel Vrátil <dvratil@redhat.com> - 4.10.5-21
changelog:
  - Resolves: bz#1090492 - changing calendar settings does not appear in plasmoid until month changed (fixed patch)
  - Resolves: bz#1109936 - incorrect dispaly corner detection with multiple displays (fixed patch)


author: Jan Grulich <jgrulich@redhat.com> - 6:4.14.8-9
changelog:
  - Do not fork konsole process when opening terminal from apps using dolphin-part
    Resolves: bz#1710362


author: Jan Grulich <jgrulich@redhat.com> - 6:4.14.8-6
changelog:
  - KAuth: verify that whoever is calling us is actually who he says he is (CVE-2017-8422)
    Resolves: CVE-2017-8422


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.517.1.el7uek]
changelog:
  - net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo)  [Orabug: 34480752]  {CVE-2022-2588} 
  - Restore "module, async: async_synchronize_full() on module init iff async is used" (Mridula Shastry)  [Orabug: 34469834]  
  - net/rds: Replace #ifdef DEBUG with CONFIG_SLUB_DEBUG (Freddy Carrillo)  [Orabug: 34405766]  
  - ext4: Move to shared i_rwsem even without dioread_nolock mount opt (Ritesh Harjani)  [Orabug: 34295843]  
  - ext4: Start with shared i_rwsem in case of DIO instead of exclusive (Ritesh Harjani)  [Orabug: 34295843]  
  - ext4: further refactoring bufferio and dio helper (Junxiao Bi)  [Orabug: 34295843]  
  - ext4: refactor ext4_file_write_iter (Junxiao Bi)  [Orabug: 34295843]  
  - xen/manage: Use orderly_reboot() to reboot (Ross Lagerwall)  [Orabug: 34211118]  
  - xen/manage: revert "xen/manage: enable C_A_D to force reboot" (Dongli Zhang)  [Orabug: 34211118]  
  - Linux 4.14.288 (Greg Kroah-Hartman)   
  - dmaengine: ti: Add missing put_device in ti_dra7_xbar_route_allocate (Miaoqian Lin)   
  - dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate (Miaoqian Lin)   
  - dmaengine: at_xdma: handle errors of at_xdmac_alloc_desc() correctly (Michael Walle)   
  - ida: don't use BUG_ON() for debugging (Linus Torvalds)   
  - i2c: cadence: Unregister the clk notifier in error path (Satish Nagireddy)   
  - pinctrl: sunxi: a83t: Fix NAND function name for some pins (Samuel Holland)   
  - xfs: remove incorrect ASSERT in xfs_rename (Eric Sandeen)   
  - powerpc/powernv: delay rng platform device creation until later in boot (Jason A. Donenfeld)   
  - video: of_display_timing.h: include errno.h (Hsin-Yi Wang)   
  - fbcon: Disallow setting font bigger than screen size (Helge Deller)   
  - iommu/vt-d: Fix PCI bus rescan device hot add (Yian Chen)   
  - net: rose: fix UAF bug caused by rose_t0timer_expiry (Duoming Zhou)   
  - usbnet: fix memory leak in error case (Oliver Neukum)   
  - can: gs_usb: gs_usb_open/close(): fix memory leak (Rhett Aultman)   
  - can: grcan: grcan_probe(): remove extra of_node_get() (Liang He)   
  - mm/slub: add missing TID updates on slab deactivation (Jann Horn)   
  - esp: limit skb_page_frag_refill use to a single page (Sabrina Dubroca)   
  - Linux 4.14.287 (Greg Kroah-Hartman)   
  - xen/gntdev: Avoid blocking in unmap_grant_pages() (Demi Marie Obenour)   
  - net: usb: qmi_wwan: add Telit 0x1070 composition (Daniele Palmas)   
  - net: usb: qmi_wwan: add Telit 0x1060 composition (Carlo Lobrano)   
  - xen/arm: Fix race in RB-tree based P2M accounting (Oleksandr Tyshchenko)   
  - net: Rename and export copy_skb_header (Ilya Lesokhin)   
  - ipv6/sit: fix ipip6_tunnel_get_prl return value (katrinzhou)   
  - sit: use min (kernel test robot)   
  - hwmon: (ibmaem) don't call platform_device_del() if platform_device_add() fails (Yang Yingliang)   
  - NFC: nxp-nci: Don't issue a zero length i2c_master_read() (Michael Walle)   
  - nfc: nfcmrvl: Fix irq_of_parse_and_map() return value (Krzysztof Kozlowski)   
  - net: bonding: fix use-after-free after 802.3ad slave unbind (Yevhen Orlov)   
  - net: bonding: fix possible NULL deref in rlb code (Eric Dumazet)   
  - netfilter: nft_dynset: restore set element counter when failing to update (Pablo Neira Ayuso)   
  - caif_virtio: fix race between virtio_device_ready() and ndo_open() (Jason Wang)   
  - net: ipv6: unexport __init-annotated seg6_hmac_net_init() (YueHaibing)   
  - usbnet: fix memory allocation in helpers (Oliver Neukum)   
  - RDMA/qedr: Fix reporting QP timeout attribute (Kamal Heib)   
  - net: usb: ax88179_178a: Fix packet receiving (Jose Alonso)   
  - net: rose: fix UAF bugs caused by timer handler (Duoming Zhou)   
  - SUNRPC: Fix READ_PLUS crasher (Chuck Lever)   
  - s390/archrandom: simplify back to earlier design and initialize earlier (Jason A. Donenfeld)   
  - dm raid: fix KASAN warning in raid5_add_disks (Mikulas Patocka)   
  - dm raid: fix accesses beyond end of raid member array (Heinz Mauelshagen)   
  - nvdimm: Fix badblocks clear off-by-one error (Chris Ye)   
  - Linux 4.14.286 (Greg Kroah-Hartman)   
  - swiotlb: skip swiotlb_bounce when orig_addr is zero (Liu Shixin)   
  - kexec_file: drop weak attribute from arch_kexec_apply_relocations[_add] (Naveen N. Rao)   
  - fdt: Update CRC check for rng-seed (Hsin-Yi Wang)   
  - xen: unexport __init-annotated xen_xlate_map_ballooned_pages() (Masahiro Yamada)   
  - drm: remove drm_fb_helper_modinit (Christoph Hellwig)   
  - powerpc/pseries: wire up rng during setup_arch() (Jason A. Donenfeld)   
  - modpost: fix section mismatch check for exported init/exit sections (Masahiro Yamada)   
  - ARM: cns3xxx: Fix refcount leak in cns3xxx_init (Miaoqian Lin)   
  - ARM: Fix refcount leak in axxia_boot_secondary (Miaoqian Lin)   
  - ARM: exynos: Fix refcount leak in exynos_map_pmu (Miaoqian Lin)   
  - ARM: dts: imx6qdl: correct PU regulator ramp delay (Lucas Stach)   
  - powerpc/powernv: wire up rng during setup_arch (Jason A. Donenfeld)   
  - powerpc/rtas: Allow ibm,platform-dump RTAS call with null buffer address (Andrew Donnellan)   
  - powerpc: Enable execve syscall exit tracepoint (Naveen N. Rao)   
  - xtensa: Fix refcount leak bug in time.c (Liang He)   
  - xtensa: xtfpga: Fix refcount leak bug in setup (Liang He)   
  - iio: adc: axp288: Override TS pin bias current for some models (Hans de Goede)   
  - iio: trigger: sysfs: fix use-after-free on remove (Vincent Whitchurch)   
  - iio: gyro: mpu3050: Fix the error handling in mpu3050_power_up() (Zheyu Ma)   
  - iio: accel: mma8452: ignore the return value of reset operation (Haibo Chen)   
  - iio:accel:bma180: rearrange iio trigger get and register (Dmitry Rokosov)   
  - usb: chipidea: udc: check request status before setting device address (Xu Yang)   
  - iio: adc: vf610: fix conversion mode sysfs node name (Baruch Siach)   
  - igb: Make DMA faster when CPU is active on the PCIe link (Kai-Heng Feng)   
  - MIPS: Remove repetitive increase irq_err_count (huhai)   
  - x86/xen: Remove undefined behavior in setup_features() (Julien Grall)   
  - bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers (Jay Vosburgh)   
  - USB: serial: option: add Quectel RM500K module support (Macpaul Lin)   
  - USB: serial: option: add Quectel EM05-G modem (Yonglin Tan)   
  - USB: serial: option: add Telit LE910Cx 0x1250 composition (Carlo Lobrano)   
  - random: quiet urandom warning ratelimit suppression message (Jason A. Donenfeld)   
  - dm era: commit metadata in postsuspend after worker stops (Nikos Tsironis)   
  - ata: libata: add qc->flags in ata_qc_complete_template tracepoint (Edward Wu)   
  - random: schedule mix_interrupt_randomness() less often (Jason A. Donenfeld)   
  - vt: drop old FONT ioctls (Jiri Slaby)   
  - Linux 4.14.285 (Greg Kroah-Hartman)   
  - tcp: drop the hash_32() part from the index calculation (Willy Tarreau)   
  - tcp: increase source port perturb table to 2^16 (Willy Tarreau) [Orabug: 34247937] {CVE-2022-32296}
  - tcp: dynamically allocate the perturb table used by source ports (Willy Tarreau)   
  - tcp: add small random increments to the source port (Willy Tarreau)   
  - tcp: use different parts of the port_offset for index and offset (Willy Tarreau)   
  - tcp: add some entropy in __inet_hash_connect() (Eric Dumazet)   
  - xprtrdma: fix incorrect header size calculations (Colin Ian King)   
  - usb: gadget: u_ether: fix regression in setting fixed MAC address (Marian Postevca)   
  - s390/mm: use non-quiescing sske for KVM switch to keyed guest (Christian Borntraeger)   
  - virtio-pci: Remove wrong address verification in vp_del_vqs() (Murilo Opsfelder Araujo)   
  - ext4: add reserved GDT blocks check (Zhang Yi)   
  - ext4: make variable "count" signed (Ding Xiang)   
  - ext4: fix bug_on ext4_mb_use_inode_pa (Baokun Li)   
  - serial: 8250: Store to lsr_save_flags after lsr read (Ilpo Järvinen)   
  - usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe (Miaoqian Lin)   
  - usb: dwc2: Fix memory leak in dwc2_hcd_init (Miaoqian Lin)   
  - USB: serial: io_ti: add Agilent E5805A support (Robert Eckelmann)   
  - USB: serial: option: add support for Cinterion MV31 with new baseline (Slark Xiao)   
  - comedi: vmk80xx: fix expression for tx buffer size (Ian Abbott)   
  - irqchip/gic/realview: Fix refcount leak in realview_gic_of_init (Miaoqian Lin)   
  - certs/blacklist_hashes.c: fix const confusion in certs blacklist (Masahiro Yamada)   
  - arm64: ftrace: fix branch range checks (Mark Rutland)   
  - net: bgmac: Fix an erroneous kfree() in bgmac_remove() (Christophe JAILLET)   
  - misc: atmel-ssc: Fix IRQ check in ssc_probe (Miaoqian Lin)   
  - tty: goldfish: Fix free_irq() on remove (Vincent Whitchurch)   
  - i40e: Fix call trace in setup_tx_descriptors (Aleksandr Loktionov)   
  - pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE (Trond Myklebust)   
  - random: credit cpu and bootloader seeds by default (Jason A. Donenfeld)   
  - net: ethernet: mtk_eth_soc: fix misuse of mem alloc interface netdev[napi]_alloc_frag (Chen Lin)   
  - ipv6: Fix signed integer overflow in l2tp_ip6_sendmsg (Wang Yufen)   
  - nfc: nfcmrvl: Fix memory leak in nfcmrvl_play_deferred (Xiaohui Zhang)   
  - virtio-mmio: fix missing put_device() when vm_cmdline_parent registration failed (chengkaitao)   
  - scsi: pmcraid: Fix missing resource cleanup in error case (Chengguang Xu)   
  - scsi: ipr: Fix missing/incorrect resource cleanup in error case (Chengguang Xu)   
  - scsi: lpfc: Fix port stuck in bypassed state after LIP in PT2PT topology (James Smart)   
  - scsi: vmw_pvscsi: Expand vcpuHint to 16 bits (Wentao Wang)   
  - ASoC: wm8962: Fix suspend while playing music (Adam Ford)   
  - ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() (Sergey Shtylyov)   
  - ASoC: cs42l56: Correct typo in minimum level for SX volume controls (Charles Keepax)   
  - ASoC: cs42l52: Correct TLV for Bypass Volume (Charles Keepax)   
  - ASoC: cs53l30: Correct number of volume levels on SX controls (Charles Keepax)   
  - ASoC: cs42l52: Fix TLV scales for mixer controls (Charles Keepax)   
  - random: account for arch randomness in bits (Jason A. Donenfeld)   
  - random: mark bootloader randomness code as __init (Jason A. Donenfeld)   
  - random: avoid checking crng_ready() twice in random_init() (Jason A. Donenfeld)   
  - crypto: drbg - make reseeding from get_random_bytes() synchronous (Nicolai Stange)   
  - crypto: drbg - always try to free Jitter RNG instance (Stephan Müller)   
  - crypto: drbg - move dynamic ->reseed_threshold adjustments to __drbg_seed() (Nicolai Stange)   
  - crypto: drbg - track whether DRBG was seeded with !rng_is_initialized() (Nicolai Stange)   
  - crypto: drbg - prepare for more fine-grained tracking of seeding state (Nicolai Stange)   
  - crypto: drbg - always seeded with SP800-90B compliant noise source (Stephan Müller)   
  - crypto: drbg - add FIPS 140-2 CTRNG for noise source (Stephan Mueller)   
  - Revert "random: use static branch for crng_ready()" (Jason A. Donenfeld)   
  - random: check for signals after page of pool writes (Jason A. Donenfeld)   
  - random: wire up fops->splice_{read,write}_iter() (Jens Axboe)   
  - random: convert to using fops->write_iter() (Jens Axboe)   
  - random: move randomize_page() into mm where it belongs (Jason A. Donenfeld)   
  - random: move initialization functions out of hot pages (Jason A. Donenfeld)   
  - random: use proper jiffies comparison macro (Jason A. Donenfeld)   
  - random: use symbolic constants for crng_init states (Jason A. Donenfeld)   
  - siphash: use one source of truth for siphash permutations (Jason A. Donenfeld)   
  - random: help compiler out with fast_mix() by using simpler arguments (Jason A. Donenfeld)   
  - random: do not use input pool from hard IRQs (Saeed Mirzamohammadi)   
  - random: order timer entropy functions below interrupt functions (Jason A. Donenfeld)   
  - random: do not pretend to handle premature next security model (Jason A. Donenfeld)   
  - random: do not use batches when !crng_ready() (Jason A. Donenfeld)   
  - random: insist on random_get_entropy() existing in order to simplify (Jason A. Donenfeld)   
  - xtensa: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld)   
  - sparc: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld)   
  - um: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld)   
  - x86/tsc: Use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld)   
  - nios2: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld)   
  - arm: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld)   
  - mips: use fallback for random_get_entropy() instead of just c0 random (Jason A. Donenfeld)   
  - m68k: use fallback for random_get_entropy() instead of zero (Jason A. Donenfeld)   
  - timekeeping: Add raw clock fallback for random_get_entropy() (Jason A. Donenfeld)   
  - powerpc: define get_cycles macro for arch-override (Jason A. Donenfeld)   
  - alpha: define get_cycles macro for arch-override (Jason A. Donenfeld)   
  - parisc: define get_cycles macro for arch-override (Jason A. Donenfeld)   
  - s390: define get_cycles macro for arch-override (Jason A. Donenfeld)   
  - ia64: define get_cycles macro for arch-override (Jason A. Donenfeld)   
  - init: call time_init() before rand_initialize() (Jason A. Donenfeld)   
  - random: fix sysctl documentation nits (Jason A. Donenfeld)   
  - random: document crng_fast_key_erasure() destination possibility (Jason A. Donenfeld)   
  - random: make random_get_entropy() return an unsigned long (Jason A. Donenfeld)   
  - random: check for signals every PAGE_SIZE chunk of /dev/[u]random (Jason A. Donenfeld)   
  - random: check for signal_pending() outside of need_resched() check (Jann Horn)   
  - random: do not allow user to keep crng key around on stack (Jason A. Donenfeld)   
  - random: do not split fast init input in add_hwgenerator_randomness() (Jan Varho)   
  - random: mix build-time latent entropy into pool at init (Jason A. Donenfeld)   
  - random: re-add removed comment about get_random_{u32,u64} reseeding (Jason A. Donenfeld)   
  - random: treat bootloader trust toggle the same way as cpu trust toggle (Jason A. Donenfeld)   
  - random: skip fast_init if hwrng provides large chunk of entropy (Jason A. Donenfeld)   
  - random: check for signal and try earlier when generating entropy (Jason A. Donenfeld)   
  - random: reseed more often immediately after booting (Jason A. Donenfeld)   
  - random: make consistent usage of crng_ready() (Jason A. Donenfeld)   
  - random: use SipHash as interrupt entropy accumulator (Jason A. Donenfeld)   
  - random: replace custom notifier chain with standard one (Jason A. Donenfeld)   
  - random: don't let 644 read-only sysctls be written to (Jason A. Donenfeld)   
  - random: give sysctl_random_min_urandom_seed a more sensible value (Jason A. Donenfeld)   
  - random: do crng pre-init loading in worker rather than irq (Jason A. Donenfeld)   
  - random: unify cycles_t and jiffies usage and types (Jason A. Donenfeld)   
  - random: cleanup UUID handling (Jason A. Donenfeld)   
  - random: only wake up writers after zap if threshold was passed (Jason A. Donenfeld)   
  - random: round-robin registers as ulong, not u32 (Jason A. Donenfeld)   
  - random: pull add_hwgenerator_randomness() declaration into random.h (Jason A. Donenfeld)   
  - random: check for crng_init == 0 in add_device_randomness() (Jason A. Donenfeld)   
  - random: unify early init crng load accounting (Jason A. Donenfeld)   
  - random: do not take pool spinlock at boot (Jason A. Donenfeld)   
  - random: defer fast pool mixing to worker (Jason A. Donenfeld)   
  - random: rewrite header introductory comment (Jason A. Donenfeld)   
  - random: group sysctl functions (Jason A. Donenfeld)   
  - random: group userspace read/write functions (Jason A. Donenfeld)   
  - random: group entropy collection functions (Jason A. Donenfeld)   
  - random: group entropy extraction functions (Jason A. Donenfeld)   
  - random: remove useless header comment (Jason A. Donenfeld)   
  - random: introduce drain_entropy() helper to declutter crng_reseed() (Jason A. Donenfeld)   
  - random: deobfuscate irq u32/u64 contributions (Jason A. Donenfeld)   
  - random: add proper SPDX header (Jason A. Donenfeld)   
  - random: remove unused tracepoints (Jason A. Donenfeld)   
  - random: remove ifdef'd out interrupt bench (Jason A. Donenfeld)   
  - random: tie batched entropy generation to base_crng generation (Jason A. Donenfeld)   
  - random: zero buffer after reading entropy from userspace (Jason A. Donenfeld)   
  - random: remove outdated INT_MAX >> 6 check in urandom_read() (Jason A. Donenfeld)   
  - random: use hash function for crng_slow_load() (Jason A. Donenfeld)   
  - random: absorb fast pool into input pool after fast load (Jason A. Donenfeld)   
  - random: do not xor RDRAND when writing into /dev/random (Jason A. Donenfeld)   
  - random: ensure early RDSEED goes through mixer on init (Jason A. Donenfeld)   
  - random: inline leaves of rand_initialize() (Jason A. Donenfeld)   
  - random: use RDSEED instead of RDRAND in entropy extraction (Jason A. Donenfeld)   
  - random: fix locking in crng_fast_load() (Dominik Brodowski)   
  - random: remove batched entropy locking (Jason A. Donenfeld)   
  - random: remove use_input_pool parameter from crng_reseed() (Eric Biggers)   
  - random: make credit_entropy_bits() always safe (Jason A. Donenfeld)   
  - random: always wake up entropy writers after extraction (Jason A. Donenfeld)   
  - random: use linear min-entropy accumulation crediting (Jason A. Donenfeld)   
  - random: simplify entropy debiting (Jason A. Donenfeld)   
  - random: use computational hash for entropy extraction (Jason A. Donenfeld)   
  - random: only call crng_finalize_init() for primary_crng (Dominik Brodowski)   
  - random: access primary_pool directly rather than through pointer (Dominik Brodowski)   
  - random: continually use hwgenerator randomness (Dominik Brodowski)   
  - random: simplify arithmetic function flow in account() (Jason A. Donenfeld)   
  - random: access input_pool_data directly rather than through pointer (Jason A. Donenfeld)   
  - random: cleanup fractional entropy shift constants (Jason A. Donenfeld)   
  - random: prepend remaining pool constants with POOL_ (Jason A. Donenfeld)   
  - random: de-duplicate INPUT_POOL constants (Jason A. Donenfeld)   
  - random: remove unused OUTPUT_POOL constants (Jason A. Donenfeld)   
  - random: rather than entropy_store abstraction, use global (Jason A. Donenfeld)   
  - random: try to actively add entropy rather than passively wait for it (Linus Torvalds)   
  - random: remove unused extract_entropy() reserved argument (Jason A. Donenfeld)   
  - random: remove incomplete last_data logic (Jason A. Donenfeld)   
  - random: cleanup integer types (Jason A. Donenfeld)   
  - crypto: chacha20 - Fix chacha20_block() keystream alignment (again) (Eric Biggers)   
  - random: cleanup poolinfo abstraction (Jason A. Donenfeld)   
  - random: fix typo in comments (Schspa Shi)   
  - random: don't reset crng_init_cnt on urandom_read() (Jann Horn)   
  - random: avoid superfluous call to RDRAND in CRNG extraction (Jason A. Donenfeld)   
  - random: early initialization of ChaCha constants (Dominik Brodowski)   
  - random: initialize ChaCha20 constants with correct endianness (Eric Biggers)   
  - random: use IS_ENABLED(CONFIG_NUMA) instead of ifdefs (Jason A. Donenfeld)   
  - random: harmonize "crng init done" messages (Dominik Brodowski)   
  - random: mix bootloader randomness into pool (Jason A. Donenfeld)   
  - random: do not re-init if crng_reseed completes before primary init (Jason A. Donenfeld)   
  - random: do not sign extend bytes for rotation when mixing (Jason A. Donenfeld)   
  - random: use BLAKE2s instead of SHA1 in extraction (Jason A. Donenfeld)   
  - random: remove unused irq_flags argument from add_interrupt_randomness() (Saeed Mirzamohammadi)   
  - random: document add_hwgenerator_randomness() with other input functions (Mark Brown)   
  - crypto: blake2s - adjust include guard naming (Eric Biggers)   
  - crypto: blake2s - include <linux/bug.h> instead of <asm/bug.h> (Eric Biggers)   
  - MAINTAINERS: co-maintain random.c (Jason A. Donenfeld)   
  - random: remove dead code left over from blocking pool (Eric Biggers)   
  - random: avoid arch_get_random_seed_long() when collecting IRQ randomness (Ard Biesheuvel)   
  - random: add arch_get_random_*long_early() (Mark Rutland)   
  - powerpc: Use bool in archrandom.h (Richard Henderson)   
  - linux/random.h: Mark CONFIG_ARCH_RANDOM functions __must_check (Richard Henderson)   
  - linux/random.h: Use false with bool (Richard Henderson)   
  - linux/random.h: Remove arch_has_random, arch_has_random_seed (Richard Henderson)   
  - s390: Remove arch_has_random, arch_has_random_seed (Richard Henderson)   
  - powerpc: Remove arch_has_random, arch_has_random_seed (Richard Henderson)   
  - x86: Remove arch_has_random, arch_has_random_seed (Richard Henderson)   
  - random: avoid warnings for !CONFIG_NUMA builds (Mark Rutland)   
  - random: split primary/secondary crng init paths (Mark Rutland)   
  - random: remove some dead code of poolinfo (Yangtao Li)   
  - random: fix typo in add_timer_randomness() (Yangtao Li)   
  - random: Add and use pr_fmt() (Yangtao Li)   
  - random: convert to ENTROPY_BITS for better code readability (Yangtao Li)   
  - random: remove unnecessary unlikely() (Yangtao Li)   
  - random: remove kernel.random.read_wakeup_threshold (Andy Lutomirski)   
  - random: delete code to pull data into pools (Andy Lutomirski)   
  - random: remove the blocking pool (Andy Lutomirski)   
  - random: fix crash on multiple early calls to add_bootloader_randomness() (Dominik Brodowski)   
  - char/random: silence a lockdep splat with printk() (Sergey Senozhatsky)   
  - random: make /dev/random be almost like /dev/urandom (Andy Lutomirski)   
  - random: ignore GRND_RANDOM in getentropy(2) (Andy Lutomirski)   
  - random: add GRND_INSECURE to return best-effort non-cryptographic bytes (Andy Lutomirski)   
  - random: Add a urandom_read_nowait() for random APIs that don't warn (Andy Lutomirski)   
  - random: Don't wake crng_init_wait when crng_init == 1 (Andy Lutomirski)   
  - lib/crypto: sha1: re-roll loops to reduce code size (Jason A. Donenfeld)   
  - lib/crypto: blake2s: move hmac construction into wireguard (Jason A. Donenfeld)   
  - crypto: blake2s - generic C library implementation and selftest (Jason A. Donenfeld)   
  - crypto: Deduplicate le32_to_cpu_array() and cpu_to_le32_array() (Andy Shevchenko)   
  - Revert "hwrng: core - Freeze khwrng thread during suspend" (Herbert Xu)   
  - char/random: Add a newline at the end of the file (Borislav Petkov)   
  - random: Use wait_event_freezable() in add_hwgenerator_randomness() (Stephen Boyd)   
  - fdt: add support for rng-seed (Hsin-Yi Wang)   
  - random: Support freezable kthreads in add_hwgenerator_randomness() (Stephen Boyd)   
  - random: fix soft lockup when trying to read from an uninitialized blocking pool (Theodore Ts'o)   
  - latent_entropy: avoid build error when plugin cflags are not set (Vasily Gorbik)   
  - random: document get_random_int() family (George Spelvin)   
  - random: move rand_initialize() earlier (Kees Cook)   
  - random: only read from /dev/random after its pool has received 128 bits (Theodore Ts'o)   
  - drivers/char/random.c: make primary_crng static (Rasmus Villemoes)   
  - drivers/char/random.c: remove unused stuct poolinfo::poolbits (Rasmus Villemoes)   
  - drivers/char/random.c: constify poolinfo_table (Rasmus Villemoes)   
  - random: make CPU trust a boot parameter (Kees Cook)   
  - random: Make crng state queryable (Jason A. Donenfeld)   
  - random: remove preempt disabled region (Ingo Molnar)   
  - random: add a config option to trust the CPU's hwrng (Theodore Ts'o)   
  - random: Return nbytes filled from hw RNG (Tobin C. Harding)   
  - random: Fix whitespace pre random-bytes work (Tobin C. Harding)   
  - drivers/char/random.c: remove unused dont_count_entropy (Rasmus Villemoes)   
  - random: optimize add_interrupt_randomness (Andi Kleen)   
  - random: always fill buffer in get_random_bytes_wait (Jason A. Donenfeld)   
  - crypto: chacha20 - Fix keystream alignment for chacha20_block() (Eric Biggers)   
  - 9p: missing chunk of "fs/9p: Don't update file type when updating file attributes" (Al Viro)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.517.2.el7uek]
changelog:
  - kernfs: Replace global kernfs_open_file_mutex with hashed mutexes. (Imran Khan)  [Orabug: 34476942]  
  - kernfs: Introduce interface to access global kernfs_open_file_mutex. (Imran Khan)  [Orabug: 34476942]  
  - kernfs: make ->attr.open RCU protected. (Imran Khan)  [Orabug: 34476942]  
  - kernfs: Rename kernfs_put_open_node to kernfs_unlink_open_file. (Imran Khan)  [Orabug: 34476942]  
  - kernfs: Remove reference counting for kernfs_open_node. (Imran Khan)  [Orabug: 34476942]  
  - rds/ib: handle posted ACK during connection shutdown (Rohit Nair)  [Orabug: 34465810]  
  - rds/ib: reap tx completions during connection shutdown (Rohit Nair)  [Orabug: 34465810]  
  - scsi: target: Fix WRITE_SAME No Data Buffer crash (Mike Christie)  [Orabug: 34419972]  {CVE-2022-21546} 
  - rds/rdma: destroy CQs during user initiated rds connection resets (Rohit Nair)  [Orabug: 34414240]  
  - rds: copy_from_user only once per rds_sendmsg system call (Hans Westgaard Ry)  [Orabug: 34510858]  {CVE-2022-21385}


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.518.0.el7uek]
changelog:
  - lockdown: also lock down previous kgdb use (Daniel Thompson)  [Orabug: 34543517]  {CVE-2022-21499} 
  - Revert "debug: Lock down kgdb" (Alok Tiwari)  [Orabug: 34543517]  
  - vmcoreinfo: add kallsyms_num_syms symbol (Stephen Brennan)  [Orabug: 34475880]  
  - vmcoreinfo: include kallsyms symbols (Stephen Brennan)  [Orabug: 34475880]  
  - kallsyms: move declarations to internal header (Stephen Brennan)  [Orabug: 34475880]  
  - mpt3sas: avoid SOFT_RESET on shutdown (John Donnelly)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Update driver version to 39.100.00.00 (Suganath Prabu S)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Use firmware recommended queue depth (Suganath Prabu S)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Transition IOC to Ready state during shutdown (Sreekanth Reddy)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Fix fall-through warnings for Clang (Gustavo A. R. Silva)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Handle firmware faults during first half of IOC init (Suganath Prabu S)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Fix deadlock while cancelling the running firmware event (Suganath Prabu S)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Documentation cleanup (Randy Dunlap)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Fix timeouts observed while reenabling IRQ (Sreekanth Reddy)  [Orabug: 34408138]  
  - scsi: mpt3sas: Fix two kernel-doc headers (Bart Van Assche)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Fix out-of-bounds warnings in _ctl_addnl_diag_query (Gustavo A. R. Silva)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Fix endianness for ActiveCablePowerRequirement (Sreekanth Reddy)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Only one vSES is present even when IOC has multi vSES (Sreekanth Reddy)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Fix a typo (Bhaskar Chowdhury)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Fix a few kernel-doc issues (Lee Jones)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Force reply post buffer allocations to be within same 4 GB region (Suganath Prabu S)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Force reply buffer allocations to be within same 4 GB region (Suganath Prabu S)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Force sense buffer allocations to be within same 4 GB region (Suganath Prabu S)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Force chain buffer allocations to be within same 4 GB region (Suganath Prabu S)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region (Suganath Prabu S)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Replace unnecessary dynamic allocation with a static one (Gustavo A. R. Silva)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Do not use GFP_KERNEL in atomic context (Christophe JAILLET)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Fix some kernel-doc misnaming issues (Lee Jones)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Fix a couple of misdocumented functions/params (Lee Jones)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Fix a bunch of potential naming doc-rot (Lee Jones)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Move a little data from the stack onto the heap (Lee Jones)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Fix misspelling of _base_put_smid_default_atomic() (Lee Jones)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Additional diagnostic buffer query interface (Suganath Prabu S)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Fix ReplyPostFree pool allocation (Sreekanth Reddy)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Simplify bool comparison (YANG LI)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Fix spelling mistake in Kconfig "compatiblity" -> "compatibility" (Suganath Prabu S)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Signedness bug in _base_get_diag_triggers() (Dan Carpenter)  [Orabug: 33666018] [Orabug: 34408138]  
  - scsi: mpt3sas: Block PCI config access from userspace during reset (Sreekanth Reddy)  [Orabug: 34408138]  
  - Linux 4.14.290 (Greg Kroah-Hartman)   
  - PCI: hv: Fix interrupt mapping for multi-MSI (Jeffrey Hugo)   
  - PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Jeffrey Hugo)   
  - PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Jeffrey Hugo)   
  - PCI: hv: Fix multi-MSI to allow more than one MSI vector (Jeffrey Hugo)   
  - net: usb: ax88179_178a needs FLAG_SEND_ZLP (Jose Alonso)   
  - tty: use new tty_insert_flip_string_and_push_buffer() in pty_write() (Jiri Slaby)   
  - tty: extract tty_flip_buffer_commit() from tty_flip_buffer_push() (Jiri Slaby)   
  - tty: drop tty_schedule_flip() (Jiri Slaby)   
  - tty: the rest, stop using tty_schedule_flip() (Jiri Slaby)   
  - tty: drivers/tty/, stop using tty_schedule_flip() (Jiri Slaby)   
  - Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks (Luiz Augusto von Dentz)   
  - Bluetooth: SCO: Fix sco_send_frame returning skb->len (Luiz Augusto von Dentz)   
  - Bluetooth: Fix passing NULL to PTR_ERR (Luiz Augusto von Dentz)   
  - Bluetooth: RFCOMM: Replace use of memcpy_from_msg with bt_skb_sendmmsg (Luiz Augusto von Dentz)   
  - Bluetooth: SCO: Replace use of memcpy_from_msg with bt_skb_sendmsg (Luiz Augusto von Dentz)   
  - Bluetooth: Add bt_skb_sendmmsg helper (Luiz Augusto von Dentz)   
  - Bluetooth: Add bt_skb_sendmsg helper (Luiz Augusto von Dentz)   
  - ALSA: memalloc: Align buffer allocations in page size (Takashi Iwai)   
  - tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator (Xiaomeng Tong)   
  - drm/tilcdc: Remove obsolete crtc_mode_valid() hack (Jyri Sarha)   
  - bpf: Make sure mac_header was set before using it (Eric Dumazet)   
  - mm/mempolicy: fix uninit-value in mpol_rebind_policy() (Wang Cheng)   
  - Revert "Revert "char/random: silence a lockdep splat with printk()"" (Jason A. Donenfeld)   
  - be2net: Fix buffer overflow in be_get_module_eeprom (Hristo Venev)   
  - tcp: Fix a data-race around sysctl_tcp_notsent_lowat. (Kuniyuki Iwashima)   
  - igmp: Fix a data-race around sysctl_igmp_max_memberships. (Kuniyuki Iwashima)   
  - igmp: Fix data-races around sysctl_igmp_llm_reports. (Kuniyuki Iwashima)   
  - net: stmmac: fix dma queue left shift overflow issue (Junxiao Chang)   
  - i2c: cadence: Change large transfer count reset logic to be unconditional (Robert Hancock)   
  - tcp: Fix a data-race around sysctl_tcp_probe_interval. (Kuniyuki Iwashima)   
  - tcp: Fix a data-race around sysctl_tcp_probe_threshold. (Kuniyuki Iwashima)   
  - tcp/dccp: Fix a data-race around sysctl_tcp_fwmark_accept. (Kuniyuki Iwashima)   
  - ip: Fix a data-race around sysctl_fwmark_reflect. (Kuniyuki Iwashima)   
  - perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() (Peter Zijlstra)   
  - power/reset: arm-versatile: Fix refcount leak in versatile_reboot_probe (Miaoqian Lin)   
  - xfrm: xfrm_policy: fix a possible double xfrm_pols_put() in xfrm_bundle_lookup() (Hangyu Hua)   
  - xen/gntdev: Ignore failure to unmap INVALID_GRANT_HANDLE (Demi Marie Obenour)   
  - Linux 4.14.289 (Greg Kroah-Hartman)   
  - can: m_can: m_can_tx_handler(): fix use after free of skb (Marc Kleine-Budde)   
  - mm: invalidate hwpoison page cache page in fault path (Rik van Riel)   
  - serial: 8250: fix return error code in serial8250_request_std_resource() (Yi Yang)   
  - tty: serial: samsung_tty: set dma burst_size to 1 (Chanho Park)   
  - usb: dwc3: gadget: Fix event pending check (Thinh Nguyen)   
  - USB: serial: ftdi_sio: add Belimo device ids (Lucien Buchmann)   
  - signal handling: don't use BUG_ON() for debugging (Linus Torvalds)   
  - x86: Clear .brk area at early boot (Juergen Gross)   
  - irqchip: or1k-pic: Undefine mask_ack for level triggered hardware (Stafford Horne)   
  - ASoC: wm5110: Fix DRE control (Charles Keepax)   
  - ASoC: ops: Fix off by one in range control validation (Mark Brown)   
  - net: sfp: fix memory leak in sfp_probe() (Jianglei Nie)   
  - NFC: nxp-nci: don't print header length mismatch on i2c error (Michael Walle)   
  - net: tipc: fix possible refcount leak in tipc_sk_create() (Hangyu Hua)   
  - platform/x86: hp-wmi: Ignore Sanitization Mode event (Kai-Heng Feng)   
  - cpufreq: pmac32-cpufreq: Fix refcount leak bug (Liang He)   
  - netfilter: br_netfilter: do not skip all hooks with 0 priority (Florian Westphal)   
  - virtio_mmio: Restore guest page size on resume (Stephan Gerhold)   
  - virtio_mmio: Add missing PM calls to freeze/restore (Stephan Gerhold)   
  - sfc: fix kernel panic when creating VF (Íñigo Huguet)   
  - seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors (Andrea Mayer)   
  - seg6: fix skb checksum evaluation in SRH encapsulation/insertion (Andrea Mayer)   
  - sfc: fix use after free when disabling sriov (Íñigo Huguet)   
  - ipv4: Fix data-races around sysctl_ip_dynaddr. (Kuniyuki Iwashima)   
  - icmp: Fix a data-race around sysctl_icmp_ratemask. (Kuniyuki Iwashima)   
  - icmp: Fix a data-race around sysctl_icmp_ratelimit. (Kuniyuki Iwashima)   
  - ARM: dts: sunxi: Fix SPI NOR campatible on Orange Pi Zero (Michal Suchanek)   
  - icmp: Fix data-races around sysctl. (Kuniyuki Iwashima)   
  - cipso: Fix data-races around sysctl. (Kuniyuki Iwashima)   
  - net: Fix data-races around sysctl_mem. (Kuniyuki Iwashima)   
  - inetpeer: Fix data-races around sysctl. (Kuniyuki Iwashima)   
  - ARM: 9209/1: Spectre-BHB: avoid pr_info() every time a CPU comes out of idle (Ard Biesheuvel)   
  - xhci: make xhci_handshake timeout for xhci_reset() adjustable (Mathias Nyman)   
  - xhci: bail out early if driver can't accress host in resume (Mathias Nyman)   
  - net: dsa: bcm_sf2: force pause link settings (Doug Berger)   
  - nilfs2: fix incorrect masking of permission flags for symlinks (Ryusuke Konishi)   
  - cgroup: Use separate src/dst nodes when preloading css_sets for migration (Tejun Heo)   
  - ARM: 9214/1: alignment: advance IT state after emulating Thumb instruction (Ard Biesheuvel)   
  - ARM: 9213/1: Print message about disabled Spectre workarounds only once (Dmitry Osipenko)   
  - net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale pointer (Steven Rostedt (Google))   
  - xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue (Juergen Gross)   
  - ALSA: hda/conexant: Apply quirk for another HP ProDesk 600 G3 model (Meng Tang)   
  - ALSA: hda - Add fixup for Dell Latitidue E5430 (Meng Tang)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.518.1.el7uek]
changelog:
  - xfs: fix out of bound access (Junxiao Bi)  [Orabug: 33089469] [Orabug: 34535011]  
  - KVM: x86: use raw clock values consistently (Paolo Bonzini)  [Orabug: 34362737]  
  - KVM: x86: reorganize pvclock_gtod_data members (Paolo Bonzini)  [Orabug: 34362737]  
  - KVM: x86: switch KVMCLOCK base to monotonic raw clock (Marcelo Tosatti)  [Orabug: 34362737]  
  - netfilter: ebtables: reject blobs that don't provide all entry points (Florian Westphal)  [Orabug: 32176166]  
  - sysfs: turn WARN() into pr_warn() (Greg Kroah-Hartman)  [Orabug: 32176118]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.518.2.el7uek]
changelog:
  - af_key: Do not call xfrm_probe_algs in parallel (Herbert Xu)  [Orabug: 34566753]  {CVE-2022-3028} 
  - l2tp: fix tunnel lookup use-after-free race (James Chapman)  [Orabug: 32504113]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.518.4.1.el7uek]
changelog:
  - Revert "xfs: don't use delalloc extents for COW on files with extsize hints" (Saeed Mirzamohammadi)  [Orabug: 34716022]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.518.4.2.el7uek]
changelog:
  - EDAC: Drop duplicated array of strings for memory type names (Jane Chu)  [Orabug: 34765038]  
  - xfs: don't ever put nlink > 0 inodes on the unlinked list (Darrick J. Wong)  [Orabug: 34765034]  
  - xfs: trim IO to found COW extent limit (Eric Sandeen)  [Orabug: 34765017]  
  - xfs: don't use delalloc extents for COW on files with extsize hints (Christoph Hellwig)  [Orabug: 34765017]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.523.1.el7uek]
changelog:
  - x86/kexec: Do not reserve EFI setup_data in the kexec e820 table (Dave Young)  [Orabug: 34966703]  
  - xfs: make COW fork unwritten extent conversions more robust (Christoph Hellwig)  [Orabug: 34390903]  
  - scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan (Chandrakanth patil)  [Orabug: 34242965]  
  - scsi: megaraid_sas: Early detection of VD deletion through RaidMap update (Kashyap Desai)  [Orabug: 34242965]  
  - LTS version: v4.14.304 (Saeed Mirzamohammadi)   
  - x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN (YingChi Long)   
  - gsmi: fix null-deref in gsmi_get_variable (Khazhismel Kumykov)   
  - serial: atmel: fix incorrect baudrate setup (Tobias Schramm)   
  - serial: pch_uart: Pass correct sg to dma_unmap_sg() (Ilpo Järvinen)   
  - usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210 (Juhyung Park)   
  - usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (Maciej Żenczykowski)   
  - usb: gadget: g_webcam: Send color matching descriptor per frame (Daniel Scally)   
  - usb: host: ehci-fsl: Fix module alias (Alexander Stein)   
  - USB: serial: cp210x: add SCALANCE LPE-9000 device id (Michael Adler)   
  - usb: core: hub: disable autosuspend for TI TUSB8041 (Flavio Suligoi)   
  - USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100 (Greg Kroah-Hartman)   
  - USB: serial: option: add Quectel EM05CN modem (Duke Xin(辛安文))   
  - USB: serial: option: add Quectel EM05CN (SG) modem (Duke Xin(辛安文))   
  - USB: serial: option: add Quectel EC200U modem (Ali Mirghasemi)   
  - USB: serial: option: add Quectel EM05-G (RS) modem (Duke Xin(辛安文))   
  - USB: serial: option: add Quectel EM05-G (CS) modem (Duke Xin(辛安文))   
  - USB: serial: option: add Quectel EM05-G (GR) modem (Duke Xin(辛安文))   
  - prlimit: do_prlimit needs to have a speculation check (Greg Kroah-Hartman)   
  - usb: xhci: Check endpoint is valid before dereferencing it (Jimmy Hu)   
  - xhci-pci: set the dma max_seg_size (Ricardo Ribalda)   
  - nilfs2: fix general protection fault in nilfs_btree_insert() (Ryusuke Konishi)   
  - f2fs: let's avoid panic if extent_tree is not created (Jaegeuk Kim)   
  - RDMA/srp: Move large values to a new enum for gcc13 (Jiri Slaby (SUSE))   
  - net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats (Daniil Tatianin)   
  - pNFS/filelayout: Fix coalescing test for single DS (Olga Kornievskaia)   
  - LTS version: v4.14.303 (Saeed Mirzamohammadi)   
  - Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout" (Ferry Toth)   
  - nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() (Minsuk Kang)   
  - hvc/xen: lock console list traversal (Roger Pau Monne)   
  - regulator: da9211: Use irq handler when ready (Ricardo Ribalda)   
  - EDAC/device: Fix period calculation in edac_device_reset_delay_period() (Eliav Farber)   
  - x86/boot: Avoid using Intel mnemonics in AT&T syntax asm (Peter Zijlstra)   
  - netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. (Gavrilov Ilia)   
  - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (Herbert Xu) [Orabug: 35005830] {CVE-2023-0394}
  - platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during probe (Hans de Goede)   
  - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Clement Lecigne)   
  - net/ulp: prevent ULP without clone op from entering the LISTEN status (Paolo Abeni)   
  - s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() (Heiko Carstens)   
  - perf auxtrace: Fix address filter duplicate symbol selection (Adrian Hunter)   
  - docs: Fix the docs build with Sphinx 6.0 (Jonathan Corbet)   
  - net: sched: disallow noqueue for qdisc classes (Frederick Lawler) [Orabug: 35005793] {CVE-2022-47929}
  - ravb: Fix "failed to switch device to config mode" message during unbind (Biju Das)   
  - driver core: Fix bus_type.match() error handling in __driver_attach() (Isaac J. Manjarres)   
  - parisc: Align parisc MADV_XXX constants with all other architectures (Helge Deller)   
  - hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling (Linus Torvalds)   
  - hfs/hfsplus: use WARN_ON for sanity check (Arnd Bergmann)   
  - nfsd: fix handling of readdir in v4root vs. mount upcall timeout (Jeff Layton)   
  - x86/bugs: Flush IBP in ib_prctl_set() (Rodrigo Branco)   
  - udf: Fix extension of the last extent in the file (Jan Kara)   
  - caif: fix memory leak in cfctrl_linkup_request() (Zhengchao Shao)   
  - usb: rndis_host: Secure rndis_query check against int overflow (Szymon Heidrich)   
  - net: sched: atm: dont intepret cls results when asked to drop (Jamal Hadi Salim) [Orabug: 34983615] {CVE-2023-23455}
  - net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe (Miaoqian Lin)   
  - net: amd-xgbe: add missed tasklet_kill (Jiguang Xiao)   
  - nfc: Fix potential resource leaks (Miaoqian Lin)   
  - qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure (Daniil Tatianin)   
  - bpf: pull before calling skb_postpull_rcsum() (Jakub Kicinski)   
  - SUNRPC: ensure the matching upcall is in-flight upon downcall (minoura makoto)   
  - ext4: allocate extended attribute value in vmalloc area (Ye Bin)   
  - ext4: avoid unaccounted block allocation when expanding inode (Jan Kara)   
  - ext4: initialize quota before expanding inode in setproject ioctl (Jan Kara)   
  - ext4: fix inode leak in ext4_xattr_inode_create() on an error path (Ye Bin)   
  - ext4: avoid BUG_ON when creating xattrs (Jan Kara)   
  - ext4: fix error code return to user-space in ext4_get_branch() (Luís Henriques)   
  - ext4: init quota for 'old.inode' in 'ext4_rename' (Ye Bin)   
  - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (Baokun Li)   
  - ext4: fix undefined behavior in bit shift for ext4_check_flag_values (Gaosheng Cui)   
  - ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop (Baokun Li)   
  - drm/vmwgfx: Validate the box size for the snooped cursor (Zack Rusin)   
  - drm/connector: send hotplug uevent on connector cleanup (Simon Ser)   
  - device_cgroup: Roll back to original exceptions after copy failure (Wang Weiyang)   
  - parisc: led: Fix potential null-ptr-deref in start_task() (Shang XiaoJing)   
  - iommu/amd: Fix ivrs_acpihid cmdline parsing code (Kim Phillips)   
  - crypto: n2 - add missing hash statesize (Corentin Labbe)   
  - PCI/sysfs: Fix double free in error path (Sascha Hauer)   
  - PCI: Fix pci_device_is_present() for VFs by checking PF (Michael S. Tsirkin)   
  - ima: Fix a potential NULL pointer access in ima_restore_measurement_list (Huaxin Lu)   
  - cifs: fix confusing debug message (Paulo Alcantara)   
  - media: dvb-core: Fix UAF due to refcount races at releasing (Takashi Iwai) [Orabug: 34820630] {CVE-2022-41218}
  - media: dvb-core: Fix double free in dvb_register_device() (Keita Suzuki)   
  - ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod (Nick Desaulniers)   
  - tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line (Yang Jihong)   
  - x86/microcode/intel: Do not retry microcode reloading on the APs (Ashok Raj)   
  - dm cache: set needs_check flag after aborting metadata (Mike Snitzer)   
  - dm cache: Fix UAF in destroy() (Luo Meng)   
  - dm thin: Fix UAF in run_timer_softirq() (Luo Meng)   
  - dm thin: Use last transaction's pmd->root when commit failed (Zhihao Cheng)   
  - dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort (Mike Snitzer)   
  - selftests: Use optional USERCFLAGS and USERLDFLAGS (Mickaël Salaün)   
  - ARM: ux500: do not directly dereference __iomem (Jason A. Donenfeld)   
  - ktest.pl minconfig: Unset configs instead of just removing them (Steven Rostedt)   
  - media: stv0288: use explicitly signed char (Jason A. Donenfeld)   
  - tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo)   
  - tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo)   
  - mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING (Deren Wu)   
  - md: fix a crash in mempool_free (Mikulas Patocka)   
  - pnode: terminate at peers of source (Christian Brauner)   
  - ALSA: line6: fix stack overflow in line6_midi_transmit (Artem Egorkine)   
  - ALSA: line6: correct midi status byte when receiving data from podxt (Artem Egorkine)   
  - hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount (Aditya Garg)   
  - HID: plantronics: Additional PIDs for double volume key presses quirk (Terry Junge)   
  - powerpc/rtas: avoid scheduling in rtas_os_term() (Nathan Lynch)   
  - powerpc/rtas: avoid device tree lookups in rtas_os_term() (Nathan Lynch)   
  - media: dvbdev: fix refcnt bug (Lin Ma) [Orabug: 34983296] {CVE-2022-45886} {CVE-2022-45884} {CVE-2022-45919} {CVE-2022-45887} {CVE-2022-45885}
  - gcov: add support for checksum field (Rickard x Andersson)   
  - iio: adc: ad_sigma_delta: do not use internal iio_dev lock (Nuno Sá)   
  - reiserfs: Add missing calls to reiserfs_security_free() (Roberto Sassu)   
  - HID: wacom: Ensure bootloader PID is usable in hidraw mode (Jason Gerecke)   
  - usb: dwc3: core: defer probe on ulpi_read_id timeout (Ferry Toth)   
  - pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES (John Stultz)   
  - pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion (John Stultz)   
  - ASoC: rt5670: Remove unbalanced pm_runtime_put() (Hans de Goede)   
  - ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() (Wang Jingjin)   
  - ASoC: wm8994: Fix potential deadlock (Marek Szyprowski)   
  - ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() (Wang Jingjin)   
  - ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() (Wang Yufen)   
  - orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() (Zhang Xiaoxu)   
  - drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() (Nathan Chancellor)   
  - drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() (Nathan Chancellor)   
  - clk: st: Fix memory leak in st_of_quadfs_setup() (Xiu Jianfeng)   
  - media: si470x: Fix use-after-free in si470x_int_in_callback() (Shigeru Yoshida)   
  - mmc: f-sdh30: Add quirks for broken timeout clock capability (Kunihiko Hayashi)   
  - blk-mq: fix possible memleak when register 'hctx' failed (Ye Bin)   
  - media: dvb-usb: fix memory leak in dvb_usb_adapter_init() (Mazin Al Haddad)   
  - media: dvbdev: adopts refcnt to avoid UAF (Lin Ma) [Orabug: 34983296] {CVE-2022-45887} {CVE-2022-45885} {CVE-2022-45884} {CVE-2022-45886} {CVE-2022-45919}
  - media: dvb-frontends: fix leak of memory fw (Yan Lei)   
  - ppp: associate skb with a device at tx (Stanislav Fomichev)   
  - mrp: introduce active flags to prevent UAF when applicant uninit (Schspa Shi)   
  - md/raid1: stop mdx_raid1 thread when raid1 array run failed (Jiang Li)   
  - drm/sti: Use drm_mode_copy() (Ville Syrjälä)   
  - s390/lcs: Fix return type of lcs_start_xmit() (Nathan Chancellor)   
  - s390/netiucv: Fix return type of netiucv_tx() (Nathan Chancellor)   
  - s390/ctcm: Fix return type of ctc{mp,}m_tx() (Nathan Chancellor)   
  - igb: Do not free q_vector unless new one was allocated (Kees Cook)   
  - wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() (Minsuk Kang)   
  - hamradio: baycom_epp: Fix return type of baycom_send_packet() (Nathan Chancellor)   
  - net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() (Nathan Chancellor)   
  - bpf: make sure skb->len != 0 when redirecting to a tunneling device (Stanislav Fomichev)   
  - ipmi: fix memleak when unload ipmi driver (Zhang Yuchen)   
  - ASoC: codecs: rt298: Add quirk for KBL-R RVP platform (Amadeusz Sławiński)   
  - wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out (Shigeru Yoshida)   
  - wifi: ath9k: verify the expected usb_endpoints are present (Fedor Pchelkin)   
  - hfs: fix OOB Read in __hfs_brec_find (ZhangPeng)   
  - acct: fix potential integer overflow in encode_comp_t() (Zheng Yejian)   
  - nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() (Ryusuke Konishi)   
  - ACPICA: Fix error code path in acpi_ds_call_control_method() (Rafael J. Wysocki)   
  - fs: jfs: fix shift-out-of-bounds in dbDiscardAG (Hoi Pok Wu)   
  - udf: Avoid double brelse() in udf_rename() (Shigeru Yoshida)   
  - fs: jfs: fix shift-out-of-bounds in dbAllocAG (Dongliang Mu)   
  - binfmt_misc: fix shift-out-of-bounds in check_special_flags (Liu Shixin)   
  - net: stream: purge sk_error_queue in sk_stream_kill_queues() (Eric Dumazet)   
  - myri10ge: Fix an error handling path in myri10ge_probe() (Christophe JAILLET)   
  - net_sched: reject TCF_EM_SIMPLE case for complex ematch module (Cong Wang)   
  - skbuff: Account for tail adjustment during pull operations (Subash Abhinov Kasiviswanathan)   
  - openvswitch: Fix flow lookup to use unmasked key (Eelco Chaudron)   
  - r6040: Fix kmemleak in probe and remove (Li Zetao)   
  - nfc: pn533: Clear nfc_target before being used (Minsuk Kang)   
  - mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (Dan Aloni)   
  - rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() (Gaosheng Cui)   
  - selftests/powerpc: Fix resource leaks (Miaoqian Lin)   
  - powerpc/hv-gpci: Fix hv_gpci event list (Kajol Jain)   
  - powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() (Yang Yingliang)   
  - powerpc/perf: callchain validate kernel stack pointer bounds (Nicholas Piggin)   
  - powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() (Yang Yingliang)   
  - cxl: Fix refcount leak in cxl_calc_capp_routing (Miaoqian Lin)   
  - powerpc/52xx: Fix a resource leak in an error handling path (Christophe JAILLET)   
  - macintosh/macio-adb: check the return value of ioremap() (Xie Shaowen)   
  - macintosh: fix possible memory leak in macio_add_one_device() (Yang Yingliang)   
  - iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (Yuan Can)   
  - iommu/amd: Fix pci device refcount leak in ppr_notifier() (Yang Yingliang)   
  - rtc: snvs: Allow a time difference on clock register read (Stefan Eichenberger)   
  - include/uapi/linux/swab: Fix potentially missing __always_inline (Matt Redfearn)   
  - HSI: omap_ssi_core: Fix error handling in ssi_init() (Yuan Can)   
  - power: supply: fix residue sysfs file in error handle route of __power_supply_register() (Zeng Heng)   
  - HSI: omap_ssi_core: fix possible memory leak in ssi_probe() (Yang Yingliang)   
  - HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() (Yang Yingliang)   
  - fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() (Christophe JAILLET)   
  - fbdev: vermilion: decrease reference count in error path (Xiongfeng Wang)   
  - fbdev: via: Fix error in via_core_init() (Shang XiaoJing)   
  - fbdev: pm2fb: fix missing pci_disable_device() (Yang Yingliang)   
  - fbdev: ssd1307fb: Drop optional dependency (Andy Shevchenko)   
  - usb: storage: Add check for kcalloc (Jiasheng Jiang)   
  - i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Zheyu Ma) [Orabug: 34555528] {CVE-2022-2873}
  - vme: Fix error not catched in fake_init() (Chen Zhongjin)   
  - staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() (YueHaibing)   
  - staging: rtl8192u: Fix use after free in ieee80211_rx() (Dan Carpenter)   
  - i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe (Hui Tang)   
  - chardev: fix error handling in cdev_device_add() (Yang Yingliang)   
  - mcb: mcb-parse: fix error handing in chameleon_parse_gdd() (Yang Yingliang)   
  - drivers: mcb: fix resource leak in mcb_probe() (Zhengchao Shao)   
  - cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() (Yang Yingliang)   
  - cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() (Yang Yingliang)   
  - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (Zheng Wang)   
  - misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() (ruanjinjie)   
  - test_firmware: fix memory leak in test_firmware_init() (Zhengchao Shao)   
  - serial: sunsab: Fix error handling in sunsab_init() (Yuan Can)   
  - serial: pch: Fix PCI device refcount leak in pch_request_dma() (Xiongfeng Wang)   
  - serial: amba-pl011: avoid SBSA UART accessing DMACR register (Jiamei Xie)   
  - staging: vme_user: Fix possible UAF in tsi148_dma_list_add (Gaosheng Cui)   
  - usb: fotg210-udc: Fix ages old endianness issues (Linus Walleij)   
  - uio: uio_dmem_genirq: Fix deadlock between irq config and handling (Rafael Mendonca)   
  - uio: uio_dmem_genirq: Fix missing unlock in irq configuration (Rafael Mendonca)   
  - vfio: platform: Do not pass return buffer to ACPI _RST method (Rafael Mendonca)   
  - class: fix possible memory leak in __class_register() (Yang Yingliang)   
  - drivers: dio: fix possible memory leak in dio_init() (Yang Yingliang)   
  - IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces (Dragos Tatulea)   
  - hwrng: geode - Fix PCI device refcount leak (Xiongfeng Wang)   
  - hwrng: amd - Fix PCI device refcount leak (Xiongfeng Wang)   
  - crypto: img-hash - Fix variable dereferenced before check 'hdev->req' (Gaosheng Cui)   
  - orangefs: Fix sysfs not cleanup when dev init failed (Zhang Xiaoxu)   
  - RDMA/hfi1: Fix error return code in parse_platform_config() (Wang Yufen)   
  - scsi: snic: Fix possible UAF in snic_tgt_create() (Gaosheng Cui)   
  - scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails (Chen Zhongjin)   
  - scsi: ipr: Fix WARNING in ipr_init() (Shang XiaoJing)   
  - scsi: fcoe: Fix possible name leak when device_register() fails (Yang Yingliang)   
  - scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() (Yang Yingliang)   
  - scsi: hpsa: Fix error handling in hpsa_add_sas_host() (Yang Yingliang)   
  - RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed (Zhang Xiaoxu)   
  - RDMA/hfi: Decrease PCI device reference count in error path (Xiongfeng Wang)   
  - PCI: Check for alloc failure in pci_request_irq() (Zeng Heng)   
  - apparmor: fix a memleak in multi_transaction_new() (Gaosheng Cui)   
  - stmmac: fix potential division by 0 (Piergiorgio Beruto)   
  - Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - ntb_netdev: Use dev_kfree_skb_any() in interrupt context (Eric Pilmore)   
  - net: lan9303: Fix read error execution path (Jerry Ray)   
  - net: amd-xgbe: Check only the minimum speed for active/passive cables (Tom Lendacky)   
  - net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net/tunnel: wait until all sk_user_data reader finish before releasing the sock (Hangbin Liu)   
  - net: farsync: Fix kmemleak when rmmods farsync (Li Zetao)   
  - ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() (Yuan Can)   
  - net: defxx: Fix missing err handling in dfx_init() (Yongqiang Liu)   
  - net: vmw_vsock: vmci: Check memcpy_from_msg() (Artem Chernyshev)   
  - blktrace: Fix output non-blktrace event when blk_classic option enabled (Yang Jihong)   
  - wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() (Wang Yufen)   
  - wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h (Bitterblue Smith)   
  - clk: samsung: Fix memory leak in _samsung_clk_register_pll() (Xiu Jianfeng)   
  - media: coda: Add check for kmalloc (Jiasheng Jiang)   
  - media: coda: Add check for dcoda_iram_alloc (Jiasheng Jiang)   
  - media: c8sectpfe: Add of_node_put() when breaking out of loop (Liang He)   
  - mmc: mmci: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: wbsd: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: via-sdmmc: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: wmt-sdmmc: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: vub300: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: toshsd: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: mxcmmc: fix return value check of mmc_add_host() (Yang Yingliang)   
  - mmc: moxart: fix return value check of mmc_add_host() (Yang Yingliang)   
  - NFSv4.x: Fail client initialisation if state manager thread can't run (Trond Myklebust)   
  - SUNRPC: Fix missing release socket in rpc_sockname() (Wang ShaoBo)   
  - ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt (Gaosheng Cui)   
  - media: saa7164: fix missing pci_disable_device() (Liu Shixin)   
  - regulator: core: fix module refcount leak in set_supply() (Yang Yingliang)   
  - bonding: uninitialized variable in bond_miimon_inspect() (Dan Carpenter)   
  - ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe (Zhang Qilong)   
  - drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() (Xiongfeng Wang)   
  - drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() (Xiongfeng Wang)   
  - ALSA: asihpi: fix missing pci_disable_device() (Liu Shixin)   
  - NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (Trond Myklebust)   
  - NFSv4.2: Fix a memory stomp in decode_attr_security_label (Trond Myklebust)   
  - media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC (Aakarsh Jain)   
  - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() (Baisong Zhong)   
  - pinctrl: pinconf-generic: add missing of_node_put() (ZhangPeng)   
  - media: imon: fix a race condition in send_packet() (Gautam Menghani)   
  - mtd: maps: pxa2xx-flash: fix memory leak in probe (Zheng Yongjun)   
  - clk: rockchip: Fix memory leak in rockchip_clk_register_pll() (Xiu Jianfeng)   
  - ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT (Baisong Zhong)   
  - HID: hid-sensor-custom: set fixed size for custom attributes (Marcus Folkesson)   
  - media: platform: exynos4-is: Fix error handling in fimc_md_init() (Yuan Can)   
  - media: solo6x10: fix possible memory leak in solo_sysfs_init() (Yang Yingliang)   
  - Input: elants_i2c - properly handle the reset GPIO when power is off (Douglas Anderson)   
  - mtd: lpddr2_nvm: Fix possible null-ptr-deref (Hui Tang)   
  - wifi: ath10k: Fix return value in ath10k_pci_init() (Xiu Jianfeng)   
  - ima: Fix misuse of dereference of pointer in template_desc_init_fields() (Xiu Jianfeng)   
  - regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() (Yang Yingliang)   
  - ASoC: pxa: fix null-pointer dereference in filter() (Zeng Heng)   
  - drm/radeon: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo)   
  - media: camss: Clean up received buffers on failed start of streaming (Vladimir Zapolskiy)   
  - mtd: Fix device name leak when register device failed in add_mtd_device() (Zhang Xiaoxu)   
  - media: vivid: fix compose size exceed boundary (Liu Shixin)   
  - spi: Update reference to struct spi_controller (Jonathan Neuschäfer)   
  - media: i2c: ad5820: Fix error path (Ricardo Ribalda)   
  - wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() (Fedor Pchelkin)   
  - wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() (Fedor Pchelkin)   
  - rapidio: devices: fix missing put_device in mport_cdev_open (Cai Xinchen)   
  - hfs: Fix OOB Write in hfs_asc2mac (ZhangPeng)   
  - eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD (Zhang Qilong)   
  - rapidio: fix possible UAF when kfifo_alloc() fails (Wang Weiyang)   
  - fs: sysv: Fix sysv_nblocks() returns wrong value (Chen Zhongjin)   
  - MIPS: BCM63xx: Add check for NULL for clk in clk_enable (Anastasia Belova)   
  - platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() (Yu Liao)   
  - x86/xen: Fix memory leak in xen_init_lock_cpu() (Xiu Jianfeng)   
  - uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix (Oleg Nesterov)   
  - ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (Li Zetao)   
  - rapidio: rio: fix possible name leak in rio_register_mport() (Yang Yingliang)   
  - rapidio: fix possible name leaks when rio_add_device() fails (Yang Yingliang)   
  - lib/notifier-error-inject: fix error when writing -errno to debugfs file (Akinobu Mita)   
  - libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value (Akinobu Mita)   
  - irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() (Shang XiaoJing)   
  - PNP: fix name memory leak in pnp_alloc_dev() (Yang Yingliang)   
  - MIPS: vpe-cmp: fix possible memory leak while module exiting (Yang Yingliang)   
  - MIPS: vpe-mt: fix possible memory leak while module exiting (Yang Yingliang)   
  - ocfs2: fix memory leak in ocfs2_stack_glue_init() (Shang XiaoJing)   
  - timerqueue: Use rb_entry_safe() in timerqueue_getnext() (Barnabás Pőcze)   
  - perf: Fix possible memleak in pmu_dev_alloc() (Chen Zhongjin)   
  - fs: don't audit the capability check in simple_xattr_list() (Ondrej Mosnacek)   
  - PM: hibernate: Fix mistake in kerneldoc comment (xiongxin)   
  - alpha: fix syscall entry in !AUDUT_SYSCALL case (Al Viro)   
  - cpuidle: dt: Return the correct numbers of parsed idle states (Ulf Hansson)   
  - tpm/tpm_crb: Fix error message in __crb_relinquish_locality() (Michael Kelley)   
  - pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP (Stephen Boyd)   
  - ARM: mmp: fix timer_read delay (Doug Brown)   
  - pstore/ram: Fix error return code in ramoops_probe() (Wang Yufen)   
  - ARM: dts: turris-omnia: Add switch port 6 node (Pali Rohár)   
  - ARM: dts: turris-omnia: Add ethernet aliases (Pali Rohár)   
  - ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port (Pali Rohár)   
  - arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name (AngeloGioacchino Del Regno)   
  - soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe (Zhang Qilong)   
  - arm: dts: spear600: Fix clcd interrupt (Kory Maincent)   
  - drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static (Chen Jiahao)   
  - ARM: dts: qcom: apq8064: fix coresight compatible (Luca Weiss)   
  - usb: musb: remove extra check in musb_gadget_vbus_draw (Ivaylo Dimitrov)   
  - net: loopback: use NET_NAME_PREDICTABLE for name_assign_type (Rasmus Villemoes)   
  - Bluetooth: L2CAP: Fix u8 overflow (Sungwoo Kim) [Orabug: 34880796] {CVE-2022-45934}
  - igb: Initialize mailbox message for VF reset (Tony Nguyen)   
  - USB: serial: cp210x: add Kamstrup RF sniffer PIDs (Bruno Thomsen)   
  - USB: serial: option: add Quectel EM05-G modem (Duke Xin)   
  - usb: gadget: uvc: Prevent buffer overflow in setup handler (Szymon Heidrich)   
  - udf: Fix extending file within last block (Jan Kara)   
  - udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size (Jan Kara)   
  - udf: Fix preallocation discarding at indirect extent boundary (Jan Kara)   
  - udf: Drop unused arguments of udf_delete_aext() (Jan Kara)   
  - udf: Discard preallocation before extending file with a hole (Jan Kara)   
  - perf script python: Remove explicit shebang from tests/attr.c (Tony Jones)   
  - ASoC: ops: Correct bounds check for second channel on SX controls (Charles Keepax)   
  - can: mcba_usb: Fix termination command argument (Yasushi SHOJI)   
  - can: sja1000: fix size of OCR_MODE_MASK define (Heiko Schocher)   
  - ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() (Mark Brown)   
  - nfp: fix use-after-free in area_cache_get() (Jialiang Wang) [Orabug: 34719740] {CVE-2022-3545}
  - block: unhash blkdev part inode when the part is deleted (Ming Lei)   
  - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths (Jann Horn)   
  - mm/khugepaged: fix GUP-fast interaction by sending IPI (Jann Horn)   
  - once: add DO_ONCE_SLOW() for sleepable contexts (Eric Dumazet)   
  - libtraceevent: Fix build with binutils 2.35 (Ben Hutchings)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.523.2.el7uek]
changelog:
  - RDMA/addr: Refresh neighbour entries upon rdma_resolve_addr() (Gerd Rausch)  [Orabug: 35060577]  
  - xfs: fix incorrect i_nlink caused by inode racing (Long Li)  [Orabug: 35040849]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.523.3.el7uek]
changelog:
  - driver/soc/pensando: cap_pcie: refactor pciep_regrd32 (David Clear)  [Orabug: 35089515]  
  - mtd: spi-nor: Add support for Winbond w25q02nw flash. (David Clear)  [Orabug: 35089515]  
  - drivers/i2c: Lattice I2C driver update (David Clear)  [Orabug: 35089515]  
  - drivers/soc/pensando: Adding Elba sbus driver (David Clear)  [Orabug: 35089515]  
  - Arm64: Pensando: Enable ltc2978 driver for Ortano ADI cards (Austin Sehnert)  [Orabug: 35080511]  
  - scsi: target: core: Remove from tmr_list during LUN unlink (Dmitry Bogdanov)  [Orabug: 35040145]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.523.4.el7uek]
changelog:
  - rds: ib: Keep IB MRs on clean_list unless we are tearing down the pool (Håkon Bugge)  [Orabug: 34987235]  
  - rds: ib: Add FRWR related statistics counters (Håkon Bugge)  [Orabug: 34987235]  
  - net/rds: The fast registration work queue is not destroyed (Ka-Cheong Poon)  [Orabug: 25962452] [Orabug: 31712036]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.524.1.el7uek]
changelog:
  - Revert "Change mincore() to count "mapped" pages rather than "cached" pages" (Linus Torvalds)  [Orabug: 35124753]  
  - Revert "XFS: code enhancement to help debug" (Stephen Brennan)  [Orabug: 35070084]  
  - NFSv4: Fix OPEN / CLOSE race (Trond Myklebust)  [Orabug: 34998974]  
  - LTS version: v4.14.306 (Saeed Mirzamohammadi)   
  - nilfs2: fix underflow in second superblock position calculations (Ryusuke Konishi)   
  - kvm: initialize all of the kvm_debugregs structure before sending it to userspace (Greg Kroah-Hartman)   
  - i40e: Add checking for null for nlmsg_find_attr() (Natalia Petrova)   
  - ipv6: Fix tcp socket connection with DSCP. (Guillaume Nault)   
  - ipv6: Fix datagram socket connection with DSCP. (Guillaume Nault)   
  - net: mpls: fix stale pointer if allocation fails during device rename (Jakub Kicinski)   
  - net: stmmac: Restrict warning on disabling DMA store and fwd mode (Cristian Ciocaltea)   
  - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Miko Larsson)   
  - dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions. (Kuniyuki Iwashima)   
  - net: bgmac: fix BCM5358 support by setting correct flags (Rafał Miłecki)   
  - i40e: add double of VLAN header when computing the max MTU (Jason Xing)   
  - revert "squashfs: harden sanity check in squashfs_read_xattr_id_table" (Andrew Morton)   
  - hugetlb: check for undefined shift on 32 bit architectures (Mike Kravetz)   
  - ALSA: hda/conexant: add a new hda codec SN6180 (Bo Liu)   
  - mmc: sdio: fix possible resource leaks in some error paths (Yang Yingliang)   
  - Revert "x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN" (Greg Kroah-Hartman)   
  - aio: fix mremap after fork null-deref (Seth Jenkins)   
  - nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association (Amit Engel)   
  - net/rose: Fix to not accept on connected socket (Hyunwoo Kim)   
  - tools/virtio: fix the vringh test for virtio ring changes (Shunsuke Mie)   
  - migrate: hugetlb: check for hugetlb shared PMD in node migration (Mike Kravetz)   
  - usb: core: add quirk for Alcor Link AK9563 smartcard reader (Mark Pearson)   
  - net: USB: Fix wrong-direction WARNING in plusb.c (Alan Stern)   
  - pinctrl: single: fix potential NULL dereference (Maxim Korotkov)   
  - pinctrl: aspeed: Fix confusing types in return value (Joel Stanley)   
  - ALSA: pci: lx6464es: fix a debug loop (Dan Carpenter)   
  - ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control() (Artemii Karasev)   
  - btrfs: limit device extents to the device size (Josef Bacik)   
  - serial: 8250_dma: Fix DMA Rx rearm race (Ilpo Järvinen)   
  - serial: 8250_dma: Fix DMA Rx completion race (Ilpo Järvinen)   
  - Squashfs: fix handling and sanity checking of xattr_ids count (Phillip Lougher)   
  - mm/swapfile: add cond_resched() in get_swap_pages() (Longlong Xia)   
  - mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps (Mike Kravetz)   
  - parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case (Helge Deller)   
  - parisc: Fix return code of pdc_iodc_print() (Helge Deller)   
  - iio:adc:twl6030: Enable measurements of VUSB, VBAT and others (Andreas Kemnade)   
  - iio: adc: berlin2-adc: Add missing of_node_put() in error path (Xiongfeng Wang)   
  - iio: hid: fix the retval in accel_3d_capture_sample (Dmitry Perchanov)   
  - efi: Accept version 2 of memory attributes table (Ard Biesheuvel)   
  - watchdog: diag288_wdt: fix __diag288() inline assembly (Alexander Egorenkov)   
  - watchdog: diag288_wdt: do not use stack buffers for hardware data (Alexander Egorenkov)   
  - fbcon: Check font dimension limits (Samuel Thibault)   
  - usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait (Udipto Goswami)   
  - net/x25: Fix to not accept on connected socket (Hyunwoo Kim)   
  - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (Mike Christie)   
  - scsi: target: core: Fix warning on RT kernels (Maurizio Lombardi)   
  - net: openvswitch: fix flow memory leak in ovs_flow_cmd_new (Fedor Pchelkin)   
  - sctp: do not check hb_timer.expires when resetting hb_timer (Xin Long)   
  - squashfs: harden sanity check in squashfs_read_xattr_id_table (Fedor Pchelkin)   
  - netrom: Fix use-after-free caused by accept on already connected socket (Hyunwoo Kim)   
  - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() (Artemii Karasev)   
  - bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() (Yuan Can)   
  - firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region (Takashi Sakamoto)   
  - LTS version: v4.14.305 (Saeed Mirzamohammadi)   
  - usb: host: xhci-plat: add wakeup entry at sysfs (Peter Chen)   
  - ipv6: ensure sane device mtu in tunnels (Eric Dumazet)   
  - mm: kvmalloc does not fallback to vmalloc for incompatible gfp flags (Michal Hocko)   
  - exit: Use READ_ONCE() for all oops/warn limit reads (Kees Cook)   
  - docs: Fix path paste-o for /sys/kernel/warn_count (Kees Cook)   
  - panic: Expose "warn_count" to sysfs (Kees Cook)   
  - panic: Introduce warn_limit (Kees Cook)   
  - panic: Consolidate open-coded panic_on_warn checks (Kees Cook)   
  - exit: Allow oops_limit to be disabled (Kees Cook)   
  - exit: Expose "oops_count" to sysfs (Kees Cook)   
  - exit: Put an upper limit on how often we can oops (Jann Horn)   
  - ia64: make IA64_MCA_RECOVERY bool instead of tristate (Randy Dunlap)   
  - h8300: Fix build errors from do_exit() to make_task_dead() transition (Nathan Chancellor)   
  - hexagon: Fix function name in die() (Nathan Chancellor)   
  - objtool: Add a missing comma to avoid string concatenation (Eric W. Biederman)   
  - exit: Add and use make_task_dead. (Eric W. Biederman)   
  - panic: unset panic_on_warn inside panic() (Tiezhu Yang)   
  - sysctl: add a new register_sysctl_init() interface (Xiaoming Ni)   
  - x86/entry/64: Add instruction suffix to SYSRET (Jan Beulich)   
  - x86/asm: Fix an assembler warning with current binutils (Mikulas Patocka)   
  - drm/radeon/dp: make radeon_dp_get_dp_link_config static (Alex Deucher)   
  - wifi: brcmfmac: fix up incorrect 4.14.y backport for brcmf_fw_map_chip_to_name() (Greg Kroah-Hartman)   
  - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (Thomas Gleixner)   
  - Revert "Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode" (Dmitry Torokhov)   
  - net/tg3: resolve deadlock in tg3_reset_task() during EEH (David Christensen)   
  - net: ravb: Fix possible hang if RIS2_QFF1 happen (Yoshihiro Shimoda)   
  - sctp: fail if no bound addresses can be used for a given scope (Marcelo Ricardo Leitner)   
  - netrom: Fix use-after-free of a listening socket. (Kuniyuki Iwashima)   
  - netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE (Sriram Yagnaraman)   
  - netlink: annotate data races around sk_state (Eric Dumazet)   
  - netlink: annotate data races around dst_portid and dst_group (Eric Dumazet)   
  - EDAC/device: Respect any driver-supplied workqueue polling value (Manivannan Sadhasivam)   
  - ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment (Giulio Benetti)   
  - tracing: Make sure trace_printk() can output as soon as it can be used (Steven Rostedt (Google))   
  - module: Don't wait for GOING modules (Petr Pavlu)   
  - scsi: hpsa: Fix allocation size for scsi_host_alloc() (Alexey V. Vissarionov)   
  - Bluetooth: hci_sync: cancel cmd_timer if hci_open failed (Archie Pusaka)   
  - fs: reiserfs: remove useless new_opts in reiserfs_remount (Dongliang Mu)   
  - comedi: adv_pci1760: Fix PWM instruction handling (Ian Abbott)   
  - w1: fix WARNING after calling w1_process() (Yang Yingliang)   
  - w1: fix deadloop in __w1_remove_master_device() (Yang Yingliang)   
  - HID: betop: check shape of output reports (Pietro Borrello)   
  - dmaengine: Fix double increment of client_count in dma_chan_get() (Koba Ko)   
  - net: mlx5: eliminate anonymous module_init & module_exit (Randy Dunlap)   
  - usb: gadget: f_fs: Ensure ep0req is dequeued before free_request (Udipto Goswami)   
  - usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait (Udipto Goswami)   
  - HID: check empty report_list in hid_validate_values() (Pietro Borrello)   
  - net: mdio: validate parameter addr in mdiobus_get_phy() (Heiner Kallweit)   
  - net: usb: sr9700: Handle negative len (Szymon Heidrich)   
  - wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid (Szymon Heidrich) [Orabug: 35037714] {CVE-2023-23559}
  - net: nfc: Fix use-after-free in local_cleanup() (Jisoo Jang)   
  - phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on() (Shang XiaoJing)   
  - amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent (Raju Rangoju)   
  - affs: initialize fsdata in affs_truncate() (Alexander Potapenko)   
  - IB/hfi1: Reserve user expected TIDs (Dean Luick)   
  - IB/hfi1: Reject a zero-length user expected buffer (Dean Luick)   
  - tomoyo: fix broken dependency on *.conf.default (Masahiro Yamada)   
  - EDAC/highbank: Fix memory leak in highbank_mc_probe() (Miaoqian Lin)   
  - HID: intel_ish-hid: Add check for ishtp_dma_tx_map (Jiasheng Jiang)   
  - ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' (Fabio Estevam)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.524.2.el7uek]
changelog:
  - x86/kdump: Fall back to reserve high crashkernel memory (Dave Young)  [Orabug: 35158700]  
  - NFS: If the VFS sets LOOKUP_REVAL then force a lookup of the dentry (Trond Myklebust)  [Orabug: 35136066]  
  - nfsd: Do not refuse to serve out of cache (Trond Myklebust)  [Orabug: 35136066]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.524.3.el7uek]
changelog:
  - KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog (Like Xu)  [Orabug: 35182018]  
  - KVM: x86: Prevent set vCPU into INIT/SIPI_RECEIVED state when INIT are latched (Liran Alon)  [Orabug: 35146837]  
  - KVM: x86: Evaluate latched_init in KVM_SET_VCPU_EVENTS when vCPU not in SMM (Liran Alon)  [Orabug: 35146837]  
  - mm: use ktask for copying page ranges in vma_dup() (Anthony Yznaga)  [Orabug: 35054623]  
  - mm: parallelize unmap_page_range() for some large VMAs (Anthony Yznaga)  [Orabug: 35054623]  
  - hv_netvsc: Add check for kvmalloc_array (Jiasheng Jiang)  [Orabug: 34951483]  {CVE-2022-3107} 
  - block: fix handling for BIO_NO_PAGE_REF (Ming Lei)  [Orabug: 34602747]  
  - block: add BIO_NO_PAGE_REF flag (Jens Axboe)  [Orabug: 34602747]  
  - block: implement bio helper to add iter bvec pages to bio (Jens Axboe)  [Orabug: 34602747]  
  - block: introduce mp_bvec_for_each_page() for iterating over page (Ming Lei)  [Orabug: 34602747]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.524.4.el7uek]
changelog:
  - xfs: add missing cmap->br_state = XFS_EXT_NORM update (Gao Xiang)  [Orabug: 35202792]  
  - x86/tsc: Disable clocksource watchdog for TSC on qualified platorms (Feng Tang)  [Orabug: 35181414]  
  - x86/tsc: Add a timer to make sure TSC_adjust is always checked (Feng Tang)  [Orabug: 35181414]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.525.1.el7uek]
changelog:
  - net/rds: use appropriate return code while dropping a connection (Praveen Kumar Kannoju)  [Orabug: 35279328]  
  - net/rds: use appropriate reason while dropping a connection (Praveen Kumar Kannoju)  [Orabug: 35278125]  
  - netfilter: ebtables: fix table blob use-after-free (Florian Westphal)  [Orabug: 35256192]  
  - net/rds: Adding TCP stats for TCP keepalive timeout (Nagappan Ramasamy Palaniappan)  [Orabug: 35254380]  
  - x86/cpu: Fix LFENCE serialization check in init_amd() (Rhythm Mahajan)  [Orabug: 35225921]  
  - taskstats: Fix memory leak due to taskstats_counts objects. (Imran Khan)  [Orabug: 34768713]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.526.1.el7uek]
changelog:
  - mm, compaction: Skip all pinned pages during scan (Khalid Aziz)  [Orabug: 35300710]  
  - LTS version: v4.14.314 (Saeed Mirzamohammadi)   
  - ASN.1: Fix check for strdup() success (Ekaterina Orlova)   
  - iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() (Dan Carpenter)   
  - counter: 104-quad-8: Fix race condition between FLAG and CNTR reads (William Breathitt Gray)   
  - sctp: Call inet6_destroy_sock() via sk->sk_destruct(). (Kuniyuki Iwashima)   
  - dccp: Call inet6_destroy_sock() via sk->sk_destruct(). (Kuniyuki Iwashima)   
  - inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy(). (Kuniyuki Iwashima)   
  - tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct(). (Kuniyuki Iwashima)   
  - udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM). (Kuniyuki Iwashima)   
  - ext4: fix use-after-free in ext4_xattr_set_entry (Baokun Li)   
  - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Ritesh Harjani)   
  - Revert "ext4: fix use-after-free in ext4_xattr_set_entry" (Tudor Ambarus)   
  - x86/purgatory: Don't generate debug info for purgatory.ro (Pingfan Liu)   
  - memstick: fix memory leak if card device is never registered (Greg Kroah-Hartman)   
  - nilfs2: initialize unused bytes in segment summary blocks (Ryusuke Konishi)   
  - xen/netback: use same error messages for same errors (Juergen Gross)   
  - s390/ptrace: fix PTRACE_GET_LAST_BREAK error handling (Heiko Carstens)   
  - net: dsa: b53: mmap: add phy ops (Álvaro Fernández Rojas)   
  - scsi: core: Improve scsi_vpd_inquiry() checks (Damien Le Moal)   
  - scsi: megaraid_sas: Fix fw_crash_buffer_show() (Tomas Henzl)   
  - selftests: sigaltstack: fix -Wuninitialized (Nick Desaulniers)   
  - f2fs: Fix f2fs_truncate_partial_nodes ftrace event (Douglas Raillard)   
  - e1000e: Disable TSO on i219-LM card to increase speed (Sebastian Basierski)   
  - mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() (Nikita Zhandarovich)   
  - i40e: fix i40e_setup_misc_vector() error handling (Aleksandr Loktionov)   
  - i40e: fix accessing vsi->active_filters without holding lock (Aleksandr Loktionov)   
  - virtio_net: bugfix overflow inside xdp_linearize_page() (Xuan Zhuo)   
  - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Gwangun Jung)   
  - ARM: dts: rockchip: fix a typo error for rk3288 spdif node (Jianqun Xu)   
  - LTS version: v4.14.313 (Saeed Mirzamohammadi)   
  - arm64: KVM: Fix system register enumeration (Marc Zyngier)   
  - KVM: arm64: Filter out invalid core register IDs in KVM_GET_REG_LIST (Dave Martin)   
  - KVM: arm64: Factor out core register ID enumeration (Dave Martin)   
  - coresight-etm4: Fix for() loop drvdata->nr_addr_cmp range bug (Steve Clevenger)   
  - watchdog: sbsa_wdog: Make sure the timeout programming is within the limits (George Cherian)   
  - cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() (Waiman Long)   
  - ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size (Zhihao Cheng)   
  - verify_pefile: relax wrapper length check (Robbie Harwood)   
  - efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L (Hans de Goede)   
  - i2c: imx-lpi2c: clean rx/tx buffers upon new message (Alexander Stein)   
  - net: macb: fix a memory corruption in extended buffer descriptor mode (Roman Gushchin)   
  - qlcnic: check pci_reset_function result (Denis Plotnikov)   
  - niu: Fix missing unwind goto in niu_alloc_channels() (Harshit Mogalapalli)   
  - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition (Zheng Wang)   
  - mtdblock: tolerate corrected bit-flips (Bang Li)   
  - Bluetooth: Fix race condition in hidp_session_thread (Min Li)   
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (Luiz Augusto von Dentz)   
  - ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards (Oswald Buddenhagen)   
  - ALSA: i2c/cs8427: fix iec958 mixer control deactivation (Oswald Buddenhagen)   
  - ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard (Oswald Buddenhagen)   
  - ALSA: emu10k1: fix capture interrupt handler unlinking (Oswald Buddenhagen)   
  - mm/swap: fix swap_info_struct race between swapoff and get_swap_pages() (Rongwei Wang)   
  - ring-buffer: Fix race while reader and writer are on the same page (Zheng Yejian)   
  - ftrace: Mark get_lock_parent_ip() __always_inline (John Keeping)   
  - perf/core: Fix the same task check in perf_event_set_output (Kan Liang)   
  - nilfs2: fix sysfs interface lifetime (Ryusuke Konishi)   
  - nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() (Ryusuke Konishi)   
  - tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (Biju Das)   
  - iio: dac: cio-dac: Fix max DAC write value check for 12-bit (William Breathitt Gray)   
  - USB: serial: option: add Quectel RM500U-CN modem (Bjørn Mork)   
  - USB: serial: option: add Telit FE990 compositions (Enrico Sau)   
  - USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs (Kees Jan Koster)   
  - gpio: davinci: Add irq chip flag to skip set wake (Dhruva Gole)   
  - ipv6: Fix an uninit variable access bug in __ip6_make_skb() (Ziyang Xuan)   
  - icmp: guard against too small mtu (Eric Dumazet)   
  - wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (Felix Fietkau)   
  - pwm: cros-ec: Explicitly set .polarity in .get_state() (Uwe Kleine-König)   
  - LTS version: v4.14.312 (Saeed Mirzamohammadi)   
  - ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() (Harshit Mogalapalli)   
  - net: sched: cbq: dont intepret cls results when asked to drop (Jamal Hadi Salim)   
  - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' (Ye Bin)   
  - usb: host: ohci-pxa27x: Fix and & vs | typo (Dan Carpenter)   
  - s390/uaccess: add missing earlyclobber annotations to __clear_user() (Heiko Carstens)   
  - drm/etnaviv: fix reference leak when mmaping imported buffer (Lucas Stach)   
  - ALSA: usb-audio: Fix regression on detection of Roland VS-100 (Takashi Iwai)   
  - ALSA: hda/conexant: Partial revert of a quirk for Lenovo (Takashi Iwai)   
  - pinctrl: at91-pio4: fix domain name assignment (Johan Hovold)   
  - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (David Disseldorp)   
  - Input: focaltech - use explicitly signed char type (Jason A. Donenfeld)   
  - i40e: fix registers dump after run ethtool adapter self test (Radoslaw Tyl)   
  - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Ivan Orlov)   
  - scsi: megaraid_sas: Fix crash after a double completion (Tomas Henzl)   
  - fbdev: au1200fb: Fix potential divide by zero (Wei Chen)   
  - fbdev: lxfb: Fix potential divide by zero (Wei Chen)   
  - fbdev: intelfb: Fix potential divide by zero (Wei Chen)   
  - fbdev: nvidia: Fix potential divide by zero (Wei Chen)   
  - sched_getaffinity: don't assume 'cpumask_size()' is fully initialized (Linus Torvalds)   
  - fbdev: tgafb: Fix potential divide by zero (Wei Chen)   
  - ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (Kuninori Morimoto)   
  - ALSA: asihpi: check pao in control_message() (Kuninori Morimoto)   
  - md: avoid signed overflow in slot_store() (NeilBrown)   
  - ocfs2: fix data corruption after failed write (Jan Kara via Ocfs2-devel)   
  - sched/fair: Sanitize vruntime of entity being migrated (Vincent Guittot)   
  - sched/fair: sanitize vruntime of entity being placed (Zhang Qiao)   
  - dm crypt: add cond_resched() to dmcrypt_write() (Mikulas Patocka)   
  - dm stats: check for and propagate alloc_percpu failure (Jiasheng Jiang)   
  - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (Wei Chen)   
  - nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() (Ryusuke Konishi)   
  - usb: chipidea: core: fix possible concurrent when switch role (Xu Yang)   
  - usb: chipdea: core: fix return -EINVAL if request role is the same with current role (Xu Yang)   
  - igb: revert rtnl_lock() that causes deadlock (Lin Ma)   
  - usb: gadget: u_audio: don't let userspace block driver unbind (Alvin Šipraga)   
  - scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR (Joel Selvaraj)   
  - sh: sanitize the flags on sigreturn (Al Viro)   
  - net: usb: qmi_wwan: add Telit 0x1080 composition (Enrico Sau)   
  - net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 (Enrico Sau)   
  - scsi: ufs: core: Add soft dependency on governor_simpleondemand (Adrien Thierry)   
  - scsi: target: iscsi: Fix an error message in iscsi_check_key() (Maurizio Lombardi)   
  - m68k: Only force 030 bus error if PC not in exception table (Michael Schmitz)   
  - ca8210: fix mac_len negative array access (Alexander Aring)   
  - riscv: Bump COMMAND_LINE_SIZE value to 1024 (Alexandre Ghiti)   
  - thunderbolt: Use const qualifier for `ring_interrupt_index` (Mario Limonciello)   
  - uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 (Yaroslav Furman)   
  - hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs (Frank Crawford)   
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (Zheng Wang)   
  - Bluetooth: btqcomsmd: Fix command timeout after setting BD address (Stephan Gerhold)   
  - net: mdio: thunder: Add missing fwnode_handle_put() (Liang He)   
  - hvc/xen: prevent concurrent accesses to the shared ring (Roger Pau Monne)   
  - atm: idt77252: fix kmemleak when rmmod idt77252 (Li Zetao)   
  - net/mlx5: Read the TC mapping of all priorities on ETS query (Maher Sanalla)   
  - bpf: Adjust insufficient default bpf_jit_limit (Daniel Borkmann)   
  - net/ps3_gelic_net: Use dma_mapping_error (Geoff Levand)   
  - net/ps3_gelic_net: Fix RX sk_buff length (Geoff Levand)   
  - net: qcom/emac: Fix use after free bug in emac_remove due to race condition (Zheng Wang)   
  - xirc2ps_cs: Fix use after free bug in xirc2ps_detach (Zheng Wang)   
  - qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info (Daniil Tatianin)   
  - net: usb: smsc95xx: Limit packet length to skb->len (Szymon Heidrich)   
  - scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (Yu Kuai)   
  - i2c: imx-lpi2c: check only for enabled interrupt flags (Alexander Stein)   
  - igbvf: Regard vf reset nack as success (Akihiko Odaki)   
  - intel/igbvf: free irq on the error path in igbvf_request_msix() (Gaosheng Cui)   
  - iavf: fix inverted Rx hash condition leading to disabled hash (Alexander Lobakin)   
  - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (Zheng Wang)   
  - LTS version: v4.14.311 (Saeed Mirzamohammadi)   
  - HID: uhid: Over-ride the default maximum data buffer value with our own (Lee Jones)   
  - HID: core: Provide new max_buffer_size attribute to over-ride the default (Lee Jones)   
  - serial: 8250_em: Fix UART port type (Biju Das)   
  - drm/i915: Don't use stolen memory for ring buffers with LLC (John Harrison)   
  - fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks (Helge Deller)   
  - ftrace: Fix invalid address access in lookup_rec() when index is 0 (Chen Zhongjin)   
  - sh: intc: Avoid spurious sizeof-pointer-div warning (Michael Karcher)   
  - ext4: fix task hung in ext4_xattr_delete_inode (Baokun Li)   
  - ext4: fail ext4_iget if special inode unallocated (Baokun Li)   
  - mmc: atmel-mci: fix race between stop command and start of next command (Tobias Schramm)   
  - media: m5mols: fix off-by-one loop termination error (Linus Torvalds)   
  - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition (Zheng Wang)   
  - hwmon: (adt7475) Fix masking of hysteresis registers (Tony O'Brien)   
  - hwmon: (adt7475) Display smoothing attributes in correct order (Tony O'Brien)   
  - ethernet: sun: add check for the mdesc_grab() (Liang He)   
  - net/iucv: Fix size of interrupt data (Alexandra Winter)   
  - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (Szymon Heidrich)   
  - ipv4: Fix incorrect table ID in IOCTL path (Ido Schimmel)   
  - block: sunvdc: add check for mdesc_grab() returning NULL (Liang He)   
  - nvmet: avoid potential UAF in nvmet_req_complete() (Damien Le Moal)   
  - net: usb: smsc75xx: Limit packet length to skb->len (Szymon Heidrich)   
  - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition (Zheng Wang)   
  - net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails (Heiner Kallweit)   
  - net: tunnels: annotate lockless accesses to dev->needed_headroom (Eric Dumazet)   
  - qed/qed_dev: guard against a possible division by zero (Daniil Tatianin)   
  - nfc: pn533: initialize struct pn533_out_arg properly (Fedor Pchelkin)   
  - tcp: tcp_make_synack() can be called from process context (Breno Leitao)   
  - fs: sysfs_emit_at: Remove PAGE_SIZE alignment check (Eric Biggers)   
  - ext4: fix cgroup writeback accounting with fs-layer encryption (Eric Biggers)   
  - LTS version: v4.14.310 (Saeed Mirzamohammadi)   
  - drm/i915: Don't use BAR mappings for ring buffers with LLC (John Harrison)   
  - tipc: improve function tipc_wait_for_cond() (Tung Nguyen)   
  - media: ov5640: Fix analogue gain control (Paul Elder)   
  - PCI: Add SolidRun vendor ID (Alvaro Karsz)   
  - macintosh: windfarm: Use unsigned type for 1-bit bitfields (Nathan Chancellor)   
  - alpha: fix R_ALPHA_LITERAL reloc for large modules (Edward Humes)   
  - MIPS: Fix a compilation issue (xurui)   
  - net: caif: Fix use-after-free in cfusbl_device_notify() (Shigeru Yoshida)   
  - ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping() (Eric Dumazet)   
  - nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties (Kang Chen)   
  - nfc: change order inside nfc_se_io error path (Fedor Pchelkin)   
  - ext4: zero i_disksize when initializing the bootloader inode (Zhihao Cheng)   
  - ext4: fix WARNING in ext4_update_inline_data (Ye Bin)   
  - ext4: move where set the MAY_INLINE_DATA flag is set (Ye Bin)   
  - ext4: fix another off-by-one fsmap error on 1k block filesystems (Darrick J. Wong)   
  - ext4: fix RENAME_WHITEOUT handling for inline directories (Eric Whitney)   
  - x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (Andrew Cooper)   
  - LTS version: v4.14.309 (Saeed Mirzamohammadi)   
  - staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh (Philipp Hortmann)   
  - staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script (Philipp Hortmann)   
  - wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext" (Hector Martin)   
  - LTS version: v4.14.308 (Saeed Mirzamohammadi)   
  - thermal: intel: powerclamp: Fix cur_state for multi package system (Srinivas Pandruvada)   
  - tcp: Fix listen() regression in 4.14.303. (Kuniyuki Iwashima)   
  - s390/setup: init jump labels before command line parsing (Vasily Gorbik)   
  - s390/maccess: add no DAT mode to kernel_write (Vasily Gorbik)   
  - Bluetooth: hci_sock: purge socket queues in the destruct() callback (Nguyen Dinh Phi)   
  - phy: rockchip-typec: Fix unsigned comparison with less than zero (Jiapeng Chong)   
  - usb: uvc: Enumerate valid values for color matching (Daniel Scally)   
  - USB: ene_usb6250: Allocate enough memory for full object (Kees Cook)   
  - usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math (Kees Cook)   
  - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word() (Harshit Mogalapalli)   
  - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word() (Harshit Mogalapalli)   
  - tools/iio/iio_utils:fix memory leak (Yulong Zhang)   
  - tty: serial: fsl_lpuart: disable the CTS when send break signal (Sherry Sun)   
  - tty: fix out-of-bounds access in tty_driver_lookup_tty() (Sven Schnelle)   
  - media: uvcvideo: Handle cameras with invalid descriptors (Ricardo Ribalda)   
  - firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3 (Darrell Kavanagh)   
  - tracing: Add NULL checks for buffer in ring_buffer_free_read_page() (Jia-Ju Bai)   
  - thermal: intel: quark_dts: fix error pointer dereference (Dan Carpenter)   
  - scsi: ipr: Work around fortify-string warning (Arnd Bergmann)   
  - tcp: tcp_check_req() can be called from process context (Eric Dumazet)   
  - ARM: dts: spear320-hmi: correct STMPE GPIO compatible (Krzysztof Kozlowski)   
  - nfc: fix memory leak of se_io context in nfc_genl_se_io (Fedor Pchelkin)   
  - 9p/xen: fix connection sequence (Juergen Gross)   
  - 9p/xen: fix version parsing (Juergen Gross)   
  - net: fix __dev_kfree_skb_any() vs drop monitor (Eric Dumazet)   
  - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() (Hangyu Hua)   
  - watchdog: pcwd_usb: Fix attempting to access uninitialized memory (Li Hua)   
  - watchdog: Fix kmemleak in watchdog_cdev_register (Chen Jun)   
  - watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path (ruanjinjie)   
  - x86: um: vdso: Add '%rcx' and '%r11' to the syscall clobber list (Ammar Faizi)   
  - ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed (Zhihao Cheng)   
  - ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show() (Zhihao Cheng)   
  - ubifs: ubifs_writepage: Mark page dirty after writing inode failed (Zhihao Cheng)   
  - ubifs: dirty_cow_znode: Fix memleak in error handling path (Zhihao Cheng)   
  - ubifs: Re-statistic cleaned znode count if commit failed (Zhihao Cheng)   
  - ubi: Fix possible null-ptr-deref in ubi_free_volume() (Yang Yingliang)   
  - ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume() (Li Zetao)   
  - ubi: Fix use-after-free when volume resizing failed (Li Zetao)   
  - ubifs: Reserve one leb for each journal head while doing budget (Zhihao Cheng)   
  - ubifs: Fix wrong dirty space budget for dirty inode (Zhihao Cheng)   
  - ubifs: Rectify space budget for ubifs_xrename() (Zhihao Cheng)   
  - ubi: ensure that VID header offset + VID header size <= alloc, size (George Kennedy)   
  - pwm: stm32-lp: fix the check on arr and cmp registers update (Fabrice Gasnier)   
  - fs/jfs: fix shift exponent db_agl2size negative (Liu Shixin via Jfs-discussion)   
  - net/sched: Retire tcindex classifier (Jamal Hadi Salim)   
  - kbuild: Port silent mode detection to future gnu make. (Dmitry Goncharov)   
  - drm/radeon: Fix eDP for single-display iMac11,2 (Mark Hawrylak)   
  - PCI: Avoid FLR for AMD FCH AHCI adapters (Damien Le Moal)   
  - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (Tomas Henzl)   
  - scsi: ses: Fix possible desc_ptr out-of-bounds accesses (Tomas Henzl)   
  - scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (Tomas Henzl)   
  - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (Tomas Henzl)   
  - scsi: ses: Don't attach if enclosure has no components (James Bottomley)   
  - scsi: qla2xxx: Fix erroneous link down (Quinn Tran)   
  - scsi: qla2xxx: Fix link failure in NPIV environment (Quinn Tran)   
  - ktest.pl: Fix missing "end_monitor" when machine check fails (Steven Rostedt)   
  - mips: fix syscall_get_nr (Elvira Khabirova)   
  - alpha: fix FEN fault handling (Al Viro)   
  - rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails (Ilya Dryomov)   
  - ARM: dts: exynos: correct TMU phandle in Odroid XU (Krzysztof Kozlowski)   
  - ARM: dts: exynos: correct TMU phandle in Exynos4 (Krzysztof Kozlowski)   
  - dm flakey: don't corrupt the zero page (Mikulas Patocka)   
  - dm flakey: fix logic when corrupting a bio (Mikulas Patocka)   
  - wifi: cfg80211: Fix use after free for wext (Alexander Wetzel)   
  - wifi: rtl8xxxu: Use a longer retry limit of 48 (Bitterblue Smith)   
  - ext4: refuse to create ea block when umounted (Jun Nie)   
  - ext4: optimize ea_inode block expansion (Jun Nie)   
  - ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls() (Dmitry Fomin)   
  - irqdomain: Drop bogus fwspec-mapping error handling (Johan Hovold)   
  - irqdomain: Fix disassociation race (Johan Hovold)   
  - irqdomain: Fix association race (Johan Hovold)   
  - ima: Align ima_file_mmap() parameters with mmap_file LSM hook (Roberto Sassu)   
  - Documentation/hw-vuln: Document the interaction between IBRS and STIBP (KP Singh)   
  - x86/microcode/AMD: Fix mixed steppings support (Borislav Petkov (AMD))   
  - x86/microcode/AMD: Add a @cpu parameter to the reloading functions (Borislav Petkov (AMD))   
  - x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter (Borislav Petkov (AMD))   
  - x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range (Yang Jihong)   
  - x86/kprobes: Fix __recover_optprobed_insn check optimizing logic (Yang Jihong)   
  - x86/reboot: Disable SVM, not just VMX, when stopping CPUs (Sean Christopherson)   
  - x86/crash: Disable virt in core NMI crash handler to avoid double shootdown (Sean Christopherson)   
  - x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows) (Sean Christopherson)   
  - udf: Fix file corruption when appending just after end of preallocated extent (Jan Kara)   
  - udf: Do not update file length for failed writes to inline files (Jan Kara)   
  - udf: Do not bother merging very long extents (Jan Kara)   
  - udf: Truncate added extents on failed expansion (Jan Kara)   
  - ocfs2: fix non-auto defrag path not working issue (Heming Zhao via Ocfs2-devel)   
  - ocfs2: fix defrag path triggering jbd2 ASSERT (Heming Zhao via Ocfs2-devel)   
  - f2fs: fix information leak in f2fs_move_inline_dirents() (Eric Biggers)   
  - fs: hfsplus: fix UAF issue in hfsplus_put_super (Dongliang Mu)   
  - hfs: fix missing hfs_bnode_get() in __hfs_bnode_create (Liu Shixin)   
  - s390/kprobes: fix current_kprobe never cleared after kprobes reenter (Vasily Gorbik)   
  - s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler (Vasily Gorbik)   
  - rtc: pm8xxx: fix set-alarm race (Johan Hovold)   
  - wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu (Jun ASAKA)   
  - spi: bcm63xx-hsspi: Fix multi-bit mode setting (William Zhang)   
  - dm cache: add cond_resched() to various workqueue loops (Mike Snitzer)   
  - dm thin: add cond_resched() to various workqueue loops (Mike Snitzer)   
  - pinctrl: at91: use devm_kasprintf() to avoid potential leaks (Claudiu Beznea)   
  - regulator: s5m8767: Bounds check id indexing into arrays (Kees Cook)   
  - regulator: max77802: Bounds check regulator id against opmode (Kees Cook)   
  - ASoC: kirkwood: Iterate over array indexes instead of using pointer math (Kees Cook)   
  - docs/scripts/gdb: add necessary make scripts_gdb step (Jakob Koschel)   
  - drm/msm/dsi: Add missing check for alloc_ordered_workqueue (Jiasheng Jiang)   
  - drm/radeon: free iio for atombios when driver shutdown (Liwei Song)   
  - ACPI: video: Fix Lenovo Ideapad Z570 DMI match (Hans de Goede)   
  - m68k: Check syscall_trace_enter() return code (Michael Schmitz)   
  - net: bcmgenet: Add a check for oversized packets (Florian Fainelli)   
  - ACPI: Don't build ACPICA with '-Os' (Mark Rutland)   
  - inet: fix fast path in __inet_hash_connect() (Pietro Borrello)   
  - timers: Prevent union confusion from unexpected restart_syscall() (Jann Horn)   
  - thermal: intel: Fix unsigned comparison with less than zero (Yang Li)   
  - rcu: Suppress smp_processor_id() complaint in synchronize_rcu_expedited_wait() (Paul E. McKenney)   
  - wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() (Jisoo Jang)   
  - ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy (Markuss Broks)   
  - udf: Define EFSCORRUPTED error code (Jan Kara)   
  - rpmsg: glink: Avoid infinite loop on intent for missing channel (Bjorn Andersson)   
  - media: usb: siano: Fix use after free bugs caused by do_submit_urb (Duoming Zhou)   
  - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (Duoming Zhou)   
  - media: platform: ti: Add missing check for devm_regulator_get (Jiasheng Jiang)   
  - MIPS: vpe-mt: drop physical_memsize (Randy Dunlap)   
  - powerpc/pseries/lparcfg: add missing RTAS retry status handling (Nathan Lynch)   
  - powerpc/powernv/ioda: Skip unallocated resources when mapping to PE (Frederic Barrat)   
  - Input: ads7846 - don't check penirq immediately for 7845 (Luca Ellero)   
  - Input: ads7846 - don't report pressure for ads7845 (Luca Ellero)   
  - mtd: rawnand: sunxi: Fix the size of the last OOB region (Samuel Holland)   
  - mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read() (Qiheng Lin)   
  - dm: remove flush_scheduled_work() during local_exit() (Mike Snitzer)   
  - scsi: aic94xx: Add missing check for dma_map_single() (Jiasheng Jiang)   
  - hwmon: (ltc2945) Handle error case in ltc2945_value_store (Jonathan Cormier)   
  - gpio: vf610: connect GPIO label to dev name (Haibo Chen)   
  - ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress() (Kuninori Morimoto)   
  - drm/mediatek: Drop unbalanced obj unref (Rob Clark)   
  - drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness (Daniel Mentz)   
  - ALSA: hda/ca0132: minor fix for allocation size (Alexey V. Vissarionov)   
  - pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups (Miaoqian Lin)   
  - drm/msm/hdmi: Add missing check for alloc_ordered_workqueue (Jiasheng Jiang)   
  - gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id() (Liang He)   
  - drm/bridge: megachips: Fix error handling in i2c_register_driver() (Yuan Can)   
  - drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC (Geert Uytterhoeven)   
  - irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts (Florian Fainelli)   
  - can: esd_usb: Move mislocated storage of SJA1000_ECC_SEG bits in case of a bus error (Frank Jungclaus)   
  - wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize() (Dan Carpenter)   
  - m68k: /proc/hardware should depend on PROC_FS (Randy Dunlap)   
  - crypto: rsa-pkcs1pad - Use akcipher_request_complete (Herbert Xu)   
  - Bluetooth: L2CAP: Fix potential user-after-free (Luiz Augusto von Dentz)   
  - cpufreq: davinci: Fix clk use after free (Uwe Kleine-König)   
  - irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe (Miaoqian Lin)   
  - irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains (Miaoqian Lin)   
  - net/mlx5: Enhance debug print in page allocation failure (Jack Morgenstein)   
  - crypto: seqiv - Handle EBUSY correctly (Herbert Xu)   
  - ACPI: battery: Fix missing NUL-termination with large strings (Armin Wolf)   
  - wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() (Minsuk Kang)   
  - wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function (Fedor Pchelkin)   
  - wifi: orinoco: check return value of hermes_write_wordrec() (Alexey Kodanev)   
  - ACPICA: nsrepair: handle cases without a return value correctly (Daniil Tatianin)   
  - lib/mpi: Fix buffer overrun when SG is too long (Herbert Xu)   
  - genirq: Fix the return type of kstat_cpu_irqs_sum() (Zhen Lei)   
  - wifi: wl3501_cs: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - wifi: libertas: cmdresp: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - wifi: libertas: main: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid() (Zhengchao Shao)   
  - wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() (Zhang Changzhong)   
  - wifi: ipw2200: fix memory leak in ipw_wdev_init() (Zhengchao Shao)   
  - wifi: rtl8xxxu: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - wifi: libertas: fix memory leak in lbs_init_adapter() (Zhengchao Shao)   
  - arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name (Neil Armstrong)   
  - arm64: dts: amlogic: meson-gx: add missing unit address to rng node name (Neil Armstrong)   
  - arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name (Neil Armstrong)   
  - ARM: dts: exynos: correct wr-active property in Exynos3250 Rinato (Krzysztof Kozlowski)   
  - ARM: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init() (Yang Yingliang)   
  - arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address (Martin Blumenstingl)   
  - arm64: dts: meson-gx: Fix Ethernet MAC address unit name (Martin Blumenstingl)   
  - ARM: zynq: Fix refcount leak in zynq_early_slcr_init (Qiheng Lin)   
  - ARM: OMAP2+: Fix memory leak in realtime_counter_init() (Chen Hui)   
  - HID: asus: use spinlock to safely schedule workers (Pietro Borrello)   
  - HID: asus: use spinlock to protect concurrent accesses (Pietro Borrello)   
  - HID: asus: Remove check for same LED brightness on set (Luke D. Jones)   
  - USB: core: Don't hold device lock while reading the "descriptors" sysfs file (Alan Stern)   
  - USB: serial: option: add support for VW/Skoda "Carstick LTE" (Florian Zumbiehl)   
  - dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size (Jiasheng Jiang)   
  - bpf: Fix truncation handling for mod32 dst reg wrt zero (Daniel Borkmann)   
  - bpf: Fix 32 bit src register truncation on div/mod (Daniel Borkmann)   
  - bpf: fix subprog verifier bypass by div/mod by 0 exception (Daniel Borkmann)   
  - bpf: Do not use ax register in interpreter on div/mod (Daniel Borkmann)   
  - net: Remove WARN_ON_ONCE(sk->sk_forward_alloc) from sk_stream_kill_queues(). (Kuniyuki Iwashima)   
  - IB/hfi1: Assign npages earlier (Dean Luick)   
  - btrfs: send: limit number of clones and allocated memory size (David Sterba)   
  - ARM: dts: rockchip: add power-domains property to dp node on rk3288 (Johan Jonker)   
  - LTS version: v4.14.307 (Saeed Mirzamohammadi)   
  - wifi: mwifiex: Add missing compatible string for SD8787 (Lukas Wunner)   
  - uaccess: Add speculation barrier to copy_from_user() (Dave Hansen)   
  - alarmtimer: Prevent starvation by small intervals and SIG_IGN (Thomas Gleixner)   
  - powerpc: dts: t208x: Disable 10G on MAC1 and MAC2 (Sean Anderson)   
  - random: always mix cycle counter in add_latent_entropy() (Jason A. Donenfeld)   
  - powerpc: dts: t208x: Mark MAC1 and MAC2 as 10G (Sean Anderson)   
  - wifi: rtl8xxxu: gen2: Turn on the rate control (Bitterblue Smith)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.526.2.el7uek]
changelog:
  - Revert "net/sched: Retire tcindex classifier" (Saeed Mirzamohammadi)  [Orabug: 35415066]  
  - elba.dtsi: Improved sdclk and sdclk-hsmmc timing. (David Clear)  [Orabug: 35411611]  
  - dsc-drivers: update ionic drivers to 23.04.1-001 (Dave Kleikamp)  [Orabug: 35411611]  
  - dsc-drivers: update ionic drivers to 22.11.1-001 (Dave Kleikamp)  [Orabug: 35411611]  
  - dsc-drivers: update drivers for 1.15.9-C-100 (Dave Kleikamp)  [Orabug: 35411611]  
  - kernfs: change kernfs_rename_lock into a read-write lock. (Imran Khan)  [Orabug: 35257586]  
  - kernfs: Use a per-fs rwsem to protect per-fs list of kernfs_super_info. (Imran Khan)  [Orabug: 35257586]  
  - kernfs: Introduce separate rwsem to protect inode attributes. (Imran Khan)  [Orabug: 35257586]  
  - btrfs: scan device in non-exclusive mode (Anand Jain)  [Orabug: 35153012]  
  - btrfs: free device in btrfs_close_devices for a single device filesystem (Anand Jain)  [Orabug: 35153012]  
  - SUNRPC: remove the maximum number of retries in call_bind_status (Dai Ngo)  [Orabug: 34640827]  
  - KVM: nVMX: add CR4_LA57 bit to nested CR4_FIXED1 (Chenyi Qiang)  [Orabug: 32715898]  
  - Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" (Liu Jian)   
  - Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path" (Zhihao Cheng)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.526.2.1.el7uek]
changelog:
  - xfs: log recovery stage split EFIs with multiple extents (Wengang Wang)  [Orabug: 35490075]  
  - xfs: IO time one extent per EFI (Wengang Wang)  [Orabug: 35490075]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.527.1.el7uek]
changelog:
  - mips64: Enable CRYPTO_USER_API_SKCIPHER config (Vijay Kumar)  [Orabug: 35458816]  
  - net/rds: Fix copy&paste error (Gerd Rausch)  [Orabug: 35416949]  
  - uek-rpm: Blacklist cls_tcindex module (Somasundaram Krishnasamy)  [Orabug: 35408336]  
  - LTS version: v4.14.316 (Saeed Mirzamohammadi)   
  - 3c589_cs: Fix an error handling path in tc589_probe() (Christophe JAILLET)   
  - forcedeth: Fix an error handling path in nv_probe() (Christophe JAILLET)   
  - x86/show_trace_log_lvl: Ensure stack pointer is aligned, again (Vernon Lovejoy)   
  - xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() (Dan Carpenter)   
  - power: supply: sbs-charger: Fix INHIBITED bit for Status reg (Daisuke Nojiri)   
  - power: supply: bq27xxx: Fix poll_interval handling and races on remove (Hans de Goede)   
  - power: supply: bq27xxx: Fix I2C IRQ race on remove (Hans de Goede)   
  - power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition (Hans de Goede)   
  - power: supply: leds: Fix blink to LED on transition (Hans de Goede)   
  - ipv6: Fix out-of-bounds access in ipv6_find_tlv() (Gavrilov Ilia)   
  - net: fix skb leak in __skb_tstamp_tx() (Pratyush Yadav)   
  - media: radio-shark: Add endpoint checks (Alan Stern)   
  - USB: sisusbvga: Add endpoint checks (Alan Stern)   
  - x86/mm: Avoid incomplete Global INVLPG flushes (Saeed Mirzamohammadi)   
  - USB: core: Add routines for endpoint checks in old drivers (Alan Stern)   
  - selftests/memfd: Fix unknown type name build failure (Hardik Garg)   
  - netfilter: nf_tables: fix register ordering (Florian Westphal)   
  - netfilter: nf_tables: do not allow SET_ID to refer to another table (Pablo Neira Ayuso)   
  - netfilter: nf_tables: do not allow RULE_ID to refer to another chain (Pablo Neira Ayuso)   
  - netfilter: nft_dynset: do not reject set updates with NFT_SET_EVAL (Pablo Neira Ayuso)   
  - netfilter: nf_tables: stricter validation of element data (Pablo Neira Ayuso)   
  - netfilter: nf_tables: allow up to 64 bytes in the set element data area (Pablo Neira Ayuso)   
  - netfilter: nf_tables: add nft_setelem_parse_key() (Pablo Neira Ayuso)   
  - netfilter: nf_tables: validate registers coming from userspace. (Pablo Neira Ayuso)   
  - netfilter: nftables: statify nft_parse_register() (Pablo Neira Ayuso)   
  - netfilter: nftables: add nft_parse_register_store() and use it (Pablo Neira Ayuso)   
  - netfilter: nftables: add nft_parse_register_load() and use it (Pablo Neira Ayuso)   
  - parisc: Allow to reboot machine after system halt (Helge Deller)   
  - m68k: Move signal frame following exception on 68020/030 (Finn Thain)   
  - spi: fsl-cpm: Use 16 bit mode for large transfers with even size (Christophe Leroy)   
  - spi: fsl-spi: Re-organise transfer bits_per_word adaptation (Christophe Leroy)   
  - spi: spi-fsl-spi: automatically adapt bits-per-word in cpu mode (Rasmus Villemoes)   
  - netfilter: nf_tables: bogus EBUSY in helper removal from transaction (Pablo Neira Ayuso)   
  - nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() (Ryusuke Konishi)   
  - ceph: force updating the msg pointer in non-split case (Xiubo Li)   
  - serial: Add support for Advantech PCI-1611U card (Vitaliy Tomin)   
  - statfs: enforce statfs[64] structure initialization (Ilya Leoshkevich)   
  - ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table (Nikhil Mahale)   
  - ALSA: hda: Fix Oops by 9.1 surround channel names (Takashi Iwai)   
  - usb-storage: fix deadlock when a scsi command timeouts more than once (Maxime Bizon)   
  - vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() (Eric Dumazet)   
  - igb: fix bit_shift to be in [1..8] range (Aleksandr Loktionov)   
  - cassini: Fix a memory leak in the error handling path of cas_init_one() (Christophe JAILLET)   
  - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Dong Chenchen)   
  - media: netup_unidvb: fix use-after-free at del_timer() (Duoming Zhou)   
  - vsock: avoid to close connected socket after the timeout (Zhuang Shengen)   
  - net: fec: Better handle pm_runtime_get() failing in .remove() (Uwe Kleine-König)   
  - af_key: Reject optional tunnel/BEET mode templates in outbound policies (Tobias Brunner)   
  - cpupower: Make TSC read per CPU for Mperf monitor (Wyes Karny)   
  - mfd: dln2: Fix memory leak in dln2_probe() (Qiang Ning)   
  - phy: st: miphy28lp: use _poll_timeout functions for waits (Alain Volmat)   
  - Input: xpad - add constants for GIP interface numbers (Vicki Pfau)   
  - clk: tegra20: fix gcc-7 constant overflow warning (Arnd Bergmann)   
  - recordmcount: Fix memory leaks in the uwrite function (Hao Zeng)   
  - sched: Fix KCSAN noinstr violation (Josh Poimboeuf)   
  - mcb-pci: Reallocate memory region to avoid memory overlapping (Rodríguez Barbarin, José Javier)   
  - serial: 8250: Reinit port->pm on port specific driver unbind (Tony Lindgren)   
  - HID: wacom: generic: Set battery quirk only when we see battery data (Jason Gerecke)   
  - spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 (Kevin Groeneveld)   
  - HID: logitech-hidpp: Reconcile USB and Unifying serials (Bastien Nocera)   
  - HID: logitech-hidpp: Don't use the USB serial for USB devices (Bastien Nocera)   
  - staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE (Philipp Hortmann)   
  - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (Min Li)   
  - wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (Hans de Goede)   
  - ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() (Ojaswin Mujoo)   
  - ext4: set goal start correctly in ext4_mb_normalize_request (Kemeng Shi)   
  - gfs2: Fix inode height consistency check (Andreas Gruenbacher)   
  - scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition (Zheng Wang)   
  - lib: cpu_rmap: Avoid use after free on rmap->obj array entries (Eli Cohen)   
  - net: Catch invalid index in XPS mapping (Nick Child)   
  - net: pasemi: Fix return type of pasemi_mac_start_tx() (Nathan Chancellor)   
  - ext2: Check block size validity during mount (Jan Kara)   
  - wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex (Hector Martin)   
  - ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects (void0red)   
  - ACPICA: Avoid undefined behavior: applying zero offset to null pointer (Tamir Duberstein)   
  - drm/tegra: Avoid potential 32-bit integer overflow (Nur Hussein)   
  - ACPI: EC: Fix oops when removing custom query handlers (Armin Wolf)   
  - memstick: r592: Fix UAF bug in r592_remove due to race condition (Zheng Wang)   
  - regmap: cache: Return error in cache sync operations for REGCACHE_NONE (Alexander Stein)   
  - fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() (Tetsuo Handa)   
  - af_unix: Fix a data race of sk->sk_receive_queue->qlen. (Kuniyuki Iwashima)   
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb (t.feng)   
  - net: annotate sk->sk_err write from do_recvmmsg() (Eric Dumazet)   
  - netlink: annotate accesses to nlk->cb_running (Eric Dumazet)   
  - net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). (Kuniyuki Iwashima)   
  - LTS version: v4.14.315 (Saeed Mirzamohammadi)   
  - mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock (Tetsuo Handa)   
  - printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h (Tetsuo Handa)   
  - drbd: correctly submit flush bio on barrier (Christoph Böhmwalder)   
  - serial: 8250: Fix serial8250_tx_empty() race with DMA Tx (Ilpo Järvinen)   
  - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (Ilpo Järvinen)   
  - perf bench: Share some global variables to fix build with gcc 10 (Arnaldo Carvalho de Melo)   
  - ext4: fix invalid free tracking in ext4_xattr_move_to_block() (Theodore Ts'o)   
  - ext4: remove a BUG_ON in ext4_mb_release_group_pa() (Theodore Ts'o)   
  - ext4: bail out of ext4_xattr_ibody_get() fails for any reason (Theodore Ts'o)   
  - ext4: add bounds checking in get_max_inline_xattr_value_size() (Theodore Ts'o)   
  - ext4: improve error recovery code paths in __ext4_remount() (Theodore Ts'o)   
  - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum (Tudor Ambarus)   
  - HID: wacom: Set a default resolution for older tablets (Ping Cheng)   
  - ARM: dts: s5pv210: correct MIPI CSIS clock name (Krzysztof Kozlowski)   
  - ARM: dts: exynos: fix WM8960 clock name in Itop Elite (Krzysztof Kozlowski)   
  - sh: nmi_debug: fix return value of __setup handler (Randy Dunlap)   
  - sh: math-emu: fix macro redefined warning (Randy Dunlap)   
  - cifs: fix pcchunk length type in smb2_copychunk_range (Pawel Witek)   
  - btrfs: print-tree: parent bytenr must be aligned to sector size (Anastasia Belova)   
  - btrfs: fix btrfs_prev_leaf() to not return the same key twice (Filipe Manana)   
  - perf symbols: Fix return incorrect build_id size in elf_read_build_id() (Yang Jihong)   
  - perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp() (Markus Elfring)   
  - perf vendor events power9: Remove UTF-8 characters from JSON files (Kajol Jain)   
  - ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` (Ruliang Lin)   
  - af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). (Kuniyuki Iwashima)   
  - net/sched: act_mirred: Add carrier check (Victor Nogueira)   
  - writeback: fix call of incorrect macro (Maxim Korotkov)   
  - sit: update dev->needed_headroom in ipip6_tunnel_bind_dev() (Cong Wang)   
  - netfilter: nf_tables: deactivate anonymous set from preparation phase (Pablo Neira Ayuso)   
  - netfilter: nf_tables: bogus EBUSY when deleting set after flush (Pablo Neira Ayuso)   
  - netfilter: nf_tables: use-after-free in failing rule with bound set (Pablo Neira Ayuso)   
  - netfilter: nft_hash: fix nft_hash_deactivate (Pablo Neira Ayuso)   
  - netfilter: nf_tables: unbind set in rule from commit path (Pablo Neira Ayuso)   
  - netfilter: nf_tables: split set destruction in deactivate and destroy phase (Florian Westphal)   
  - perf auxtrace: Fix address filter entire kernel size (Adrian Hunter)   
  - dm ioctl: fix nested locking in table_clear() to remove deadlock concern (Mike Snitzer)   
  - dm flakey: fix a crash with invalid table line (Mikulas Patocka)   
  - dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path (Mike Snitzer)   
  - s390/dasd: fix hanging blockdevice after request requeue (Stefan Haberland)   
  - btrfs: scrub: reject unsupported scrub flags (Qu Wenruo)   
  - clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (Quentin Schulz)   
  - wifi: rtl8xxxu: RTL8192EU always needs full init (Bitterblue Smith)   
  - nilfs2: fix infinite loop in nilfs_mdt_get_block() (Ryusuke Konishi)   
  - nilfs2: do not write dirty data after degenerating to read-only (Ryusuke Konishi)   
  - parisc: Fix argument pointer in real64_call_asm() (Helge Deller)   
  - dmaengine: at_xdmac: do not enable all cyclic channels (Claudiu Beznea)   
  - phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (Gaosheng Cui)   
  - NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease (Trond Myklebust)   
  - IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order (Patrick Kelsey)   
  - clk: add missing of_node_put() in "assigned-clocks" property parsing (Clément Léger)   
  - power: supply: generic-adc-battery: fix unit scaling (Sebastian Reichel)   
  - RDMA/rdmavt: Delete unnecessary NULL check (Natalia Petrova)   
  - perf/core: Fix hardlockup failure caused by perf throttle (Yang Jihong)   
  - powerpc/rtas: use memmove for potentially overlapping buffer copy (Nathan Lynch)   
  - macintosh: via-pmu-led: requires ATA to be set (Randy Dunlap)   
  - powerpc/sysdev/tsi108: fix resource printk format warnings (Randy Dunlap)   
  - powerpc/wii: fix resource printk format warnings (Randy Dunlap)   
  - powerpc/mpc512x: fix resource printk format warning (Randy Dunlap)   
  - macintosh/windfarm_smu_sat: Add missing of_node_put() (Liang He)   
  - spmi: Add a check for remove callback when removing a SPMI driver (Jishnu Prakash)   
  - staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (Philipp Hortmann)   
  - serial: 8250: Add missing wakeup event reporting (Florian Fainelli)   
  - tty: serial: fsl_lpuart: adjust buffer length to the intended size (Shenwei Wang)   
  - usb: chipidea: fix missing goto in `ci_hdrc_probe` (Yinhao Hu)   
  - sh: sq: Fix incorrect element size for allocating bitmap buffer (John Paul Adrian Glaubitz)   
  - uapi/linux/const.h: prefer ISO-friendly __typeof__ (Saeed Mirzamohammadi)   
  - ia64: mm/contig: fix section mismatch warning/error (Randy Dunlap)   
  - of: Fix modalias string generation (Miquel Raynal)   
  - spi: fsl-spi: Fix CPM/QE mode Litte Endian (Christophe Leroy)   
  - linux/vt_buffer.h: allow either builtin or modular for macros (Randy Dunlap)   
  - pstore: Revert pmsg_lock back to a normal mutex (John Stultz)   
  - tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. (Kuniyuki Iwashima)   
  - net: amd: Fix link leak when verifying config failed (Gencen Gan)   
  - ipv4: Fix potential uninit variable access bug in __ip_make_skb() (Ziyang Xuan)   
  - ixgbe: Enable setting RSS table to default values (Joe Damato)   
  - ixgbe: Allow flow hash to be set via ethtool (Joe Damato)   
  - wifi: iwlwifi: mvm: check firmware response size (Johannes Berg)   
  - wifi: iwlwifi: make the loop for card preparation effective (Emmanuel Grumbach)   
  - md/raid10: fix leak of 'r10bio->remaining' for recovery (Yu Kuai)   
  - scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS (Danila Chernetsov)   
  - scsi: target: iscsit: Fix TAS handling during conn cleanup (Mike Christie)   
  - net/packet: convert po->auxdata to an atomic flag (Eric Dumazet)   
  - net/packet: convert po->origdev to an atomic flag (Eric Dumazet)   
  - vlan: partially enable SIOCSHWTSTAMP in container (Vadim Fedorenko)   
  - scm: fix MSG_CTRUNC setting condition for SO_PASSSEC (Alexander Mikhalitsyn)   
  - wifi: ath6kl: reduce WARN to dev_dbg() in callback (Fedor Pchelkin)   
  - wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (Dan Carpenter)   
  - wifi: ath6kl: minor fix for allocation size (Alexey V. Vissarionov)   
  - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (Sumit Garg)   
  - x86/ioapic: Don't return 0 from arch_dynirq_lower_bound() (Saurabh Sengar)   
  - media: dm1105: Fix use after free bug in dm1105_remove due to race condition (Zheng Wang)   
  - x86/apic: Fix atomic update of offset in reserve_eilvt_offset() (Uros Bizjak)   
  - media: av7110: prevent underflow in write_ts_to_decoder() (Dan Carpenter)   
  - media: bdisp: Add missing check for create_workqueue (Jiasheng Jiang)   
  - drm/probe-helper: Cancel previous job before starting new one (Dom Cobley)   
  - drm/vgem: add missing mutex_destroy (Maíra Canal)   
  - drm/rockchip: Drop unbalanced obj unref (Rob Clark)   
  - selinux: ensure av_permissions.h is built when needed (Paul Moore)   
  - selinux: fix Makefile dependencies of flask.h (Ondrej Mosnacek)   
  - ubifs: Free memory for tmpfile name (Mårten Lindahl)   
  - ubi: Fix return value overwrite issue in try_write_vid_and_data() (Wang YanQing)   
  - i2c: omap: Fix standard mode false ACK readings (Reid Tonking)   
  - reiserfs: Add security prefix to xattr name in reiserfs_security_write() (Roberto Sassu)   
  - ring-buffer: Sync IRQ works before buffer destruction (Johannes Berg)   
  - MIPS: fw: Allow firmware to pass a empty env (Jiaxun Yang)   
  - staging: iio: resolver: ads1210: fix config mode (Nuno Sá)   
  - perf sched: Cast PTHREAD_STACK_MIN to int as it may turn into sysconf(__SC_THREAD_STACK_MIN_VALUE) (Arnaldo Carvalho de Melo)   
  - USB: dwc3: fix runtime pm imbalance on unbind (Johan Hovold)   
  - iio: adc: palmas_gpadc: fix NULL dereference on rmmod (Patrik Dahlström)   
  - USB: serial: option: add UNISOC vendor and TOZED LT70C product (Arınç ÜNAL)   
  - bluetooth: Perform careful capability checks in hci_sock_ioctl() (Ruihan Li)   
  - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (Jisoo Jang)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.527.2.el7uek]
changelog:
  - Revert "staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE" (Greg Kroah-Hartman)   
  - lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release() (Ben Hutchings)   
  - selinux: don't use make's grouped targets feature yet (Paul Moore)   
  - xfs: log recovery stage split EFIs with multiple extents (Wengang Wang)  [Orabug: 35475139]  
  - xfs: IO time one extent per EFI (Wengang Wang)  [Orabug: 35475139]  
  - uek_kabi: Add UEK_KABI_DEPRECATE_ENUM (Sherry Yang)  [Orabug: 35469884]  
  - bnxt_en: Clear DEFRAG flag in firmware message when retry flashing. (Pavan Chebbi)  [Orabug: 35406837]  
  - bnxt_en: Enable batch mode when using HWRM_NVM_MODIFY to flash packages. (Michael Chan)  [Orabug: 35406837]  
  - bnxt_en: Retry installing FW package under NO_SPACE error condition. (Pavan Chebbi)  [Orabug: 35406837]  
  - bnxt_en: Restructure bnxt_flash_package_from_fw_obj() to execute in a loop. (Pavan Chebbi)  [Orabug: 35406837]  
  - bnxt_en: Rearrange the logic in bnxt_flash_package_from_fw_obj(). (Michael Chan)  [Orabug: 35406837]  
  - bnxt_en: Refactor bnxt_flash_nvram. (Pavan Chebbi)  [Orabug: 35406837]  
  - bnxt_en: fix error handling when flashing from file (Edwin Peer)  [Orabug: 35406837]  
  - bnxt_en: Fix return code to "flash_device". (Vasundhara Volam)  [Orabug: 35406837]  
  - bnxt_en: Return -EAGAIN if fw command returns BUSY (Vasundhara Volam)  [Orabug: 35406837]  
  - bnxt_en: Convert error code in firmware message response to standard code. (Michael Chan)  [Orabug: 35406837]  
  - bnxt_en: return proper error when FW returns HWRM_ERR_CODE_RESOURCE_ACCESS_DENIED (Vasundhara Volam)  [Orabug: 35406837]  
  - bnxt_en: Use a common function to print the same ethtool -f error message. (Michael Chan)  [Orabug: 35406837]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.526.1.el7uek]
changelog:
  - mm, compaction: Skip all pinned pages during scan (Khalid Aziz)  [Orabug: 35300710]  
  - LTS version: v4.14.314 (Saeed Mirzamohammadi)   
  - ASN.1: Fix check for strdup() success (Ekaterina Orlova)   
  - iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() (Dan Carpenter)   
  - counter: 104-quad-8: Fix race condition between FLAG and CNTR reads (William Breathitt Gray)   
  - sctp: Call inet6_destroy_sock() via sk->sk_destruct(). (Kuniyuki Iwashima)   
  - dccp: Call inet6_destroy_sock() via sk->sk_destruct(). (Kuniyuki Iwashima)   
  - inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy(). (Kuniyuki Iwashima)   
  - tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct(). (Kuniyuki Iwashima)   
  - udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM). (Kuniyuki Iwashima)   
  - ext4: fix use-after-free in ext4_xattr_set_entry (Baokun Li)   
  - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Ritesh Harjani)   
  - Revert "ext4: fix use-after-free in ext4_xattr_set_entry" (Tudor Ambarus)   
  - x86/purgatory: Don't generate debug info for purgatory.ro (Pingfan Liu)   
  - memstick: fix memory leak if card device is never registered (Greg Kroah-Hartman)   
  - nilfs2: initialize unused bytes in segment summary blocks (Ryusuke Konishi)   
  - xen/netback: use same error messages for same errors (Juergen Gross)   
  - s390/ptrace: fix PTRACE_GET_LAST_BREAK error handling (Heiko Carstens)   
  - net: dsa: b53: mmap: add phy ops (Álvaro Fernández Rojas)   
  - scsi: core: Improve scsi_vpd_inquiry() checks (Damien Le Moal)   
  - scsi: megaraid_sas: Fix fw_crash_buffer_show() (Tomas Henzl)   
  - selftests: sigaltstack: fix -Wuninitialized (Nick Desaulniers)   
  - f2fs: Fix f2fs_truncate_partial_nodes ftrace event (Douglas Raillard)   
  - e1000e: Disable TSO on i219-LM card to increase speed (Sebastian Basierski)   
  - mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() (Nikita Zhandarovich)   
  - i40e: fix i40e_setup_misc_vector() error handling (Aleksandr Loktionov)   
  - i40e: fix accessing vsi->active_filters without holding lock (Aleksandr Loktionov)   
  - virtio_net: bugfix overflow inside xdp_linearize_page() (Xuan Zhuo)   
  - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Gwangun Jung)   
  - ARM: dts: rockchip: fix a typo error for rk3288 spdif node (Jianqun Xu)   
  - LTS version: v4.14.313 (Saeed Mirzamohammadi)   
  - arm64: KVM: Fix system register enumeration (Marc Zyngier)   
  - KVM: arm64: Filter out invalid core register IDs in KVM_GET_REG_LIST (Dave Martin)   
  - KVM: arm64: Factor out core register ID enumeration (Dave Martin)   
  - coresight-etm4: Fix for() loop drvdata->nr_addr_cmp range bug (Steve Clevenger)   
  - watchdog: sbsa_wdog: Make sure the timeout programming is within the limits (George Cherian)   
  - cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() (Waiman Long)   
  - ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size (Zhihao Cheng)   
  - verify_pefile: relax wrapper length check (Robbie Harwood)   
  - efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L (Hans de Goede)   
  - i2c: imx-lpi2c: clean rx/tx buffers upon new message (Alexander Stein)   
  - net: macb: fix a memory corruption in extended buffer descriptor mode (Roman Gushchin)   
  - qlcnic: check pci_reset_function result (Denis Plotnikov)   
  - niu: Fix missing unwind goto in niu_alloc_channels() (Harshit Mogalapalli)   
  - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition (Zheng Wang)   
  - mtdblock: tolerate corrected bit-flips (Bang Li)   
  - Bluetooth: Fix race condition in hidp_session_thread (Min Li)   
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (Luiz Augusto von Dentz)   
  - ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards (Oswald Buddenhagen)   
  - ALSA: i2c/cs8427: fix iec958 mixer control deactivation (Oswald Buddenhagen)   
  - ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard (Oswald Buddenhagen)   
  - ALSA: emu10k1: fix capture interrupt handler unlinking (Oswald Buddenhagen)   
  - mm/swap: fix swap_info_struct race between swapoff and get_swap_pages() (Rongwei Wang)   
  - ring-buffer: Fix race while reader and writer are on the same page (Zheng Yejian)   
  - ftrace: Mark get_lock_parent_ip() __always_inline (John Keeping)   
  - perf/core: Fix the same task check in perf_event_set_output (Kan Liang)   
  - nilfs2: fix sysfs interface lifetime (Ryusuke Konishi)   
  - nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() (Ryusuke Konishi)   
  - tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (Biju Das)   
  - iio: dac: cio-dac: Fix max DAC write value check for 12-bit (William Breathitt Gray)   
  - USB: serial: option: add Quectel RM500U-CN modem (Bjørn Mork)   
  - USB: serial: option: add Telit FE990 compositions (Enrico Sau)   
  - USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs (Kees Jan Koster)   
  - gpio: davinci: Add irq chip flag to skip set wake (Dhruva Gole)   
  - ipv6: Fix an uninit variable access bug in __ip6_make_skb() (Ziyang Xuan)   
  - icmp: guard against too small mtu (Eric Dumazet)   
  - wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (Felix Fietkau)   
  - pwm: cros-ec: Explicitly set .polarity in .get_state() (Uwe Kleine-König)   
  - LTS version: v4.14.312 (Saeed Mirzamohammadi)   
  - ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() (Harshit Mogalapalli)   
  - net: sched: cbq: dont intepret cls results when asked to drop (Jamal Hadi Salim) [Orabug: 34983585] {CVE-2023-23454}
  - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' (Ye Bin)   
  - usb: host: ohci-pxa27x: Fix and & vs | typo (Dan Carpenter)   
  - s390/uaccess: add missing earlyclobber annotations to __clear_user() (Heiko Carstens)   
  - drm/etnaviv: fix reference leak when mmaping imported buffer (Lucas Stach)   
  - ALSA: usb-audio: Fix regression on detection of Roland VS-100 (Takashi Iwai)   
  - ALSA: hda/conexant: Partial revert of a quirk for Lenovo (Takashi Iwai)   
  - pinctrl: at91-pio4: fix domain name assignment (Johan Hovold)   
  - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (David Disseldorp)   
  - Input: focaltech - use explicitly signed char type (Jason A. Donenfeld)   
  - i40e: fix registers dump after run ethtool adapter self test (Radoslaw Tyl)   
  - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Ivan Orlov)   
  - scsi: megaraid_sas: Fix crash after a double completion (Tomas Henzl)   
  - fbdev: au1200fb: Fix potential divide by zero (Wei Chen)   
  - fbdev: lxfb: Fix potential divide by zero (Wei Chen)   
  - fbdev: intelfb: Fix potential divide by zero (Wei Chen)   
  - fbdev: nvidia: Fix potential divide by zero (Wei Chen)   
  - sched_getaffinity: don't assume 'cpumask_size()' is fully initialized (Linus Torvalds)   
  - fbdev: tgafb: Fix potential divide by zero (Wei Chen)   
  - ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (Kuninori Morimoto)   
  - ALSA: asihpi: check pao in control_message() (Kuninori Morimoto)   
  - md: avoid signed overflow in slot_store() (NeilBrown)   
  - ocfs2: fix data corruption after failed write (Jan Kara via Ocfs2-devel)   
  - sched/fair: Sanitize vruntime of entity being migrated (Vincent Guittot)   
  - sched/fair: sanitize vruntime of entity being placed (Zhang Qiao)   
  - dm crypt: add cond_resched() to dmcrypt_write() (Mikulas Patocka)   
  - dm stats: check for and propagate alloc_percpu failure (Jiasheng Jiang)   
  - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (Wei Chen)   
  - nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() (Ryusuke Konishi)   
  - usb: chipidea: core: fix possible concurrent when switch role (Xu Yang)   
  - usb: chipdea: core: fix return -EINVAL if request role is the same with current role (Xu Yang)   
  - igb: revert rtnl_lock() that causes deadlock (Lin Ma)   
  - usb: gadget: u_audio: don't let userspace block driver unbind (Alvin Šipraga)   
  - scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR (Joel Selvaraj)   
  - sh: sanitize the flags on sigreturn (Al Viro)   
  - net: usb: qmi_wwan: add Telit 0x1080 composition (Enrico Sau)   
  - net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 (Enrico Sau)   
  - scsi: ufs: core: Add soft dependency on governor_simpleondemand (Adrien Thierry)   
  - scsi: target: iscsi: Fix an error message in iscsi_check_key() (Maurizio Lombardi)   
  - m68k: Only force 030 bus error if PC not in exception table (Michael Schmitz)   
  - ca8210: fix mac_len negative array access (Alexander Aring)   
  - riscv: Bump COMMAND_LINE_SIZE value to 1024 (Alexandre Ghiti)   
  - thunderbolt: Use const qualifier for `ring_interrupt_index` (Mario Limonciello)   
  - uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 (Yaroslav Furman)   
  - hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs (Frank Crawford)   
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (Zheng Wang)   
  - Bluetooth: btqcomsmd: Fix command timeout after setting BD address (Stephan Gerhold)   
  - net: mdio: thunder: Add missing fwnode_handle_put() (Liang He)   
  - hvc/xen: prevent concurrent accesses to the shared ring (Roger Pau Monne)   
  - atm: idt77252: fix kmemleak when rmmod idt77252 (Li Zetao)   
  - net/mlx5: Read the TC mapping of all priorities on ETS query (Maher Sanalla)   
  - bpf: Adjust insufficient default bpf_jit_limit (Daniel Borkmann)   
  - net/ps3_gelic_net: Use dma_mapping_error (Geoff Levand)   
  - net/ps3_gelic_net: Fix RX sk_buff length (Geoff Levand)   
  - net: qcom/emac: Fix use after free bug in emac_remove due to race condition (Zheng Wang)   
  - xirc2ps_cs: Fix use after free bug in xirc2ps_detach (Zheng Wang)   
  - qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info (Daniil Tatianin)   
  - net: usb: smsc95xx: Limit packet length to skb->len (Szymon Heidrich)   
  - scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (Yu Kuai)   
  - i2c: imx-lpi2c: check only for enabled interrupt flags (Alexander Stein)   
  - igbvf: Regard vf reset nack as success (Akihiko Odaki)   
  - intel/igbvf: free irq on the error path in igbvf_request_msix() (Gaosheng Cui)   
  - iavf: fix inverted Rx hash condition leading to disabled hash (Alexander Lobakin)   
  - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (Zheng Wang)   
  - LTS version: v4.14.311 (Saeed Mirzamohammadi)   
  - HID: uhid: Over-ride the default maximum data buffer value with our own (Lee Jones)   
  - HID: core: Provide new max_buffer_size attribute to over-ride the default (Lee Jones)   
  - serial: 8250_em: Fix UART port type (Biju Das)   
  - drm/i915: Don't use stolen memory for ring buffers with LLC (John Harrison)   
  - fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks (Helge Deller)   
  - ftrace: Fix invalid address access in lookup_rec() when index is 0 (Chen Zhongjin)   
  - sh: intc: Avoid spurious sizeof-pointer-div warning (Michael Karcher)   
  - ext4: fix task hung in ext4_xattr_delete_inode (Baokun Li)   
  - ext4: fail ext4_iget if special inode unallocated (Baokun Li)   
  - mmc: atmel-mci: fix race between stop command and start of next command (Tobias Schramm)   
  - media: m5mols: fix off-by-one loop termination error (Linus Torvalds)   
  - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition (Zheng Wang)   
  - hwmon: (adt7475) Fix masking of hysteresis registers (Tony O'Brien)   
  - hwmon: (adt7475) Display smoothing attributes in correct order (Tony O'Brien)   
  - ethernet: sun: add check for the mdesc_grab() (Liang He)   
  - net/iucv: Fix size of interrupt data (Alexandra Winter)   
  - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (Szymon Heidrich)   
  - ipv4: Fix incorrect table ID in IOCTL path (Ido Schimmel)   
  - block: sunvdc: add check for mdesc_grab() returning NULL (Liang He)   
  - nvmet: avoid potential UAF in nvmet_req_complete() (Damien Le Moal)   
  - net: usb: smsc75xx: Limit packet length to skb->len (Szymon Heidrich)   
  - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition (Zheng Wang)   
  - net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails (Heiner Kallweit)   
  - net: tunnels: annotate lockless accesses to dev->needed_headroom (Eric Dumazet)   
  - qed/qed_dev: guard against a possible division by zero (Daniil Tatianin)   
  - nfc: pn533: initialize struct pn533_out_arg properly (Fedor Pchelkin)   
  - tcp: tcp_make_synack() can be called from process context (Breno Leitao)   
  - fs: sysfs_emit_at: Remove PAGE_SIZE alignment check (Eric Biggers)   
  - ext4: fix cgroup writeback accounting with fs-layer encryption (Eric Biggers)   
  - LTS version: v4.14.310 (Saeed Mirzamohammadi)   
  - drm/i915: Don't use BAR mappings for ring buffers with LLC (John Harrison)   
  - tipc: improve function tipc_wait_for_cond() (Tung Nguyen)   
  - media: ov5640: Fix analogue gain control (Paul Elder)   
  - PCI: Add SolidRun vendor ID (Alvaro Karsz)   
  - macintosh: windfarm: Use unsigned type for 1-bit bitfields (Nathan Chancellor)   
  - alpha: fix R_ALPHA_LITERAL reloc for large modules (Edward Humes)   
  - MIPS: Fix a compilation issue (xurui)   
  - net: caif: Fix use-after-free in cfusbl_device_notify() (Shigeru Yoshida)   
  - ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping() (Eric Dumazet)   
  - nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties (Kang Chen)   
  - nfc: change order inside nfc_se_io error path (Fedor Pchelkin)   
  - ext4: zero i_disksize when initializing the bootloader inode (Zhihao Cheng)   
  - ext4: fix WARNING in ext4_update_inline_data (Ye Bin)   
  - ext4: move where set the MAY_INLINE_DATA flag is set (Ye Bin)   
  - ext4: fix another off-by-one fsmap error on 1k block filesystems (Darrick J. Wong)   
  - ext4: fix RENAME_WHITEOUT handling for inline directories (Eric Whitney)   
  - x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (Andrew Cooper)   
  - LTS version: v4.14.309 (Saeed Mirzamohammadi)   
  - staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh (Philipp Hortmann)   
  - staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script (Philipp Hortmann)   
  - wifi: cfg80211: Partial revert "wifi: cfg80211: Fix use after free for wext" (Hector Martin)   
  - LTS version: v4.14.308 (Saeed Mirzamohammadi)   
  - thermal: intel: powerclamp: Fix cur_state for multi package system (Srinivas Pandruvada)   
  - tcp: Fix listen() regression in 4.14.303. (Kuniyuki Iwashima)   
  - s390/setup: init jump labels before command line parsing (Vasily Gorbik)   
  - s390/maccess: add no DAT mode to kernel_write (Vasily Gorbik)   
  - Bluetooth: hci_sock: purge socket queues in the destruct() callback (Nguyen Dinh Phi)   
  - phy: rockchip-typec: Fix unsigned comparison with less than zero (Jiapeng Chong)   
  - usb: uvc: Enumerate valid values for color matching (Daniel Scally)   
  - USB: ene_usb6250: Allocate enough memory for full object (Kees Cook)   
  - usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math (Kees Cook)   
  - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word() (Harshit Mogalapalli)   
  - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word() (Harshit Mogalapalli)   
  - tools/iio/iio_utils:fix memory leak (Yulong Zhang)   
  - tty: serial: fsl_lpuart: disable the CTS when send break signal (Sherry Sun)   
  - tty: fix out-of-bounds access in tty_driver_lookup_tty() (Sven Schnelle)   
  - media: uvcvideo: Handle cameras with invalid descriptors (Ricardo Ribalda)   
  - firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3 (Darrell Kavanagh)   
  - tracing: Add NULL checks for buffer in ring_buffer_free_read_page() (Jia-Ju Bai)   
  - thermal: intel: quark_dts: fix error pointer dereference (Dan Carpenter)   
  - scsi: ipr: Work around fortify-string warning (Arnd Bergmann)   
  - tcp: tcp_check_req() can be called from process context (Eric Dumazet)   
  - ARM: dts: spear320-hmi: correct STMPE GPIO compatible (Krzysztof Kozlowski)   
  - nfc: fix memory leak of se_io context in nfc_genl_se_io (Fedor Pchelkin)   
  - 9p/xen: fix connection sequence (Juergen Gross)   
  - 9p/xen: fix version parsing (Juergen Gross)   
  - net: fix __dev_kfree_skb_any() vs drop monitor (Eric Dumazet)   
  - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() (Hangyu Hua)   
  - watchdog: pcwd_usb: Fix attempting to access uninitialized memory (Li Hua)   
  - watchdog: Fix kmemleak in watchdog_cdev_register (Chen Jun)   
  - watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path (ruanjinjie)   
  - x86: um: vdso: Add '%rcx' and '%r11' to the syscall clobber list (Ammar Faizi)   
  - ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed (Zhihao Cheng)   
  - ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show() (Zhihao Cheng)   
  - ubifs: ubifs_writepage: Mark page dirty after writing inode failed (Zhihao Cheng)   
  - ubifs: dirty_cow_znode: Fix memleak in error handling path (Zhihao Cheng)   
  - ubifs: Re-statistic cleaned znode count if commit failed (Zhihao Cheng)   
  - ubi: Fix possible null-ptr-deref in ubi_free_volume() (Yang Yingliang)   
  - ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume() (Li Zetao)   
  - ubi: Fix use-after-free when volume resizing failed (Li Zetao)   
  - ubifs: Reserve one leb for each journal head while doing budget (Zhihao Cheng)   
  - ubifs: Fix wrong dirty space budget for dirty inode (Zhihao Cheng)   
  - ubifs: Rectify space budget for ubifs_xrename() (Zhihao Cheng)   
  - ubi: ensure that VID header offset + VID header size <= alloc, size (George Kennedy)   
  - pwm: stm32-lp: fix the check on arr and cmp registers update (Fabrice Gasnier)   
  - fs/jfs: fix shift exponent db_agl2size negative (Liu Shixin via Jfs-discussion)   
  - net/sched: Retire tcindex classifier (Jamal Hadi Salim)   
  - kbuild: Port silent mode detection to future gnu make. (Dmitry Goncharov)   
  - drm/radeon: Fix eDP for single-display iMac11,2 (Mark Hawrylak)   
  - PCI: Avoid FLR for AMD FCH AHCI adapters (Damien Le Moal)   
  - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (Tomas Henzl)   
  - scsi: ses: Fix possible desc_ptr out-of-bounds accesses (Tomas Henzl)   
  - scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (Tomas Henzl)   
  - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (Tomas Henzl)   
  - scsi: ses: Don't attach if enclosure has no components (James Bottomley)   
  - scsi: qla2xxx: Fix erroneous link down (Quinn Tran)   
  - scsi: qla2xxx: Fix link failure in NPIV environment (Quinn Tran)   
  - ktest.pl: Fix missing "end_monitor" when machine check fails (Steven Rostedt)   
  - mips: fix syscall_get_nr (Elvira Khabirova)   
  - alpha: fix FEN fault handling (Al Viro)   
  - rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails (Ilya Dryomov)   
  - ARM: dts: exynos: correct TMU phandle in Odroid XU (Krzysztof Kozlowski)   
  - ARM: dts: exynos: correct TMU phandle in Exynos4 (Krzysztof Kozlowski)   
  - dm flakey: don't corrupt the zero page (Mikulas Patocka)   
  - dm flakey: fix logic when corrupting a bio (Mikulas Patocka)   
  - wifi: cfg80211: Fix use after free for wext (Alexander Wetzel)   
  - wifi: rtl8xxxu: Use a longer retry limit of 48 (Bitterblue Smith)   
  - ext4: refuse to create ea block when umounted (Jun Nie)   
  - ext4: optimize ea_inode block expansion (Jun Nie)   
  - ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls() (Dmitry Fomin)   
  - irqdomain: Drop bogus fwspec-mapping error handling (Johan Hovold)   
  - irqdomain: Fix disassociation race (Johan Hovold)   
  - irqdomain: Fix association race (Johan Hovold)   
  - ima: Align ima_file_mmap() parameters with mmap_file LSM hook (Roberto Sassu)   
  - Documentation/hw-vuln: Document the interaction between IBRS and STIBP (KP Singh)   
  - x86/microcode/AMD: Fix mixed steppings support (Borislav Petkov (AMD))   
  - x86/microcode/AMD: Add a @cpu parameter to the reloading functions (Borislav Petkov (AMD))   
  - x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter (Borislav Petkov (AMD))   
  - x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range (Yang Jihong)   
  - x86/kprobes: Fix __recover_optprobed_insn check optimizing logic (Yang Jihong)   
  - x86/reboot: Disable SVM, not just VMX, when stopping CPUs (Sean Christopherson)   
  - x86/crash: Disable virt in core NMI crash handler to avoid double shootdown (Sean Christopherson)   
  - x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows) (Sean Christopherson)   
  - udf: Fix file corruption when appending just after end of preallocated extent (Jan Kara)   
  - udf: Do not update file length for failed writes to inline files (Jan Kara)   
  - udf: Do not bother merging very long extents (Jan Kara)   
  - udf: Truncate added extents on failed expansion (Jan Kara)   
  - ocfs2: fix non-auto defrag path not working issue (Heming Zhao via Ocfs2-devel)   
  - ocfs2: fix defrag path triggering jbd2 ASSERT (Heming Zhao via Ocfs2-devel)   
  - f2fs: fix information leak in f2fs_move_inline_dirents() (Eric Biggers)   
  - fs: hfsplus: fix UAF issue in hfsplus_put_super (Dongliang Mu)   
  - hfs: fix missing hfs_bnode_get() in __hfs_bnode_create (Liu Shixin)   
  - s390/kprobes: fix current_kprobe never cleared after kprobes reenter (Vasily Gorbik)   
  - s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler (Vasily Gorbik)   
  - rtc: pm8xxx: fix set-alarm race (Johan Hovold)   
  - wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu (Jun ASAKA)   
  - spi: bcm63xx-hsspi: Fix multi-bit mode setting (William Zhang)   
  - dm cache: add cond_resched() to various workqueue loops (Mike Snitzer)   
  - dm thin: add cond_resched() to various workqueue loops (Mike Snitzer)   
  - pinctrl: at91: use devm_kasprintf() to avoid potential leaks (Claudiu Beznea)   
  - regulator: s5m8767: Bounds check id indexing into arrays (Kees Cook)   
  - regulator: max77802: Bounds check regulator id against opmode (Kees Cook)   
  - ASoC: kirkwood: Iterate over array indexes instead of using pointer math (Kees Cook)   
  - docs/scripts/gdb: add necessary make scripts_gdb step (Jakob Koschel)   
  - drm/msm/dsi: Add missing check for alloc_ordered_workqueue (Jiasheng Jiang)   
  - drm/radeon: free iio for atombios when driver shutdown (Liwei Song)   
  - ACPI: video: Fix Lenovo Ideapad Z570 DMI match (Hans de Goede)   
  - m68k: Check syscall_trace_enter() return code (Michael Schmitz)   
  - net: bcmgenet: Add a check for oversized packets (Florian Fainelli)   
  - ACPI: Don't build ACPICA with '-Os' (Mark Rutland)   
  - inet: fix fast path in __inet_hash_connect() (Pietro Borrello)   
  - timers: Prevent union confusion from unexpected restart_syscall() (Jann Horn)   
  - thermal: intel: Fix unsigned comparison with less than zero (Yang Li)   
  - rcu: Suppress smp_processor_id() complaint in synchronize_rcu_expedited_wait() (Paul E. McKenney)   
  - wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() (Jisoo Jang)   
  - ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy (Markuss Broks)   
  - udf: Define EFSCORRUPTED error code (Jan Kara)   
  - rpmsg: glink: Avoid infinite loop on intent for missing channel (Bjorn Andersson)   
  - media: usb: siano: Fix use after free bugs caused by do_submit_urb (Duoming Zhou)   
  - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (Duoming Zhou) [Orabug: 35181651] {CVE-2023-1118}
  - media: platform: ti: Add missing check for devm_regulator_get (Jiasheng Jiang)   
  - MIPS: vpe-mt: drop physical_memsize (Randy Dunlap)   
  - powerpc/pseries/lparcfg: add missing RTAS retry status handling (Nathan Lynch)   
  - powerpc/powernv/ioda: Skip unallocated resources when mapping to PE (Frederic Barrat)   
  - Input: ads7846 - don't check penirq immediately for 7845 (Luca Ellero)   
  - Input: ads7846 - don't report pressure for ads7845 (Luca Ellero)   
  - mtd: rawnand: sunxi: Fix the size of the last OOB region (Samuel Holland)   
  - mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read() (Qiheng Lin)   
  - dm: remove flush_scheduled_work() during local_exit() (Mike Snitzer)   
  - scsi: aic94xx: Add missing check for dma_map_single() (Jiasheng Jiang)   
  - hwmon: (ltc2945) Handle error case in ltc2945_value_store (Jonathan Cormier)   
  - gpio: vf610: connect GPIO label to dev name (Haibo Chen)   
  - ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress() (Kuninori Morimoto)   
  - drm/mediatek: Drop unbalanced obj unref (Rob Clark)   
  - drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness (Daniel Mentz)   
  - ALSA: hda/ca0132: minor fix for allocation size (Alexey V. Vissarionov)   
  - pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups (Miaoqian Lin)   
  - drm/msm/hdmi: Add missing check for alloc_ordered_workqueue (Jiasheng Jiang)   
  - gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id() (Liang He)   
  - drm/bridge: megachips: Fix error handling in i2c_register_driver() (Yuan Can)   
  - drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC (Geert Uytterhoeven)   
  - irqchip/irq-bcm7120-l2: Set IRQ_LEVEL for level triggered interrupts (Florian Fainelli)   
  - can: esd_usb: Move mislocated storage of SJA1000_ECC_SEG bits in case of a bus error (Frank Jungclaus)   
  - wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize() (Dan Carpenter)   
  - m68k: /proc/hardware should depend on PROC_FS (Randy Dunlap)   
  - crypto: rsa-pkcs1pad - Use akcipher_request_complete (Herbert Xu)   
  - Bluetooth: L2CAP: Fix potential user-after-free (Luiz Augusto von Dentz)   
  - cpufreq: davinci: Fix clk use after free (Uwe Kleine-König)   
  - irqchip/irq-mvebu-gicp: Fix refcount leak in mvebu_gicp_probe (Miaoqian Lin)   
  - irqchip/alpine-msi: Fix refcount leak in alpine_msix_init_domains (Miaoqian Lin)   
  - net/mlx5: Enhance debug print in page allocation failure (Jack Morgenstein)   
  - crypto: seqiv - Handle EBUSY correctly (Herbert Xu)   
  - ACPI: battery: Fix missing NUL-termination with large strings (Armin Wolf)   
  - wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() (Minsuk Kang)   
  - wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function (Fedor Pchelkin)   
  - wifi: orinoco: check return value of hermes_write_wordrec() (Alexey Kodanev)   
  - ACPICA: nsrepair: handle cases without a return value correctly (Daniil Tatianin)   
  - lib/mpi: Fix buffer overrun when SG is too long (Herbert Xu)   
  - genirq: Fix the return type of kstat_cpu_irqs_sum() (Zhen Lei)   
  - wifi: wl3501_cs: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - wifi: libertas: cmdresp: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - wifi: libertas: main: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid() (Zhengchao Shao)   
  - wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() (Zhang Changzhong)   
  - wifi: ipw2200: fix memory leak in ipw_wdev_init() (Zhengchao Shao)   
  - wifi: rtl8xxxu: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - wifi: libertas: fix memory leak in lbs_init_adapter() (Zhengchao Shao)   
  - arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name (Neil Armstrong)   
  - arm64: dts: amlogic: meson-gx: add missing unit address to rng node name (Neil Armstrong)   
  - arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name (Neil Armstrong)   
  - ARM: dts: exynos: correct wr-active property in Exynos3250 Rinato (Krzysztof Kozlowski)   
  - ARM: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init() (Yang Yingliang)   
  - arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address (Martin Blumenstingl)   
  - arm64: dts: meson-gx: Fix Ethernet MAC address unit name (Martin Blumenstingl)   
  - ARM: zynq: Fix refcount leak in zynq_early_slcr_init (Qiheng Lin)   
  - ARM: OMAP2+: Fix memory leak in realtime_counter_init() (Chen Hui)   
  - HID: asus: use spinlock to safely schedule workers (Pietro Borrello) [Orabug: 35181604] {CVE-2023-1079}
  - HID: asus: use spinlock to protect concurrent accesses (Pietro Borrello)   
  - HID: asus: Remove check for same LED brightness on set (Luke D. Jones)   
  - USB: core: Don't hold device lock while reading the "descriptors" sysfs file (Alan Stern)   
  - USB: serial: option: add support for VW/Skoda "Carstick LTE" (Florian Zumbiehl)   
  - dmaengine: sh: rcar-dmac: Check for error num after dma_set_max_seg_size (Jiasheng Jiang)   
  - bpf: Fix truncation handling for mod32 dst reg wrt zero (Daniel Borkmann)   
  - bpf: Fix 32 bit src register truncation on div/mod (Daniel Borkmann) [Orabug: 33041998] {CVE-2021-3600}
  - bpf: fix subprog verifier bypass by div/mod by 0 exception (Daniel Borkmann)   
  - bpf: Do not use ax register in interpreter on div/mod (Daniel Borkmann)   
  - net: Remove WARN_ON_ONCE(sk->sk_forward_alloc) from sk_stream_kill_queues(). (Kuniyuki Iwashima)   
  - IB/hfi1: Assign npages earlier (Dean Luick)   
  - btrfs: send: limit number of clones and allocated memory size (David Sterba)   
  - ARM: dts: rockchip: add power-domains property to dp node on rk3288 (Johan Jonker)   
  - LTS version: v4.14.307 (Saeed Mirzamohammadi)   
  - wifi: mwifiex: Add missing compatible string for SD8787 (Lukas Wunner)   
  - uaccess: Add speculation barrier to copy_from_user() (Dave Hansen)   
  - alarmtimer: Prevent starvation by small intervals and SIG_IGN (Thomas Gleixner)   
  - powerpc: dts: t208x: Disable 10G on MAC1 and MAC2 (Sean Anderson)   
  - random: always mix cycle counter in add_latent_entropy() (Jason A. Donenfeld)   
  - powerpc: dts: t208x: Mark MAC1 and MAC2 as 10G (Sean Anderson)   
  - wifi: rtl8xxxu: gen2: Turn on the rate control (Bitterblue Smith)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.527.1.el7uek]
changelog:
  - mips64: Enable CRYPTO_USER_API_SKCIPHER config (Vijay Kumar)  [Orabug: 35458816]  
  - net/rds: Fix copy&paste error (Gerd Rausch)  [Orabug: 35416949]  
  - uek-rpm: Blacklist cls_tcindex module (Somasundaram Krishnasamy)  [Orabug: 35408336]  
  - LTS version: v4.14.316 (Saeed Mirzamohammadi)   
  - 3c589_cs: Fix an error handling path in tc589_probe() (Christophe JAILLET)   
  - forcedeth: Fix an error handling path in nv_probe() (Christophe JAILLET)   
  - x86/show_trace_log_lvl: Ensure stack pointer is aligned, again (Vernon Lovejoy)   
  - xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() (Dan Carpenter)   
  - power: supply: sbs-charger: Fix INHIBITED bit for Status reg (Daisuke Nojiri)   
  - power: supply: bq27xxx: Fix poll_interval handling and races on remove (Hans de Goede)   
  - power: supply: bq27xxx: Fix I2C IRQ race on remove (Hans de Goede)   
  - power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition (Hans de Goede)   
  - power: supply: leds: Fix blink to LED on transition (Hans de Goede)   
  - ipv6: Fix out-of-bounds access in ipv6_find_tlv() (Gavrilov Ilia)   
  - net: fix skb leak in __skb_tstamp_tx() (Pratyush Yadav)   
  - media: radio-shark: Add endpoint checks (Alan Stern)   
  - USB: sisusbvga: Add endpoint checks (Alan Stern)   
  - x86/mm: Avoid incomplete Global INVLPG flushes (Saeed Mirzamohammadi)   
  - USB: core: Add routines for endpoint checks in old drivers (Alan Stern)   
  - selftests/memfd: Fix unknown type name build failure (Hardik Garg)   
  - netfilter: nf_tables: fix register ordering (Florian Westphal)   
  - netfilter: nf_tables: do not allow SET_ID to refer to another table (Pablo Neira Ayuso)   
  - netfilter: nf_tables: do not allow RULE_ID to refer to another chain (Pablo Neira Ayuso)   
  - netfilter: nft_dynset: do not reject set updates with NFT_SET_EVAL (Pablo Neira Ayuso)   
  - netfilter: nf_tables: stricter validation of element data (Pablo Neira Ayuso) [Orabug: 34362007] {CVE-2022-34918}
  - netfilter: nf_tables: allow up to 64 bytes in the set element data area (Pablo Neira Ayuso)   
  - netfilter: nf_tables: add nft_setelem_parse_key() (Pablo Neira Ayuso)   
  - netfilter: nf_tables: validate registers coming from userspace. (Pablo Neira Ayuso)   
  - netfilter: nftables: statify nft_parse_register() (Pablo Neira Ayuso)   
  - netfilter: nftables: add nft_parse_register_store() and use it (Pablo Neira Ayuso)   
  - netfilter: nftables: add nft_parse_register_load() and use it (Pablo Neira Ayuso)   
  - parisc: Allow to reboot machine after system halt (Helge Deller)   
  - m68k: Move signal frame following exception on 68020/030 (Finn Thain)   
  - spi: fsl-cpm: Use 16 bit mode for large transfers with even size (Christophe Leroy)   
  - spi: fsl-spi: Re-organise transfer bits_per_word adaptation (Christophe Leroy)   
  - spi: spi-fsl-spi: automatically adapt bits-per-word in cpu mode (Rasmus Villemoes)   
  - netfilter: nf_tables: bogus EBUSY in helper removal from transaction (Pablo Neira Ayuso)   
  - nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() (Ryusuke Konishi)   
  - ceph: force updating the msg pointer in non-split case (Xiubo Li)   
  - serial: Add support for Advantech PCI-1611U card (Vitaliy Tomin)   
  - statfs: enforce statfs[64] structure initialization (Ilya Leoshkevich)   
  - ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table (Nikhil Mahale)   
  - ALSA: hda: Fix Oops by 9.1 surround channel names (Takashi Iwai)   
  - usb-storage: fix deadlock when a scsi command timeouts more than once (Maxime Bizon)   
  - vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() (Eric Dumazet)   
  - igb: fix bit_shift to be in [1..8] range (Aleksandr Loktionov)   
  - cassini: Fix a memory leak in the error handling path of cas_init_one() (Christophe JAILLET)   
  - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Dong Chenchen)   
  - media: netup_unidvb: fix use-after-free at del_timer() (Duoming Zhou)   
  - vsock: avoid to close connected socket after the timeout (Zhuang Shengen)   
  - net: fec: Better handle pm_runtime_get() failing in .remove() (Uwe Kleine-König)   
  - af_key: Reject optional tunnel/BEET mode templates in outbound policies (Tobias Brunner)   
  - cpupower: Make TSC read per CPU for Mperf monitor (Wyes Karny)   
  - mfd: dln2: Fix memory leak in dln2_probe() (Qiang Ning)   
  - phy: st: miphy28lp: use _poll_timeout functions for waits (Alain Volmat)   
  - Input: xpad - add constants for GIP interface numbers (Vicki Pfau)   
  - clk: tegra20: fix gcc-7 constant overflow warning (Arnd Bergmann)   
  - recordmcount: Fix memory leaks in the uwrite function (Hao Zeng)   
  - sched: Fix KCSAN noinstr violation (Josh Poimboeuf)   
  - mcb-pci: Reallocate memory region to avoid memory overlapping (Rodríguez Barbarin, José Javier)   
  - serial: 8250: Reinit port->pm on port specific driver unbind (Tony Lindgren)   
  - HID: wacom: generic: Set battery quirk only when we see battery data (Jason Gerecke)   
  - spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 (Kevin Groeneveld)   
  - HID: logitech-hidpp: Reconcile USB and Unifying serials (Bastien Nocera)   
  - HID: logitech-hidpp: Don't use the USB serial for USB devices (Bastien Nocera)   
  - staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE (Philipp Hortmann)   
  - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (Min Li)   
  - wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (Hans de Goede)   
  - ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() (Ojaswin Mujoo)   
  - ext4: set goal start correctly in ext4_mb_normalize_request (Kemeng Shi)   
  - gfs2: Fix inode height consistency check (Andreas Gruenbacher)   
  - scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition (Zheng Wang)   
  - lib: cpu_rmap: Avoid use after free on rmap->obj array entries (Eli Cohen)   
  - net: Catch invalid index in XPS mapping (Nick Child)   
  - net: pasemi: Fix return type of pasemi_mac_start_tx() (Nathan Chancellor)   
  - ext2: Check block size validity during mount (Jan Kara)   
  - wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex (Hector Martin)   
  - ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects (void0red)   
  - ACPICA: Avoid undefined behavior: applying zero offset to null pointer (Tamir Duberstein)   
  - drm/tegra: Avoid potential 32-bit integer overflow (Nur Hussein)   
  - ACPI: EC: Fix oops when removing custom query handlers (Armin Wolf)   
  - memstick: r592: Fix UAF bug in r592_remove due to race condition (Zheng Wang)   
  - regmap: cache: Return error in cache sync operations for REGCACHE_NONE (Alexander Stein)   
  - fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() (Tetsuo Handa)   
  - af_unix: Fix a data race of sk->sk_receive_queue->qlen. (Kuniyuki Iwashima)   
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb (t.feng)   
  - net: annotate sk->sk_err write from do_recvmmsg() (Eric Dumazet)   
  - netlink: annotate accesses to nlk->cb_running (Eric Dumazet)   
  - net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). (Kuniyuki Iwashima)   
  - LTS version: v4.14.315 (Saeed Mirzamohammadi)   
  - mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock (Tetsuo Handa)   
  - printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h (Tetsuo Handa)   
  - drbd: correctly submit flush bio on barrier (Christoph Böhmwalder)   
  - serial: 8250: Fix serial8250_tx_empty() race with DMA Tx (Ilpo Järvinen)   
  - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (Ilpo Järvinen)   
  - perf bench: Share some global variables to fix build with gcc 10 (Arnaldo Carvalho de Melo)   
  - ext4: fix invalid free tracking in ext4_xattr_move_to_block() (Theodore Ts'o)   
  - ext4: remove a BUG_ON in ext4_mb_release_group_pa() (Theodore Ts'o)   
  - ext4: bail out of ext4_xattr_ibody_get() fails for any reason (Theodore Ts'o)   
  - ext4: add bounds checking in get_max_inline_xattr_value_size() (Theodore Ts'o)   
  - ext4: improve error recovery code paths in __ext4_remount() (Theodore Ts'o)   
  - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum (Tudor Ambarus)   
  - HID: wacom: Set a default resolution for older tablets (Ping Cheng)   
  - ARM: dts: s5pv210: correct MIPI CSIS clock name (Krzysztof Kozlowski)   
  - ARM: dts: exynos: fix WM8960 clock name in Itop Elite (Krzysztof Kozlowski)   
  - sh: nmi_debug: fix return value of __setup handler (Randy Dunlap)   
  - sh: math-emu: fix macro redefined warning (Randy Dunlap)   
  - cifs: fix pcchunk length type in smb2_copychunk_range (Pawel Witek)   
  - btrfs: print-tree: parent bytenr must be aligned to sector size (Anastasia Belova)   
  - btrfs: fix btrfs_prev_leaf() to not return the same key twice (Filipe Manana)   
  - perf symbols: Fix return incorrect build_id size in elf_read_build_id() (Yang Jihong)   
  - perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp() (Markus Elfring)   
  - perf vendor events power9: Remove UTF-8 characters from JSON files (Kajol Jain)   
  - ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` (Ruliang Lin)   
  - af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). (Kuniyuki Iwashima)   
  - net/sched: act_mirred: Add carrier check (Victor Nogueira)   
  - writeback: fix call of incorrect macro (Maxim Korotkov)   
  - sit: update dev->needed_headroom in ipip6_tunnel_bind_dev() (Cong Wang)   
  - netfilter: nf_tables: deactivate anonymous set from preparation phase (Pablo Neira Ayuso)   
  - netfilter: nf_tables: bogus EBUSY when deleting set after flush (Pablo Neira Ayuso)   
  - netfilter: nf_tables: use-after-free in failing rule with bound set (Pablo Neira Ayuso)   
  - netfilter: nft_hash: fix nft_hash_deactivate (Pablo Neira Ayuso)   
  - netfilter: nf_tables: unbind set in rule from commit path (Pablo Neira Ayuso)   
  - netfilter: nf_tables: split set destruction in deactivate and destroy phase (Florian Westphal)   
  - perf auxtrace: Fix address filter entire kernel size (Adrian Hunter)   
  - dm ioctl: fix nested locking in table_clear() to remove deadlock concern (Mike Snitzer)   
  - dm flakey: fix a crash with invalid table line (Mikulas Patocka)   
  - dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path (Mike Snitzer)   
  - s390/dasd: fix hanging blockdevice after request requeue (Stefan Haberland)   
  - btrfs: scrub: reject unsupported scrub flags (Qu Wenruo)   
  - clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (Quentin Schulz)   
  - wifi: rtl8xxxu: RTL8192EU always needs full init (Bitterblue Smith)   
  - nilfs2: fix infinite loop in nilfs_mdt_get_block() (Ryusuke Konishi)   
  - nilfs2: do not write dirty data after degenerating to read-only (Ryusuke Konishi)   
  - parisc: Fix argument pointer in real64_call_asm() (Helge Deller)   
  - dmaengine: at_xdmac: do not enable all cyclic channels (Claudiu Beznea)   
  - phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (Gaosheng Cui)   
  - NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease (Trond Myklebust)   
  - IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order (Patrick Kelsey)   
  - clk: add missing of_node_put() in "assigned-clocks" property parsing (Clément Léger)   
  - power: supply: generic-adc-battery: fix unit scaling (Sebastian Reichel)   
  - RDMA/rdmavt: Delete unnecessary NULL check (Natalia Petrova)   
  - perf/core: Fix hardlockup failure caused by perf throttle (Yang Jihong)   
  - powerpc/rtas: use memmove for potentially overlapping buffer copy (Nathan Lynch)   
  - macintosh: via-pmu-led: requires ATA to be set (Randy Dunlap)   
  - powerpc/sysdev/tsi108: fix resource printk format warnings (Randy Dunlap)   
  - powerpc/wii: fix resource printk format warnings (Randy Dunlap)   
  - powerpc/mpc512x: fix resource printk format warning (Randy Dunlap)   
  - macintosh/windfarm_smu_sat: Add missing of_node_put() (Liang He)   
  - spmi: Add a check for remove callback when removing a SPMI driver (Jishnu Prakash)   
  - staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (Philipp Hortmann)   
  - serial: 8250: Add missing wakeup event reporting (Florian Fainelli)   
  - tty: serial: fsl_lpuart: adjust buffer length to the intended size (Shenwei Wang)   
  - usb: chipidea: fix missing goto in `ci_hdrc_probe` (Yinhao Hu)   
  - sh: sq: Fix incorrect element size for allocating bitmap buffer (John Paul Adrian Glaubitz)   
  - uapi/linux/const.h: prefer ISO-friendly __typeof__ (Saeed Mirzamohammadi)   
  - ia64: mm/contig: fix section mismatch warning/error (Randy Dunlap)   
  - of: Fix modalias string generation (Miquel Raynal)   
  - spi: fsl-spi: Fix CPM/QE mode Litte Endian (Christophe Leroy)   
  - linux/vt_buffer.h: allow either builtin or modular for macros (Randy Dunlap)   
  - pstore: Revert pmsg_lock back to a normal mutex (John Stultz)   
  - tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. (Kuniyuki Iwashima)   
  - net: amd: Fix link leak when verifying config failed (Gencen Gan)   
  - ipv4: Fix potential uninit variable access bug in __ip_make_skb() (Ziyang Xuan)   
  - ixgbe: Enable setting RSS table to default values (Joe Damato)   
  - ixgbe: Allow flow hash to be set via ethtool (Joe Damato)   
  - wifi: iwlwifi: mvm: check firmware response size (Johannes Berg)   
  - wifi: iwlwifi: make the loop for card preparation effective (Emmanuel Grumbach)   
  - md/raid10: fix leak of 'r10bio->remaining' for recovery (Yu Kuai)   
  - scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS (Danila Chernetsov)   
  - scsi: target: iscsit: Fix TAS handling during conn cleanup (Mike Christie)   
  - net/packet: convert po->auxdata to an atomic flag (Eric Dumazet)   
  - net/packet: convert po->origdev to an atomic flag (Eric Dumazet)   
  - vlan: partially enable SIOCSHWTSTAMP in container (Vadim Fedorenko)   
  - scm: fix MSG_CTRUNC setting condition for SO_PASSSEC (Alexander Mikhalitsyn)   
  - wifi: ath6kl: reduce WARN to dev_dbg() in callback (Fedor Pchelkin)   
  - wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (Dan Carpenter)   
  - wifi: ath6kl: minor fix for allocation size (Alexey V. Vissarionov)   
  - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (Sumit Garg)   
  - x86/ioapic: Don't return 0 from arch_dynirq_lower_bound() (Saurabh Sengar)   
  - media: dm1105: Fix use after free bug in dm1105_remove due to race condition (Zheng Wang)   
  - x86/apic: Fix atomic update of offset in reserve_eilvt_offset() (Uros Bizjak)   
  - media: av7110: prevent underflow in write_ts_to_decoder() (Dan Carpenter)   
  - media: bdisp: Add missing check for create_workqueue (Jiasheng Jiang)   
  - drm/probe-helper: Cancel previous job before starting new one (Dom Cobley)   
  - drm/vgem: add missing mutex_destroy (Maíra Canal)   
  - drm/rockchip: Drop unbalanced obj unref (Rob Clark)   
  - selinux: ensure av_permissions.h is built when needed (Paul Moore)   
  - selinux: fix Makefile dependencies of flask.h (Ondrej Mosnacek)   
  - ubifs: Free memory for tmpfile name (Mårten Lindahl)   
  - ubi: Fix return value overwrite issue in try_write_vid_and_data() (Wang YanQing)   
  - i2c: omap: Fix standard mode false ACK readings (Reid Tonking)   
  - reiserfs: Add security prefix to xattr name in reiserfs_security_write() (Roberto Sassu)   
  - ring-buffer: Sync IRQ works before buffer destruction (Johannes Berg)   
  - MIPS: fw: Allow firmware to pass a empty env (Jiaxun Yang)   
  - staging: iio: resolver: ads1210: fix config mode (Nuno Sá)   
  - perf sched: Cast PTHREAD_STACK_MIN to int as it may turn into sysconf(__SC_THREAD_STACK_MIN_VALUE) (Arnaldo Carvalho de Melo)   
  - USB: dwc3: fix runtime pm imbalance on unbind (Johan Hovold)   
  - iio: adc: palmas_gpadc: fix NULL dereference on rmmod (Patrik Dahlström)   
  - USB: serial: option: add UNISOC vendor and TOZED LT70C product (Arınç ÜNAL)   
  - bluetooth: Perform careful capability checks in hci_sock_ioctl() (Ruihan Li)   
  - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (Jisoo Jang)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.528.1.el7uek]
changelog:
  - LTS version: v4.14.320 (Saeed Mirzamohammadi)   
  - i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle (Clark Wang)   
  - x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys (Dheeraj Kumar Srivastava)   
  - drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl (Min Li)   
  - drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl (Min Li)   
  - drm/exynos: vidi: fix a wrong error return (Inki Dae)   
  - s390/cio: unregister device when the only path is gone (Vineeth Vijayan)   
  - usb: gadget: udc: fix NULL dereference in remove() (Dan Carpenter)   
  - fbdev: imsttfb: Release framebuffer and dealloc cmap on error path (Helge Deller)   
  - nfcsim.c: Fix error checking for debugfs_create_dir (Osama Muhammad)   
  - arm64: Add missing Set/Way CMO encodings (Marc Zyngier)   
  - HID: wacom: Add error check to wacom_parse_and_register() (Denis Arefev)   
  - scsi: target: iscsi: Prevent login threads from racing between each other (Maurizio Lombardi)   
  - netfilter: nf_tables: disallow element updates of bound anonymous sets (Pablo Neira Ayuso)   
  - be2net: Extend xmit workaround to BE3 chip (Ross Lagerwall)   
  - mmc: usdhi60rol0: fix deferred probing (Sergey Shtylyov)   
  - mmc: omap_hsmmc: fix deferred probing (Sergey Shtylyov)   
  - mmc: omap: fix deferred probing (Sergey Shtylyov)   
  - mmc: mtk-sd: fix deferred probing (Sergey Shtylyov)   
  - net: qca_spi: Avoid high load if QCA7000 is not available (Stefan Wahren)   
  - xfrm: Linearize the skb after offloading if needed. (Sebastian Andrzej Siewior)   
  - nilfs2: prevent general protection fault in nilfs_clear_dirty_page() (Ryusuke Konishi)   
  - cgroup: Do not corrupt task iteration when rebinding subsystem (Xiu Jianfeng)   
  - Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs (Michael Kelley)   
  - nilfs2: fix buffer corruption due to concurrent device reads (Ryusuke Konishi)   
  - nilfs2: reject devices with insufficient block count (Ryusuke Konishi)   
  - serial: lantiq: add missing interrupt ack (Bernhard Seibold)   
  - LTS version: v4.14.319 (Saeed Mirzamohammadi)   
  - mmc: block: ensure error propagation for non-blk (Christian Loehle)   
  - powerpc: Fix defconfig choice logic when cross compiling (Michael Ellerman)   
  - neighbour: delete neigh_lookup_nodev as not used (Leon Romanovsky)   
  - neighbour: Remove unused inline function neigh_key_eq16() (Gaosheng Cui)   
  - selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET (Alex Maftei)   
  - net: tipc: resize nlattr array to correct size (Lin Ma)   
  - net: lapbether: only support ethernet devices (Eric Dumazet)   
  - drm/nouveau/dp: check for NULL nv_connector->native_mode (Natalia Petrova)   
  - igb: fix nvm.ops.read() error handling (Aleksandr Loktionov)   
  - sctp: fix an error code in sctp_sf_eat_auth() (Dan Carpenter)   
  - IB/isert: Fix incorrect release of isert connection (Saravanan Vajravel)   
  - IB/isert: Fix possible list corruption in CMA handler (Saravanan Vajravel)   
  - IB/isert: Fix dead lock in ib_isert (Saravanan Vajravel)   
  - ping6: Fix send to link-local addresses with VRF. (Guillaume Nault)   
  - netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM (Pablo Neira Ayuso)   
  - USB: serial: option: add Quectel EM061KGL series (Jerry Meng)   
  - Remove DECnet support from kernel (Stephen Hemminger)   
  - net: usb: qmi_wwan: add support for Compal RXM-G1 (Wes Huang)   
  - nilfs2: fix possible out-of-bounds segment allocation in resize ioctl (Ryusuke Konishi)   
  - nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() (Ryusuke Konishi)   
  - nios2: dts: Fix tse_mac "max-frame-size" property (Janne Grunau)   
  - ocfs2: check new file size on fallocate call (Luís Henriques)   
  - ocfs2: fix use-after-free when unmounting read-only filesystem (Luís Henriques)   
  - xen/blkfront: Only check REQ_FUA for writes (Ross Lagerwall)   
  - mips: Move initrd_start check after initrd address sanitisation. (Liviu Dudau)   
  - MIPS: Alchemy: fix dbdma2 (Manuel Lauss)   
  - power: supply: Fix logic checking if system is running from battery (Mario Limonciello)   
  - regulator: Fix error checking for debugfs_create_dir (Osama Muhammad)   
  - power: supply: Ratelimit no data debug output (Marek Vasut)   
  - ARM: dts: vexpress: add missing cache properties (Krzysztof Kozlowski)   
  - power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() (Hans de Goede)   
  - power: supply: ab8500: Fix external_power_changed race (Hans de Goede)   
  - LTS version: v4.14.318 (Saeed Mirzamohammadi)   
  - btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() (Zixuan Fu)   
  - btrfs: check return value of btrfs_commit_transaction in relocation (Josef Bacik)   
  - ext4: only check dquot_initialize_needed() when debugging (Theodore Ts'o)   
  - i2c: sprd: Delete i2c adapter in .remove's error path (Uwe Kleine-König)   
  - Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk (Luiz Augusto von Dentz)   
  - ceph: fix use-after-free bug for inodes when flushing capsnaps (Xiubo Li)   
  - drm/amdgpu: fix xclk freq on CHIP_STONEY (Chia-I Wu)   
  - Input: psmouse - fix OOB access in Elantech protocol (Dmitry Torokhov)   
  - Input: xpad - delete a Razer DeathAdder mouse VID/PID entry (Ismael Ferreras Morezuelas)   
  - batman-adv: Broken sync while rescheduling delayed work (Vladislav Efanov)   
  - bnxt_en: Query default VLAN before VNIC setup on a VF (Somnath Kotur)   
  - net: sched: move rtm_tca_policy declaration to include file (Eric Dumazet)   
  - rfs: annotate lockless accesses to RFS sock flow table (Eric Dumazet)   
  - rfs: annotate lockless accesses to sk->sk_rxhash (Eric Dumazet)   
  - Bluetooth: L2CAP: Add missing checks for invalid DCID (Sungwoo Kim)   
  - Bluetooth: Fix l2cap_disconnect_req deadlock (Ying Hsu)   
  - spi: qup: Request DMA before enabling clocks (Stephan Gerhold)   
  - i40e: fix build warnings in i40e_alloc.h (Greg Kroah-Hartman)   
  - i40iw: fix build warning in i40iw_manage_apbvt() (Greg Kroah-Hartman)   
  - LTS version: v4.14.317 (Saeed Mirzamohammadi)   
  - wifi: rtlwifi: 8192de: correct checking of IQK reload (Ping-Ke Shih)   
  - Fix double fget() in vhost_net_set_backend() (Al Viro)   
  - net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize (Tudor Ambarus)   
  - cdc_ncm: Fix the build warning (Alexander Bersenev)   
  - cdc_ncm: Implement the 32-bit version of NCM Transfer Block (Alexander Bersenev)   
  - scsi: dpt_i2o: Do not process completions with invalid addresses (Ben Hutchings)   
  - scsi: dpt_i2o: Remove broken pass-through ioctl (I2OUSERCMD) (Ben Hutchings)   
  - fbcon: Fix null-ptr-deref in soft_cursor (Helge Deller)   
  - ext4: add lockdep annotations for i_data_sem for ea_inode's (Theodore Ts'o)   
  - tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK (Sherry Sun)   
  - mmc: vub300: fix invalid response handling (Deren Wu)   
  - regulator: da905{2,5}: Remove unnecessary array check (Nathan Chancellor)   
  - wifi: rtlwifi: remove always-true condition pointed out by GCC 12 (Jakub Kicinski)   
  - lib/dynamic_debug.c: use address-of operator on section symbols (Nathan Chancellor)   
  - kernel/extable.c: use address-of operator on section symbols (Nathan Chancellor)   
  - eth: sun: cassini: remove dead code (Martin Liška)   
  - gcc-12: disable '-Wdangling-pointer' warning for now (Linus Torvalds)   
  - ACPI: thermal: drop an always true check (Adam Borowski)   
  - x86/boot: Wrap literal addresses in absolute_pointer() (Kees Cook)   
  - ata: libata-scsi: Use correct device no in ata_find_dev() (Damien Le Moal)   
  - scsi: stex: Fix gcc 13 warnings (Bart Van Assche)   
  - usb: gadget: f_fs: Add unbind event before functionfs_unbind (Uttkarsh Aggarwal)   
  - net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 (Sebastian Krzyszkowiak)   
  - iio: dac: mcp4725: Fix i2c_master_send() return value handling (Marek Vasut)   
  - HID: wacom: avoid integer overflow in wacom_intuos_inout() (Nikita Zhandarovich)   
  - iio: adc: mxs-lradc: fix the order of two cleanup operations (Jiakai Luo)   
  - mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() (Dan Carpenter)   
  - atm: hide unused procfs functions (Arnd Bergmann)   
  - ALSA: oss: avoid missing-prototype warnings (Arnd Bergmann)   
  - netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT (Tom Rix)   
  - wifi: b43: fix incorrect __packed annotation (Arnd Bergmann)   
  - scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed (Wenchao Hao)   
  - wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value (Yun Lu)   
  - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 (Hyunwoo Kim)   
  - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() (Takashi Iwai)   
  - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() (Hyunwoo Kim)   
  - media: netup_unidvb: fix irq init by register it at the end of probe (Wei Chen)   
  - media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address (Wei Chen)   
  - media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() (Wei Chen)   
  - media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer (Zhang Shurong)   
  - media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() (Wei Chen)   
  - media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() (Wei Chen)   
  - media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() (Wei Chen)   
  - ASoC: ssm2602: Add workaround for playback distortions (Paweł Anikiel)   
  - ASoC: dwc: limit the number of overrun messages (Maxim Kochetkov)   
  - nbd: Fix debugfs_create_dir error checking (Ivan Orlov)   
  - fbdev: stifb: Fix info entry in sti_struct on error path (Helge Deller)   
  - fbdev: modedb: Add 1920x1080 at 60 Hz video mode (Helge Deller)   
  - ARM: 9295/1: unwind:fix unwind abort for uleb128 case (Haibo Li)   
  - mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() (Lee Jones)   
  - net: dsa: mv88e6xxx: Increase wait after reset deactivation (Andreas Svensson)   
  - udp6: Fix race condition in udp6_sendmsg & connect (Vladislav Efanov)   
  - tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set (Cambda Zhu)   
  - af_packet: do not use READ_ONCE() in packet_bind() (Eric Dumazet)   
  - af_packet: Fix data-races of pkt_sk(sk)->num. (Kuniyuki Iwashima)   
  - netrom: fix info-leak in nr_write_internal() (Eric Dumazet)   
  - dmaengine: pl330: rename _start to prevent build error (Randy Dunlap)   
  - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (Ruihan Li)   
  - ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg (Cezary Rojewski)   
  - power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize (Hans de Goede)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.528.2.1.el7uek]
changelog:
  - uek-rpm: Disable cls_tcindex in file tcindex-disable.conf (Sherry Yang)  [Orabug: 35698204]  
  - x86/microcode/AMD: Clean up per-family patch size checks (Borislav Petkov)  [Orabug: 35698200]  
  - Revert "sched/fair: sanitize vruntime of entity being placed" (Saeed Mirzamohammadi)  [Orabug: 35698196]  
  - Revert "sched/fair: Sanitize vruntime of entity being migrated" (Saeed Mirzamohammadi)  [Orabug: 35698196]  
  - uek-rpm: Update kernel's linux-firmware dependency. (Somasundaram Krishnasamy)  [Orabug: 35698191]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.528.2.2.el7uek]
changelog:
  - xfs: reserve less log space when recovering log intent items (Darrick J. Wong)  [Orabug: 35905454]  
  - xfs: reserve blocks for refcount / rmap log item recovery (Darrick J. Wong)  [Orabug: 35905454]  
  - ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block (Gautham Ananthakrishna)  [Orabug: 35905446]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.528.2.3.el7uek]
changelog:
  - bnxt_en: fix NULL dereference in bnxt_flash_package_from_file() (Samasth Norway Ananda)  [Orabug: 36201748]


author: Yifei Liu <yifei.l.liu@oracle.com> [4.14.35-2047.528.2.4.el7uek]
changelog:
  - scsi: megaraid_sas: Correct value passed to scsi_device_lookup() (Guixin Liu)  [Orabug: 36345482]  
  - scsi: megaraid_sas: Update max supported LD IDs to 240 (Chandrakanth Patil)  [Orabug: 36345456]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.527.1.el7uek]
changelog:
  - mips64: Enable CRYPTO_USER_API_SKCIPHER config (Vijay Kumar)  [Orabug: 35458816]  
  - net/rds: Fix copy&paste error (Gerd Rausch)  [Orabug: 35416949]  
  - uek-rpm: Blacklist cls_tcindex module (Somasundaram Krishnasamy)  [Orabug: 35408336]  
  - LTS version: v4.14.316 (Saeed Mirzamohammadi)   
  - 3c589_cs: Fix an error handling path in tc589_probe() (Christophe JAILLET)   
  - forcedeth: Fix an error handling path in nv_probe() (Christophe JAILLET)   
  - x86/show_trace_log_lvl: Ensure stack pointer is aligned, again (Vernon Lovejoy)   
  - xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() (Dan Carpenter)   
  - power: supply: sbs-charger: Fix INHIBITED bit for Status reg (Daisuke Nojiri)   
  - power: supply: bq27xxx: Fix poll_interval handling and races on remove (Hans de Goede)   
  - power: supply: bq27xxx: Fix I2C IRQ race on remove (Hans de Goede)   
  - power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition (Hans de Goede)   
  - power: supply: leds: Fix blink to LED on transition (Hans de Goede)   
  - ipv6: Fix out-of-bounds access in ipv6_find_tlv() (Gavrilov Ilia)   
  - net: fix skb leak in __skb_tstamp_tx() (Pratyush Yadav)   
  - media: radio-shark: Add endpoint checks (Alan Stern)   
  - USB: sisusbvga: Add endpoint checks (Alan Stern)   
  - x86/mm: Avoid incomplete Global INVLPG flushes (Saeed Mirzamohammadi)   
  - USB: core: Add routines for endpoint checks in old drivers (Alan Stern)   
  - selftests/memfd: Fix unknown type name build failure (Hardik Garg)   
  - netfilter: nf_tables: fix register ordering (Florian Westphal)   
  - netfilter: nf_tables: do not allow SET_ID to refer to another table (Pablo Neira Ayuso)   
  - netfilter: nf_tables: do not allow RULE_ID to refer to another chain (Pablo Neira Ayuso)   
  - netfilter: nft_dynset: do not reject set updates with NFT_SET_EVAL (Pablo Neira Ayuso)   
  - netfilter: nf_tables: stricter validation of element data (Pablo Neira Ayuso) [Orabug: 34362007] {CVE-2022-34918}
  - netfilter: nf_tables: allow up to 64 bytes in the set element data area (Pablo Neira Ayuso)   
  - netfilter: nf_tables: add nft_setelem_parse_key() (Pablo Neira Ayuso)   
  - netfilter: nf_tables: validate registers coming from userspace. (Pablo Neira Ayuso) [Orabug: 34012908] {CVE-2022-1015}
  - netfilter: nftables: statify nft_parse_register() (Pablo Neira Ayuso)   
  - netfilter: nftables: add nft_parse_register_store() and use it (Pablo Neira Ayuso)   
  - netfilter: nftables: add nft_parse_register_load() and use it (Pablo Neira Ayuso)   
  - parisc: Allow to reboot machine after system halt (Helge Deller)   
  - m68k: Move signal frame following exception on 68020/030 (Finn Thain)   
  - spi: fsl-cpm: Use 16 bit mode for large transfers with even size (Christophe Leroy)   
  - spi: fsl-spi: Re-organise transfer bits_per_word adaptation (Christophe Leroy)   
  - spi: spi-fsl-spi: automatically adapt bits-per-word in cpu mode (Rasmus Villemoes)   
  - netfilter: nf_tables: bogus EBUSY in helper removal from transaction (Pablo Neira Ayuso)   
  - nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() (Ryusuke Konishi)   
  - ceph: force updating the msg pointer in non-split case (Xiubo Li)   
  - serial: Add support for Advantech PCI-1611U card (Vitaliy Tomin)   
  - statfs: enforce statfs[64] structure initialization (Ilya Leoshkevich)   
  - ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table (Nikhil Mahale)   
  - ALSA: hda: Fix Oops by 9.1 surround channel names (Takashi Iwai)   
  - usb-storage: fix deadlock when a scsi command timeouts more than once (Maxime Bizon)   
  - vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() (Eric Dumazet)   
  - igb: fix bit_shift to be in [1..8] range (Aleksandr Loktionov)   
  - cassini: Fix a memory leak in the error handling path of cas_init_one() (Christophe JAILLET)   
  - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Dong Chenchen)   
  - media: netup_unidvb: fix use-after-free at del_timer() (Duoming Zhou)   
  - vsock: avoid to close connected socket after the timeout (Zhuang Shengen)   
  - net: fec: Better handle pm_runtime_get() failing in .remove() (Uwe Kleine-König)   
  - af_key: Reject optional tunnel/BEET mode templates in outbound policies (Tobias Brunner)   
  - cpupower: Make TSC read per CPU for Mperf monitor (Wyes Karny)   
  - mfd: dln2: Fix memory leak in dln2_probe() (Qiang Ning)   
  - phy: st: miphy28lp: use _poll_timeout functions for waits (Alain Volmat)   
  - Input: xpad - add constants for GIP interface numbers (Vicki Pfau)   
  - clk: tegra20: fix gcc-7 constant overflow warning (Arnd Bergmann)   
  - recordmcount: Fix memory leaks in the uwrite function (Hao Zeng)   
  - sched: Fix KCSAN noinstr violation (Josh Poimboeuf)   
  - mcb-pci: Reallocate memory region to avoid memory overlapping (Rodríguez Barbarin, José Javier)   
  - serial: 8250: Reinit port->pm on port specific driver unbind (Tony Lindgren)   
  - HID: wacom: generic: Set battery quirk only when we see battery data (Jason Gerecke)   
  - spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 (Kevin Groeneveld)   
  - HID: logitech-hidpp: Reconcile USB and Unifying serials (Bastien Nocera)   
  - HID: logitech-hidpp: Don't use the USB serial for USB devices (Bastien Nocera)   
  - staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE (Philipp Hortmann)   
  - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (Min Li)   
  - wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (Hans de Goede)   
  - ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() (Ojaswin Mujoo)   
  - ext4: set goal start correctly in ext4_mb_normalize_request (Kemeng Shi)   
  - gfs2: Fix inode height consistency check (Andreas Gruenbacher)   
  - scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition (Zheng Wang)   
  - lib: cpu_rmap: Avoid use after free on rmap->obj array entries (Eli Cohen)   
  - net: Catch invalid index in XPS mapping (Nick Child)   
  - net: pasemi: Fix return type of pasemi_mac_start_tx() (Nathan Chancellor)   
  - ext2: Check block size validity during mount (Jan Kara)   
  - wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex (Hector Martin)   
  - ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects (void0red)   
  - ACPICA: Avoid undefined behavior: applying zero offset to null pointer (Tamir Duberstein)   
  - drm/tegra: Avoid potential 32-bit integer overflow (Nur Hussein)   
  - ACPI: EC: Fix oops when removing custom query handlers (Armin Wolf)   
  - memstick: r592: Fix UAF bug in r592_remove due to race condition (Zheng Wang)   
  - regmap: cache: Return error in cache sync operations for REGCACHE_NONE (Alexander Stein)   
  - fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() (Tetsuo Handa)   
  - af_unix: Fix a data race of sk->sk_receive_queue->qlen. (Kuniyuki Iwashima)   
  - ipvlan:Fix out-of-bounds caused by unclear skb->cb (t.feng)   
  - net: annotate sk->sk_err write from do_recvmmsg() (Eric Dumazet)   
  - netlink: annotate accesses to nlk->cb_running (Eric Dumazet)   
  - net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). (Kuniyuki Iwashima)   
  - LTS version: v4.14.315 (Saeed Mirzamohammadi)   
  - mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock (Tetsuo Handa)   
  - printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h (Tetsuo Handa)   
  - drbd: correctly submit flush bio on barrier (Christoph Böhmwalder)   
  - serial: 8250: Fix serial8250_tx_empty() race with DMA Tx (Ilpo Järvinen)   
  - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (Ilpo Järvinen)   
  - perf bench: Share some global variables to fix build with gcc 10 (Arnaldo Carvalho de Melo)   
  - ext4: fix invalid free tracking in ext4_xattr_move_to_block() (Theodore Ts'o)   
  - ext4: remove a BUG_ON in ext4_mb_release_group_pa() (Theodore Ts'o)   
  - ext4: bail out of ext4_xattr_ibody_get() fails for any reason (Theodore Ts'o)   
  - ext4: add bounds checking in get_max_inline_xattr_value_size() (Theodore Ts'o)   
  - ext4: improve error recovery code paths in __ext4_remount() (Theodore Ts'o)   
  - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum (Tudor Ambarus)   
  - HID: wacom: Set a default resolution for older tablets (Ping Cheng)   
  - ARM: dts: s5pv210: correct MIPI CSIS clock name (Krzysztof Kozlowski)   
  - ARM: dts: exynos: fix WM8960 clock name in Itop Elite (Krzysztof Kozlowski)   
  - sh: nmi_debug: fix return value of __setup handler (Randy Dunlap)   
  - sh: math-emu: fix macro redefined warning (Randy Dunlap)   
  - cifs: fix pcchunk length type in smb2_copychunk_range (Pawel Witek)   
  - btrfs: print-tree: parent bytenr must be aligned to sector size (Anastasia Belova)   
  - btrfs: fix btrfs_prev_leaf() to not return the same key twice (Filipe Manana)   
  - perf symbols: Fix return incorrect build_id size in elf_read_build_id() (Yang Jihong)   
  - perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp() (Markus Elfring)   
  - perf vendor events power9: Remove UTF-8 characters from JSON files (Kajol Jain)   
  - ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` (Ruliang Lin)   
  - af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). (Kuniyuki Iwashima)   
  - net/sched: act_mirred: Add carrier check (Victor Nogueira)   
  - writeback: fix call of incorrect macro (Maxim Korotkov)   
  - sit: update dev->needed_headroom in ipip6_tunnel_bind_dev() (Cong Wang)   
  - netfilter: nf_tables: deactivate anonymous set from preparation phase (Pablo Neira Ayuso)   
  - netfilter: nf_tables: bogus EBUSY when deleting set after flush (Pablo Neira Ayuso)   
  - netfilter: nf_tables: use-after-free in failing rule with bound set (Pablo Neira Ayuso)   
  - netfilter: nft_hash: fix nft_hash_deactivate (Pablo Neira Ayuso)   
  - netfilter: nf_tables: unbind set in rule from commit path (Pablo Neira Ayuso)   
  - netfilter: nf_tables: split set destruction in deactivate and destroy phase (Florian Westphal)   
  - perf auxtrace: Fix address filter entire kernel size (Adrian Hunter)   
  - dm ioctl: fix nested locking in table_clear() to remove deadlock concern (Mike Snitzer)   
  - dm flakey: fix a crash with invalid table line (Mikulas Patocka)   
  - dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path (Mike Snitzer)   
  - s390/dasd: fix hanging blockdevice after request requeue (Stefan Haberland)   
  - btrfs: scrub: reject unsupported scrub flags (Qu Wenruo)   
  - clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (Quentin Schulz)   
  - wifi: rtl8xxxu: RTL8192EU always needs full init (Bitterblue Smith)   
  - nilfs2: fix infinite loop in nilfs_mdt_get_block() (Ryusuke Konishi)   
  - nilfs2: do not write dirty data after degenerating to read-only (Ryusuke Konishi)   
  - parisc: Fix argument pointer in real64_call_asm() (Helge Deller)   
  - dmaengine: at_xdmac: do not enable all cyclic channels (Claudiu Beznea)   
  - phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (Gaosheng Cui)   
  - NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease (Trond Myklebust)   
  - IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order (Patrick Kelsey)   
  - clk: add missing of_node_put() in "assigned-clocks" property parsing (Clément Léger)   
  - power: supply: generic-adc-battery: fix unit scaling (Sebastian Reichel)   
  - RDMA/rdmavt: Delete unnecessary NULL check (Natalia Petrova)   
  - perf/core: Fix hardlockup failure caused by perf throttle (Yang Jihong)   
  - powerpc/rtas: use memmove for potentially overlapping buffer copy (Nathan Lynch)   
  - macintosh: via-pmu-led: requires ATA to be set (Randy Dunlap)   
  - powerpc/sysdev/tsi108: fix resource printk format warnings (Randy Dunlap)   
  - powerpc/wii: fix resource printk format warnings (Randy Dunlap)   
  - powerpc/mpc512x: fix resource printk format warning (Randy Dunlap)   
  - macintosh/windfarm_smu_sat: Add missing of_node_put() (Liang He)   
  - spmi: Add a check for remove callback when removing a SPMI driver (Jishnu Prakash)   
  - staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (Philipp Hortmann)   
  - serial: 8250: Add missing wakeup event reporting (Florian Fainelli)   
  - tty: serial: fsl_lpuart: adjust buffer length to the intended size (Shenwei Wang)   
  - usb: chipidea: fix missing goto in `ci_hdrc_probe` (Yinhao Hu)   
  - sh: sq: Fix incorrect element size for allocating bitmap buffer (John Paul Adrian Glaubitz)   
  - uapi/linux/const.h: prefer ISO-friendly __typeof__ (Saeed Mirzamohammadi)   
  - ia64: mm/contig: fix section mismatch warning/error (Randy Dunlap)   
  - of: Fix modalias string generation (Miquel Raynal)   
  - spi: fsl-spi: Fix CPM/QE mode Litte Endian (Christophe Leroy)   
  - linux/vt_buffer.h: allow either builtin or modular for macros (Randy Dunlap)   
  - pstore: Revert pmsg_lock back to a normal mutex (John Stultz)   
  - tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. (Kuniyuki Iwashima)   
  - net: amd: Fix link leak when verifying config failed (Gencen Gan)   
  - ipv4: Fix potential uninit variable access bug in __ip_make_skb() (Ziyang Xuan)   
  - ixgbe: Enable setting RSS table to default values (Joe Damato)   
  - ixgbe: Allow flow hash to be set via ethtool (Joe Damato)   
  - wifi: iwlwifi: mvm: check firmware response size (Johannes Berg)   
  - wifi: iwlwifi: make the loop for card preparation effective (Emmanuel Grumbach)   
  - md/raid10: fix leak of 'r10bio->remaining' for recovery (Yu Kuai)   
  - scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS (Danila Chernetsov)   
  - scsi: target: iscsit: Fix TAS handling during conn cleanup (Mike Christie)   
  - net/packet: convert po->auxdata to an atomic flag (Eric Dumazet)   
  - net/packet: convert po->origdev to an atomic flag (Eric Dumazet)   
  - vlan: partially enable SIOCSHWTSTAMP in container (Vadim Fedorenko)   
  - scm: fix MSG_CTRUNC setting condition for SO_PASSSEC (Alexander Mikhalitsyn)   
  - wifi: ath6kl: reduce WARN to dev_dbg() in callback (Fedor Pchelkin)   
  - wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (Dan Carpenter)   
  - wifi: ath6kl: minor fix for allocation size (Alexey V. Vissarionov)   
  - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (Sumit Garg)   
  - x86/ioapic: Don't return 0 from arch_dynirq_lower_bound() (Saurabh Sengar)   
  - media: dm1105: Fix use after free bug in dm1105_remove due to race condition (Zheng Wang)   
  - x86/apic: Fix atomic update of offset in reserve_eilvt_offset() (Uros Bizjak)   
  - media: av7110: prevent underflow in write_ts_to_decoder() (Dan Carpenter)   
  - media: bdisp: Add missing check for create_workqueue (Jiasheng Jiang)   
  - drm/probe-helper: Cancel previous job before starting new one (Dom Cobley)   
  - drm/vgem: add missing mutex_destroy (Maíra Canal)   
  - drm/rockchip: Drop unbalanced obj unref (Rob Clark)   
  - selinux: ensure av_permissions.h is built when needed (Paul Moore)   
  - selinux: fix Makefile dependencies of flask.h (Ondrej Mosnacek)   
  - ubifs: Free memory for tmpfile name (Mårten Lindahl)   
  - ubi: Fix return value overwrite issue in try_write_vid_and_data() (Wang YanQing)   
  - i2c: omap: Fix standard mode false ACK readings (Reid Tonking)   
  - reiserfs: Add security prefix to xattr name in reiserfs_security_write() (Roberto Sassu)   
  - ring-buffer: Sync IRQ works before buffer destruction (Johannes Berg)   
  - MIPS: fw: Allow firmware to pass a empty env (Jiaxun Yang)   
  - staging: iio: resolver: ads1210: fix config mode (Nuno Sá)   
  - perf sched: Cast PTHREAD_STACK_MIN to int as it may turn into sysconf(__SC_THREAD_STACK_MIN_VALUE) (Arnaldo Carvalho de Melo)   
  - USB: dwc3: fix runtime pm imbalance on unbind (Johan Hovold)   
  - iio: adc: palmas_gpadc: fix NULL dereference on rmmod (Patrik Dahlström)   
  - USB: serial: option: add UNISOC vendor and TOZED LT70C product (Arınç ÜNAL)   
  - bluetooth: Perform careful capability checks in hci_sock_ioctl() (Ruihan Li)   
  - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (Jisoo Jang)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.529.1.el7uek]
changelog:
  - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (George Kennedy)  [Orabug: 35649492]  {CVE-2023-3567} 
  - ocfs2: always read both high and low parts of dinode link count (Alexey Asemov)  [Orabug: 35643004]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.529.2.el7uek]
changelog:
  - x86/cpu: persist X86_FEATURE_NT_GOOD for late reload (Ankur Arora)  [Orabug: 35693947]  
  - uek-rpm: Disable cls_tcindex in file tcindex-disable.conf (Sherry Yang)  [Orabug: 35678739]  
  - uek-rpm: Update kernel's linux-firmware dependency. (Somasundaram Krishnasamy)  [Orabug: 35678693]  
  - Revert "sched/fair: sanitize vruntime of entity being placed" (Saeed Mirzamohammadi)  [Orabug: 35651310]  
  - Revert "sched/fair: Sanitize vruntime of entity being migrated" (Saeed Mirzamohammadi)  [Orabug: 35651310]  
  - x86/microcode/AMD: Clean up per-family patch size checks (Borislav Petkov)  [Orabug: 35643967]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.529.3.el7uek]
changelog:
  - uek-rpm: Update kernel linux-firmware dependency to 20230516-999.26.git6c9e0ed5. (Somasundaram Krishnasamy)  [Orabug: 35724203]  
  - LTS version: v4.14.322 (Saeed Mirzamohammadi)   
  - drm/edid: fix objtool warning in drm_cvt_modes() (Linus Torvalds)   
  - mtd: rawnand: omap_elm: Fix incorrect type in assignment (Roger Quadros)   
  - test_firmware: fix a memory leak with reqs buffer (Mirsad Goran Todorovac)   
  - ext2: Drop fragment support (Jan Kara)   
  - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (Alan Stern)   
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Sungwoo Kim)   
  - fs/sysv: Null check to prevent null-ptr-deref bug (Prince Kumar Maurya)   
  - USB: zaurus: Add ID for A-300/B-500/C-700 (Ross Maynard)   
  - libceph: fix potential hang in ceph_osdc_notify() (Ilya Dryomov)   
  - loop: Select I/O scheduler 'none' from inside add_disk() (Bart Van Assche)   
  - tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen (Eric Dumazet)   
  - tcp_metrics: annotate data-races around tm->tcpm_net (Eric Dumazet)   
  - tcp_metrics: annotate data-races around tm->tcpm_vals[] (Eric Dumazet)   
  - tcp_metrics: annotate data-races around tm->tcpm_lock (Eric Dumazet)   
  - tcp_metrics: annotate data-races around tm->tcpm_stamp (Eric Dumazet)   
  - tcp_metrics: fix addr_same() helper (Eric Dumazet)   
  - ip6mr: Fix skb_under_panic in ip6mr_cache_report() (Yue Haibing)   
  - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (valis)   
  - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (valis)   
  - net: add missing data-race annotation for sk_ll_usec (Eric Dumazet)   
  - net: add missing data-race annotations around sk->sk_peek_off (Eric Dumazet)   
  - perf test uprobe_from_different_cu: Skip if there is no gcc (Georg Müller)   
  - net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer() (Yuanjun Gong)   
  - word-at-a-time: use the same return type for has_zero regardless of endianness (ndesaulniers@google.com)   
  - perf: Fix function pointer case (Peter Zijlstra)   
  - net/sched: cls_u32: Fix reference counter leak leading to overflow (Lee Jones)   
  - net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Pedro Tammela)   
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (M A Ramdhan)   
  - drm/client: Fix memory leak in drm_client_target_cloned (Jocelyn Falempe)   
  - dm cache policy smq: ensure IO doesn't prevent cleaner policy progress (Joe Thornber)   
  - ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register (Mark Brown)   
  - s390/dasd: fix hanging device after quiesce/resume (Stefan Haberland)   
  - irq-bcm6345-l1: Do not assume a fixed block to cpu mapping (Jonas Gorski)   
  - tpm_tis: Explicitly check for error code (Alexander Steffen)   
  - hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled (Gilles Buloz)   
  - staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() (Zhang Shurong)   
  - Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group (Greg Kroah-Hartman)   
  - usb: xhci-mtk: set the dma max_seg_size (Ricardo Ribalda)   
  - usb: ohci-at91: Fix the unhandle interrupt when resume (Guiting Shen)   
  - can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED (Marc Kleine-Budde)   
  - USB: serial: simple: sort driver entries (Johan Hovold)   
  - USB: serial: simple: add Kaufmann RKS+CAN VCP (Oliver Neukum)   
  - USB: serial: option: add Quectel EC200A module support (Mohsen Tahmasebi)   
  - USB: serial: option: support Quectel EM060K_128 (Jerry Meng)   
  - tracing: Fix warning in trace_buffered_event_disable() (Zheng Yejian)   
  - ring-buffer: Fix wrong stat of cpu_buffer->read (Zheng Yejian)   
  - ata: pata_ns87415: mark ns87560_tf_read static (Arnd Bergmann)   
  - dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths (Yu Kuai)   
  - block: Fix a source code comment in include/uapi/linux/blkzoned.h (Bart Van Assche)   
  - ASoC: fsl_spdif: Silence output on stop (Matus Gajdos)   
  - benet: fix return value check in be_lancer_xmit_workarounds() (Yuanjun Gong)   
  - platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 (Maxim Mikityanskiy)   
  - team: reset team's flags when down link is P2P device (Hangbin Liu)   
  - bonding: reset bond's flags when down link is P2P device (Hangbin Liu)   
  - tcp: Reduce chance of collisions in inet6_hashfn(). (Stewart Smith)   
  - ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address (Maciej Żenczykowski)   
  - ethernet: atheros: fix return value check in atl1e_tso_csum() (Yuanjun Gong)   
  - i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (Wang Ming)   
  - gpio: tps68470: Make tps68470_gpio_output() always set the initial value (Hans de Goede)   
  - tcp: annotate data-races around fastopenq.max_qlen (Eric Dumazet)   
  - tcp: annotate data-races around tp->notsent_lowat (Eric Dumazet)   
  - tcp: annotate data-races around rskq_defer_accept (Eric Dumazet)   
  - netfilter: nf_tables: fix spurious set element insertion failure (Florian Westphal)   
  - llc: Don't drop packet from non-root netns. (Kuniyuki Iwashima)   
  - fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe (Zhang Shurong)   
  - net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field() (Tanmay Patil)   
  - pinctrl: amd: Use amd_pinconf_set() for all config options (Mario Limonciello)   
  - fbdev: imxfb: warn about invalid left/right margin (Martin Kaiser)   
  - spi: bcm63xx: fix max prepend length (Jonas Gorski)   
  - igb: Fix igb_down hung on surprise removal (Ying Hsu)   
  - wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point() (Gustavo A. R. Silva)   
  - bpf: Address KCSAN report on bpf_lru_list (Martin KaFai Lau)   
  - sched/fair: Don't balance task to its current running CPU (Yicong Yang)   
  - posix-timers: Ensure timer ID search-loop limit is valid (Saeed Mirzamohammadi)   
  - md/raid10: prevent soft lockup while flush writes (Yu Kuai)   
  - md: fix data corruption for raid456 when reshape restart while grow up (Yu Kuai)   
  - nbd: Add the maximum limit of allocated index in nbd_dev_add (Zhong Jinghua)   
  - debugobjects: Recheck debug_objects_enabled before reporting (Tetsuo Handa)   
  - ext4: correct inline offset when handling xattrs in inode body (Eric Whitney)   
  - can: bcm: Fix UAF in bcm_proc_show() (YueHaibing)   
  - fuse: revalidate: don't invalidate if interrupted (Miklos Szeredi)   
  - perf probe: Add test for regression introduced by switch to die_get_decl_file() (Georg Müller)   
  - serial: atmel: don't enable IRQs prematurely (Dan Carpenter)   
  - scsi: qla2xxx: Pointer may be dereferenced (Shreyas Deodhar)   
  - scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() (Nilesh Javali)   
  - scsi: qla2xxx: Fix potential NULL pointer dereference (Bikash Hazarika)   
  - scsi: qla2xxx: Wait for io return on terminate rport (Quinn Tran)   
  - xtensa: ISS: fix call to split_if_spec (Max Filippov)   
  - ring-buffer: Fix deadloop issue on reading trace_pipe (Zheng Yejian)   
  - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk (Christophe JAILLET)   
  - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error (Christophe JAILLET)   
  - Revert "8250: add support for ASIX devices with a FIFO bug" (Jiaqing Zhao)   
  - meson saradc: fix clock divider mask length (George Stark)   
  - hwrng: imx-rngc - fix the timeout for init and self check (Martin Kaiser)   
  - fs: dlm: return positive pid value for F_GETLK (Alexander Aring)   
  - md/raid0: add discard support for the 'original' layout (Jason Baron)   
  - misc: pci_endpoint_test: Re-init completion for every test (Damien Le Moal)   
  - PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 (Robin Murphy)   
  - jfs: jfs_dmap: Validate db_l2nbperpage while mounting (Siddh Raman Pant)   
  - ext4: only update i_reserved_data_blocks on successful block allocation (Baokun Li)   
  - ext4: fix wrong unit use in ext4_mb_clear_bb (Kemeng Shi)   
  - perf intel-pt: Fix CYC timestamps after standalone CBR (Adrian Hunter)   
  - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (Ding Hui)   
  - tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (Jarkko Sakkinen)   
  - net/sched: make psched_mtu() RTNL-less safe (Pedro Tammela)   
  - wifi: airo: avoid uninitialized warning in airo_get_rate() (Randy Dunlap)   
  - ipv6/addrconf: fix a potential refcount underflow for idev (Ziyang Xuan)   
  - NTB: ntb_transport: fix possible memory leak while device_register() fails (Yang Yingliang)   
  - ntb: intel: Fix error handling in intel_ntb_pci_driver_init() (Yuan Can)   
  - NTB: amd: Fix error handling in amd_ntb_pci_driver_init() (Yuan Can)   
  - ntb: idt: Fix error handling in idt_pci_driver_init() (Yuan Can)   
  - udp6: fix udp6_ehashfn() typo (Eric Dumazet)   
  - net: mvneta: fix txq_map in case of txq_number==1 (Klaus Kudielka)   
  - workqueue: clean up WORK_* constant types, clarify masking (Linus Torvalds)   
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Thadeu Lima de Souza Cascardo)   
  - netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (Florent Revest)   
  - netfilter: nf_tables: unbind non-anonymous set if rule construction fails (Pablo Neira Ayuso)   
  - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain (Pablo Neira Ayuso)   
  - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE (Pablo Neira Ayuso)   
  - spi: spi-fsl-spi: allow changing bits_per_word while CS is still active (Rasmus Villemoes)   
  - spi: spi-fsl-spi: relax message sanity checking a little (Rasmus Villemoes)   
  - spi: spi-fsl-spi: remove always-true conditional in fsl_spi_do_one_msg (Rasmus Villemoes)   
  - ARM: orion5x: fix d2net gpio initialization (Arnd Bergmann)   
  - btrfs: fix race when deleting quota root from the dirty cow roots list (Filipe Manana)   
  - jffs2: reduce stack usage in jffs2_build_xattr_subsystem() (Fabian Frederick)   
  - integrity: Fix possible multiple allocation in integrity_inode_get() (Tianjia Zhang)   
  - mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M (Robert Marko)   
  - mmc: core: disable TRIM on Kingston EMMC04G-M627 (Robert Marko)   
  - NFSD: add encoding of op_recall flag for write delegation (Dai Ngo)   
  - sh: dma: Fix DMA channel offset calculation (Artur Rojek)   
  - net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX (Lin Ma)   
  - tcp: annotate data races in __tcp_oow_rate_limited() (Eric Dumazet)   
  - net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode (Vladimir Oltean)   
  - powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y (Randy Dunlap)   
  - mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 (Nishanth Menon)   
  - spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (Jonas Gorski)   
  - Add MODULE_FIRMWARE() for FIRMWARE_TG357766. (Tobias Heider)   
  - sctp: fix potential deadlock on &net->sctp.addr_wq_lock (Chengfeng Ye)   
  - rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (Christophe JAILLET)   
  - mfd: stmpe: Only disable the regulators if they are enabled (Christophe JAILLET)   
  - mfd: intel-lpss: Add missing check for platform_get_resource (Jiasheng Jiang)   
  - mfd: rt5033: Drop rt5033-battery sub-device (Stephan Gerhold)   
  - usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() (Li Yang)   
  - extcon: Fix kernel doc of property capability fields to avoid warnings (Andy Shevchenko)   
  - extcon: Fix kernel doc of property fields to avoid warnings (Andy Shevchenko)   
  - media: usb: siano: Fix warning due to null work_func_t function pointer (Duoming Zhou)   
  - media: videodev2.h: Fix struct v4l2_input tuner index comment (Marek Vasut)   
  - media: usb: Check az6007_read() return value (Daniil Dulov)   
  - sh: j2: Use ioremap() to translate device tree address into kernel memory (John Paul Adrian Glaubitz)   
  - w1: fix loop in w1_fini() (Dan Carpenter)   
  - block: change all __u32 annotations to __be32 in affs_hardblocks.h (Michael Schmitz)   
  - USB: serial: option: add LARA-R6 01B PIDs (Davide Tronchin)   
  - modpost: fix off by one in is_executable_section() (Dan Carpenter)   
  - modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24} (Masahiro Yamada)   
  - modpost: fix section mismatch message for R_ARM_ABS32 (Masahiro Yamada)   
  - crypto: nx - fix build warnings when DEBUG_FS is not enabled (Randy Dunlap)   
  - pinctrl: at91-pio4: check return value of devm_kasprintf() (Claudiu Beznea)   
  - perf dwarf-aux: Fix off-by-one in die_get_varname() (Namhyung Kim)   
  - pinctrl: cherryview: Return correct value if pin in push-pull mode (Andy Shevchenko)   
  - PCI: Add pci_clear_master() stub for non-CONFIG_PCI (Sui Jingfeng)   
  - scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (Yuchen Yang)   
  - ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer (Su Hui)   
  - drm/radeon: fix possible division-by-zero errors (Nikita Zhandarovich)   
  - fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() (Christophe JAILLET)   
  - soc/fsl/qe: fix usb.c build errors (Randy Dunlap)   
  - ASoC: es8316: Increment max value for ALC Capture Target Volume control (Cristian Ciocaltea)   
  - ARM: ep93xx: fix missing-prototype warnings (Arnd Bergmann)   
  - drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H (Dario Binacchi)   
  - Input: adxl34x - do not hardcode interrupt trigger type (Marek Vasut)   
  - ARM: dts: BCM5301X: Drop "clock-names" from the SPI node (Rafał Miłecki)   
  - Input: drv260x - sleep between polling GO bit (Luca Weiss)   
  - radeon: avoid double free in ci_dpm_init() (Nikita Zhandarovich)   
  - netlink: Add __sock_i_ino() for __netlink_diag_dump(). (Kuniyuki Iwashima)   
  - netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value. (Ilia.Gavrilov)   
  - lib/ts_bm: reset initial match offset for every block of text (Jeremy Sowden)   
  - gtp: Fix use-after-free in __gtp_encap_destroy(). (Kuniyuki Iwashima)   
  - netlink: do not hard code device address lenth in fdb dumps (Eric Dumazet)   
  - netlink: fix potential deadlock in netlink_set_err() (Eric Dumazet)   
  - wifi: ath9k: convert msecs to jiffies where needed (Dmitry Antipov)   
  - wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() (Remi Pommarel)   
  - memstick r592: make memstick_debug_get_tpc_name() static (Arnd Bergmann)   
  - kexec: fix a memory leak in crash_shrink_memory() (Zhen Lei)   
  - watchdog/perf: more properly prevent false positives with turbo modes (Douglas Anderson)   
  - watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config (Douglas Anderson)   
  - wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes (Fedor Pchelkin)   
  - wifi: ray_cs: Fix an error handling path in ray_probe() (Christophe JAILLET)   
  - wifi: wl3501_cs: Fix an error handling path in wl3501_probe() (Christophe JAILLET)   
  - wifi: atmel: Fix an error handling path in atmel_probe() (Christophe JAILLET)   
  - wifi: orinoco: Fix an error handling path in orinoco_cs_probe() (Christophe JAILLET)   
  - wifi: orinoco: Fix an error handling path in spectrum_cs_probe() (Christophe JAILLET)   
  - wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (Fedor Pchelkin)   
  - wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation (Peter Seiderer)   
  - evm: Complete description of evm_inode_setattr() (Roberto Sassu)   
  - PM: domains: fix integer overflow issues in genpd_parse_state() (Nikita Zhandarovich)   
  - md/raid10: fix io loss while replacement replace rdev (Li Nan)   
  - md/raid10: fix wrong setting of max_corr_read_errors (Li Nan)   
  - md/raid10: fix overflow of md/safe_mode_delay (Li Nan)   
  - treewide: Remove uninitialized_var() usage (Kees Cook)   
  - drm/amdgpu: Validate VM ioctl flags. (Bas Nieuwenhuizen)   
  - scripts/tags.sh: Resolve gtags empty index generation (Ahmed S. Darwish)   
  - drm/edid: Fix uninitialized variable in drm_cvt_modes() (Lyude Paul)   
  - fbdev: imsttfb: Fix use after free bug in imsttfb_probe (Zheng Wang)   
  - x86/smp: Use dedicated cache-line for mwait_play_dead() (Thomas Gleixner)   
  - x86/microcode/AMD: Load late on both threads too (Borislav Petkov (AMD))   
  - gfs2: Don't deref jdesc in evict (Bob Peterson)   
  - LTS version: v4.14.321 (Saeed Mirzamohammadi)


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [4.14.35-2047.529.3.1.el7uek]
changelog:
  - rds: Fix lack of reentrancy for connection reset with dst addr zero (Håkon Bugge)  [Orabug: 35708852]  {CVE-2023-22024}


author: Jack Vogel <jack.vogel@oracle.com> [4.14.35-2047.529.3.2.el7uek]
changelog:
  - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa)  [Orabug: 35824309]  
  - netfilter: xt_u32: validate user space input (Wander Lairson Costa)  [Orabug: 35824309]  
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng)  [Orabug: 35824309]  {CVE-2023-42753}


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.530.1.el7uek]
changelog:
  - rds: Remove gratuitous include of time.h from rds.h (Mark Haywood)  [Orabug: 35742762]  
  - smp: Reduce NMI traffic from CSD waiters to CSD destination (Imran Khan)  [Orabug: 35236407]  
  - smp: Reduce logging due to dump_stack of CSD waiters (Imran Khan)  [Orabug: 35236407]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.530.2.el7uek]
changelog:
  - LTS version: v4.14.325 (Saeed Mirzamohammadi)   
  - Revert "ARM: ep93xx: fix missing-prototype warnings" (Greg Kroah-Hartman)   
  - Revert "MIPS: Alchemy: fix dbdma2" (Greg Kroah-Hartman)   
  - LTS version: v4.14.324 (Saeed Mirzamohammadi)   
  - dma-buf/sw_sync: Avoid recursive lock during fence signal (Rob Clark)   
  - scsi: core: raid_class: Remove raid_component_add() (Zhu Wang)   
  - scsi: snic: Fix double free in snic_tgt_create() (Zhu Wang)   
  - rtnetlink: Reject negative ifindexes in RTM_NEWLINK (Ido Schimmel)   
  - x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 (Feng Tang)   
  - media: vcodec: Fix potential array out-of-bounds in encoder queue_setup (Wei Chen)   
  - lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels (Helge Deller)   
  - batman-adv: Fix batadv_v_ogm_aggr_send memory leak (Remi Pommarel)   
  - batman-adv: Fix TT global entry leak when client roamed back (Remi Pommarel)   
  - batman-adv: Do not get eth header before batadv_check_management_packet (Remi Pommarel)   
  - batman-adv: Trigger events for auto adjusted MTU (Sven Eckelmann)   
  - ibmveth: Use dcbf rather than dcbfl (Michael Ellerman)   
  - ipvs: fix racy memcpy in proc_do_sync_threshold (Sishuai Gong)   
  - ipvs: Improve robustness to the ipvs sysctl (Junwei Hu)   
  - igb: Avoid starting unnecessary workqueues (Alessio Igor Bogani)   
  - sock: annotate data-races around prot->memory_pressure (Eric Dumazet)   
  - tracing: Fix memleak due to race between current_tracer and trace (Zheng Yejian)   
  - net: phy: broadcom: stub c45 read/write for 54810 (Justin Chen)   
  - net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure (Lin Ma)   
  - net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled (Jason Xing)   
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Kuniyuki Iwashima)   
  - ASoC: rt5665: add missed regulator_bulk_disable (Zhang Shurong)   
  - netfilter: set default timeout to 3 secs for sctp shutdown send and recv state (Xin Long)   
  - test_firmware: prevent race conditions by a correct implementation of locking (Mirsad Goran Todorovac)   
  - binder: fix memory leak in binder_init() (Qi Zheng)   
  - serial: 8250: Fix oops for port->pm on uart_change_pm() (Tony Lindgren)   
  - mmc: wbsd: fix double mmc_free_host() in wbsd_init() (Yang Yingliang)   
  - cifs: Release folio lock on fscache read hit. (Russell Harmon via samba-technical)   
  - ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces. (dengxiang)   
  - net: do not allow gso_size to be set to GSO_BY_FRAGS (Eric Dumazet)   
  - sock: Fix misuse of sk_under_memory_pressure() (Abel Wu)   
  - i40e: fix misleading debug logs (Andrii Staikov)   
  - team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Ziyang Xuan)   
  - netfilter: nft_dynset: disallow object maps (Pablo Neira Ayuso)   
  - xfrm: add NULL check in xfrm_update_ae_params (Lin Ma)   
  - ip_vti: fix potential slab-use-after-free in decode_session6 (Zhengchao Shao)   
  - ip6_vti: fix slab-use-after-free in decode_session6 (Zhengchao Shao)   
  - net: af_key: fix sadb_x_filter validation (Lin Ma)   
  - net: xfrm: Fix xfrm_address_filter OOB read (Lin Ma)   
  - fbdev: mmp: fix value check in mmphw_probe() (Yuanjun Gong)   
  - drm/amdgpu: Fix potential fence use-after-free v2 (shanzhulig)   
  - Bluetooth: L2CAP: Fix use-after-free (Zhengping Jiang)   
  - pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (Armin Wolf)   
  - gfs2: Fix possible data races in gfs2_show_options() (Tuo Li)   
  - media: platform: mediatek: vpu: fix NULL ptr dereference (Hans Verkuil)   
  - media: v4l2-mem2mem: add lock to protect parameter num_rdy (Yunfei Dong)   
  - FS: JFS: Check for read-only mounted filesystem in txBegin (Immad Mir)   
  - FS: JFS: Fix null-ptr-deref Read in txBegin (Immad Mir)   
  - MIPS: dec: prom: Address -Warray-bounds warning (Gustavo A. R. Silva)   
  - fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev (Yogesh)   
  - udf: Fix uninitialized array access for some pathnames (Jan Kara)   
  - quota: fix warning in dqgrab() (Ye Bin)   
  - quota: Properly disable quotas when add_dquot_ref() fails (Jan Kara)   
  - ALSA: emu10k1: roll up loops in DSP setup code for Audigy (Oswald Buddenhagen)   
  - drm/radeon: Fix integer overflow in radeon_cs_parser_init (hackyzh002)   
  - lib/mpi: Eliminate unused umul_ppmm definitions for MIPS (Nathan Chancellor)   
  - LTS version: v4.14.323 (Saeed Mirzamohammadi)   
  - alpha: remove __init annotation from exported page_is_ram() (Masahiro Yamada)   
  - scsi: core: Fix possible memory leak if device_add() fails (Zhu Wang)   
  - scsi: snic: Fix possible memory leak if device_add() fails (Zhu Wang)   
  - scsi: 53c700: Check that command slot is not NULL (Alexandra Diupina)   
  - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (Michael Kelley)   
  - scsi: core: Fix legacy /proc parsing buffer overflow (Tony Battersby)   
  - netfilter: nf_tables: report use refcount overflow (Pablo Neira Ayuso)   
  - btrfs: don't stop integrity writeback too early (Christoph Hellwig)   
  - IB/hfi1: Fix possible panic during hotplug remove (Douglas Miller)   
  - drivers: net: prevent tun_build_skb() to exceed the packet size limit (Andrew Kanner)   
  - dccp: fix data-race around dp->dccps_mss_cache (Eric Dumazet)   
  - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Ziyang Xuan)   
  - net/packet: annotate data-races around tp->status (Eric Dumazet)   
  - drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (Karol Herbst)   
  - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Kirill A. Shutemov)   
  - usb: dwc3: Properly handle processing of pending events (Elson Roy Serrao)   
  - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Alan Stern)   
  - iio: cros_ec: Fix the allocation size for cros_ec_command (Yiyuan Guo)   
  - test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation (Mirsad Goran Todorovac)   
  - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (Ryusuke Konishi)   
  - radix tree test suite: fix incorrect allocation size for pthreads (Colin Ian King)   
  - dmaengine: pl330: Return DMA_PAUSED when transaction is paused (Ilpo Järvinen)   
  - ipv6: adjust ndisc_is_useropt() to also return true for PIO (Maciej Żenczykowski)   
  - mmc: moxart: read scr register without changing byte order (Sergei Antonov)   
  - sparc: fix up arch_cpu_finalize_init() build breakage. (Greg Kroah-Hartman)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.530.3.el7uek]
changelog:
  - Add the new PCI Device IDs to support new generation of AMD 19h processors. (Partha Sarathi Satapathy)  [Orabug: 35773822]  
  - hwmon: (k10temp) Add support for AMD Family 19h Models 10h-1Fh and A0h-AFh (Babu Moger)  [Orabug: 35773822]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.530.4.el7uek]
changelog:
  - rds: Fix lack of reentrancy for connection reset with dst addr zero (Håkon Bugge)  [Orabug: 35819110]  {CVE-2023-22024} 
  - kernfs: fix missing kernfs_iattr_rwsem locking (Ian Kent)  [Orabug: 35796772]  
  - uek-rpm: Removing pre scriptlet to not allow firmware downgrade (Samasth Norway Ananda)  [Orabug: 35756463]  
  - scsi: megaraid_sas: Fix deadlock on firmware crashdump (Junxiao Bi)  [Orabug: 35702793]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.530.5.el7uek]
changelog:
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng)  [Orabug: 35824288]  {CVE-2023-42753} 
  - netfilter: xt_u32: validate user space input (Wander Lairson Costa)   
  - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.530.5.1.el7uek]
changelog:
  - Revert "rtnetlink: Reject negative ifindexes in RTM_NEWLINK" (Saeed Mirzamohammadi)  [Orabug: 35896831]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.531.1.el7uek]
changelog:
  - ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block (Gautham Ananthakrishna)  [Orabug: 35859332]  
  - bnxt_en: fix NULL dereference in bnxt_flash_package_from_file() (Samasth Norway Ananda)  [Orabug: 35848949]  
  - LTS version: v4.14.326 (Saeed Mirzamohammadi)   
  - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (valis)   
  - mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (William Zhang)   
  - mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller (William Zhang)   
  - mtd: rawnand: brcmnand: Fix potential false time out warning (William Zhang)   
  - mtd: rawnand: brcmnand: Fix crash during the panic_write (William Zhang)   
  - nfsd: fix change_info in NFSv4 RENAME replies (Jeff Layton)   
  - btrfs: fix lockdep splat and potential deadlock after failure running delayed items (Filipe Manana)   
  - attr: block mode changes of symlinks (Christian Brauner)   
  - md/raid1: fix error: ISO C90 forbids mixed declarations (Nigel Croxon)   
  - kobject: Add sanity check for kset->kobj.ktype in kset_register() (Zhen Lei)   
  - serial: cpm_uart: Avoid suspicious locking (Christophe Leroy)   
  - scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (Konstantin Shelekhin)   
  - usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc (Ma Ke)   
  - media: pci: cx23885: replace BUG with error return (Hans Verkuil)   
  - media: tuners: qt1010: replace BUG_ON with a regular error (Hans Verkuil)   
  - iio: core: Use min() instead of min_t() to make code more robust (Andy Shevchenko)   
  - media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() (Zhang Shurong)   
  - media: anysee: fix null-ptr-deref in anysee_master_xfer (Zhang Shurong)   
  - media: af9005: Fix null-ptr-deref in af9005_i2c_xfer (Zhang Shurong)   
  - media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() (Zhang Shurong)   
  - media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer (Zhang Shurong)   
  - powerpc/pseries: fix possible memory leak in ibmebus_bus_init() (ruanjinjie)   
  - jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount (Liu Shixin via Jfs-discussion)   
  - fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() (Andrew Kanner)   
  - ext2: fix datatype of block number in ext2_xattr_set2() (Georg Ottinger)   
  - md: raid1: fix potential OOB in raid1_remove_disk() (Zhang Shurong)   
  - drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() (Tuo Li)   
  - alx: fix OOB-read compiler warning (GONG, Ruiqi)   
  - tpm_tis: Resend command to recover from data transfer errors (Alexander Steffen)   
  - crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (Mark O'Donovan)   
  - wifi: mwifiex: fix fortify warning (Dmitry Antipov)   
  - wifi: ath9k: fix printk specifier (Dongliang Mu)   
  - hw_breakpoint: fix single-stepping when using bpf_overflow_handler (Tomislav Novak)   
  - ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470 (Jiri Slaby (SUSE))   
  - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer (Abhishek Mainkar)   
  - btrfs: output extra debug info if we failed to find an inline backref (Qu Wenruo)   
  - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Fedor Pchelkin)   
  - parisc: Drop loops_per_jiffy from per_cpu struct (Helge Deller)   
  - kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg(). (Kuniyuki Iwashima)   
  - ixgbe: fix timestamp configuration code (Vadim Fedorenko)   
  - kcm: Fix memory leak in error path of kcm_sendmsg() (Shigeru Yoshida)   
  - net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all() (Hangyu Hua)   
  - ata: pata_ftide010: Add missing MODULE_DESCRIPTION (Damien Le Moal)   
  - ata: sata_gemini: Add missing MODULE_DESCRIPTION (Damien Le Moal)   
  - igb: Change IGB_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska)   
  - igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska)   
  - kcm: Destroy mutex in kcm_exit_net() (Shigeru Yoshida)   
  - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (valis)   
  - af_unix: Fix data race around sk->sk_err. (Kuniyuki Iwashima)   
  - af_unix: Fix data-races around sk->sk_shutdown. (Kuniyuki Iwashima)   
  - af_unix: Fix data-race around unix_tot_inflight. (Kuniyuki Iwashima)   
  - af_unix: Fix data-races around user->unix_inflight. (Kuniyuki Iwashima)   
  - net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr (Alex Henrie)   
  - igb: disable virtualization features on 82580 (Corinna Vinschen)   
  - net: read sk->sk_family once in sk_mc_loop() (Eric Dumazet)   
  - pwm: lpc32xx: Remove handling of PWM channels (Vladimir Zapolskiy)   
  - watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load (Raag Jadav)   
  - x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm() (Sean Christopherson)   
  - NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info (Fedor Pchelkin)   
  - clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (Dmitry Baryshkov)   
  - parisc: led: Reduce CPU overhead for disk & lan LED computation (Helge Deller)   
  - parisc: led: Fix LAN receive and transmit LEDs (Helge Deller)   
  - drm/ast: Fix DRAM init on AST2200 (Thomas Zimmermann)   
  - fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (Thomas Zimmermann)   
  - scsi: qla2xxx: Turn off noisy message log (Quinn Tran)   
  - scsi: qla2xxx: fix inconsistent TMF timeout (Quinn Tran)   
  - crypto: stm32 - fix loop iterating through scatterlist for DMA (Thomas Bourgoin)   
  - pstore/ram: Check start of empty przs during init (Enlin Mu)   
  - net: handle ARPHRD_PPP in dev_is_mac_header_xmit() (Nicolas Dichtel)   
  - X.509: if signature is unsupported skip validation (Thore Sommer)   
  - dccp: Fix out of bounds access in DCCP error handler (Jann Horn)   
  - parisc: Fix /proc/cpuinfo output for lscpu (Helge Deller)   
  - procfs: block chmod on /proc/thread-self/comm (Aleksa Sarai)   
  - Revert "PCI: Mark NVIDIA T4 GPUs to avoid bus reset" (Bjorn Helgaas)   
  - ntb: Fix calculation ntb_transport_tx_free_entry() (Dave Jiang)   
  - ntb: Clean up tx tail index on link down (Dave Jiang)   
  - ntb: Drop packets when qp link is down (Dave Jiang)   
  - media: dvb: symbol fixup for dvb_attach() (Greg Kroah-Hartman)   
  - backlight/lv5207lp: Compare against struct fb_info.device (Thomas Zimmermann)   
  - backlight/bd6107: Compare against struct fb_info.device (Thomas Zimmermann)   
  - backlight/gpio_backlight: Compare against struct fb_info.device (Thomas Zimmermann)   
  - ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch() (Gustavo A. R. Silva)   
  - ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (Takashi Iwai)   
  - PM / devfreq: Fix leak in devfreq_dev_release() (Boris Brezillon)   
  - igb: set max size RX buffer when store bad packet is enabled (Radoslaw Tyl)   
  - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU (Eric Dumazet)   
  - dmaengine: ste_dma40: Add missing IRQ check in d40_probe (ruanjinjie)   
  - rpmsg: glink: Add check for kstrdup (Jiasheng Jiang)   
  - HID: multitouch: Correct devm device reference for hidinput input_dev name (Rahul Rameshbabu)   
  - Revert "IB/isert: Fix incorrect release of isert connection" (Leon Romanovsky)   
  - amba: bus: fix refcount leak (Peng Fan)   
  - serial: tegra: handle clk prepare error in tegra_uart_hw_init() (Yi Yang)   
  - scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock (Chengfeng Ye)   
  - scsi: core: Use 32-bit hostnum in scsi_host_lookup() (Tony Battersby)   
  - cgroup:namespace: Remove unused cgroup_namespaces_init() (Lu Jialin)   
  - USB: gadget: f_mass_storage: Fix unused variable warning (Alan Stern)   
  - media: go7007: Remove redundant if statement (Colin Ian King)   
  - dma-buf/sync_file: Fix docs syntax (Rob Clark)   
  - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko)   
  - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko)   
  - x86/APM: drop the duplicate APM_MINOR_DEV macro (Randy Dunlap)   
  - scsi: qla4xxx: Add length check when parsing nlattrs (Lin Ma)   
  - scsi: be2iscsi: Add length check when parsing nlattrs (Lin Ma)   
  - scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param() (Lin Ma)   
  - usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (Xu Yang)   
  - media: mediatek: vcodec: Return NULL if no vdec_fb is found (Irui Wang)   
  - media: cx24120: Add retval check for cx24120_message_send() (Daniil Dulov)   
  - media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (Christophe JAILLET)   
  - media: dib7000p: Fix potential division by zero (Daniil Dulov)   
  - drivers: usb: smsusb: fix error handling code in smsusb_init_device (Dongliang Mu)   
  - NFSD: da_addr_body field missing in some GETDEVICEINFO replies (Chuck Lever)   
  - fs: lockd: avoid possible wrong NULL parameter (Su Hui)   
  - jfs: validate max amount of blocks before allocation. (Alexei Filippov)   
  - powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (Russell Currey)   
  - nfs/blocklayout: Use the passed in gfp flags (Dan Carpenter)   
  - wifi: ath10k: Use RMW accessors for changing LNKCTL (Ilpo Järvinen)   
  - PCI: pciehp: Use RMW accessors for changing LNKCTL (Ilpo Järvinen)   
  - PCI: Mark NVIDIA T4 GPUs to avoid bus reset (Wu Zongyong)   
  - clk: sunxi-ng: Modify mismatched function name (Zhang Jianhua)   
  - drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (Minjie Du)   
  - ALSA: ac97: Fix possible error value of *rac97 (Su Hui)   
  - audit: fix possible soft lockup in __audit_inode_child() (Gaosheng Cui)   
  - smackfs: Prevent underflow in smk_set_cipso() (Dan Carpenter)   
  - of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name() (Ruan Jinjie)   
  - drm: adv7511: Fix low refresh rate register for ADV7533/5 (Bogdan Togorean)   
  - ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split) (Krzysztof Kozlowski)   
  - ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split) (Krzysztof Kozlowski)   
  - ARM: dts: BCM53573: Add cells sizes to PCIe node (Rafał Miłecki)   
  - netrom: Deny concurrent connect(). (Kuniyuki Iwashima)   
  - net: arcnet: Do not call kfree_skb() under local_irq_disable() (Jinjie Ruan)   
  - wifi: ath9k: use IS_ERR() with debugfs_create_dir() (Wang Ming)   
  - wifi: mwifiex: avoid possible NULL skb pointer dereference (Dmitry Antipov)   
  - wifi: ath9k: protect WMI command response buffer replacement with a lock (Fedor Pchelkin)   
  - wifi: mwifiex: Fix missed return in oob checks failed path (Polaris Pi)   
  - wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (Dmitry Antipov)   
  - fs: ocfs2: namei: check return value of ocfs2_add_entry() (Artem Chernyshev)   
  - lwt: Check LWTUNNEL_XMIT_CONTINUE strictly (Yan Zhai)   
  - crypto: caam - fix unchecked return value error (Gaurav Jain)   
  - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Menglong Dong)   
  - Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (Yuanjun Gong)   
  - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Polaris Pi)   
  - can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (Marc Kleine-Budde)   
  - spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (Zhang Shurong)   
  - regmap: rbtree: Use alloc_flags for memory allocations (Dan Carpenter)   
  - cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit() (Liao Chang)   
  - fs: Fix error checking for d_hash_and_lookup() (Wang Ming)   
  - reiserfs: Check the return value from __getblk() (Matthew Wilcox)   
  - Revert "net: macsec: preserve ingress frame ordering" (Sabrina Dubroca)   
  - udf: Handle error when adding extent to a file (Jan Kara)   
  - udf: Check consistency of Space Bitmap Descriptor (Vladislav Efanov)   
  - powerpc/32s: Fix assembler warning about r0 (Christophe Leroy)   
  - powerpc/32: Include .branch_lt in data section (Joel Stanley)   
  - ALSA: seq: oss: Fix racy open/close of MIDI devices (Takashi Iwai)   
  - cifs: add a warning when the in-flight count goes negative (Shyam Prasad N)   
  - sctp: handle invalid error codes without calling BUG() (Dan Carpenter)   
  - bnx2x: fix page fault following EEH recovery (David Christensen)   
  - netlabel: fix shift wrapping bug in netlbl_catmap_setlong() (Dmitry Mastykin)   
  - scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock (Chengfeng Ye)   
  - idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM (Baoquan He)   
  - net: usb: qmi_wwan: add Quectel EM05GV2 (Martin Kohn)   
  - security: keys: perform capable check only on privileged operations (Christian Göttsche)   
  - ASoc: codecs: ES8316: Fix DMIC config (Edgar)   
  - fs/nls: make load_nls() take a const parameter (Saeed Mirzamohammadi)   
  - s390/dasd: use correct number of retries for ERP requests (Stefan Haberland)   
  - m68k: Fix invalid .section syntax (Ben Hutchings)   
  - ethernet: atheros: fix return value check in atl1c_tso_csum() (Yuanjun Gong)   
  - ASoC: da7219: Flush pending AAD IRQ when suspending (Dmytro Maluka)   
  - 9p: virtio: make sure 'offs' is initialized in zc_request (Dominique Martinet)   
  - lib/ubsan: remove returns-nonnull-attribute checks (Andrey Ryabinin)   
  - pinctrl: amd: Don't show `Invalid config param` errors (Mario Limonciello)   
  - nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (Ryusuke Konishi)   
  - nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers() (Ryusuke Konishi)   
  - serial: sc16is7xx: fix bug when first setting GPIO direction (Hugo Villeneuve)   
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (Zheng Wang)   
  - HID: wacom: remove the battery when the EKR is off (Aaron Armstrong Skomra)   
  - USB: serial: option: add FOXCONN T99W368/T99W373 product (Slark Xiao)   
  - USB: serial: option: add Quectel EM05G variant (0x030e) (Martin Kohn)   
  - modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules (Christoph Hellwig)   
  - rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff (Christoph Hellwig)   
  - mmc: au1xmmc: force non-modular build and remove symbol_get usage (Christoph Hellwig)   
  - ARM: pxa: remove use of symbol_get() (Arnd Bergmann)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.531.2.el7uek]
changelog:
  - rtnetlink: Reject negative ifindexes in RTM_NEWLINK (Ido Schimmel)  [Orabug: 35867429]  
  - Revert "rtnetlink: Reject negative ifindexes in RTM_NEWLINK" (Boris Ostrovsky)  [Orabug: 35867429]  
  - rds: Add proper refcnt when an RDS MR references an RDS Socket (Håkon Bugge)  [Orabug: 35836950]  
  - rds: Check for UAF in rds_destroy_mr (Håkon Bugge)  [Orabug: 35836950]  
  - xfs: reserve less log space when recovering log intent items (Darrick J. Wong)  [Orabug: 35587163]  
  - xfs: reserve blocks for refcount / rmap log item recovery (Darrick J. Wong)  [Orabug: 35587163]  
  - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Pin-yen Lin)   
  - dccp: fix dccp_v4_err()/dccp_v6_err() again (Eric Dumazet)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.531.2.1.el7uek]
changelog:
  - x86: change default to spec_store_bypass_disable=prctl spectre_v2_user=prctl (Andrea Arcangeli)  [Orabug: 35973454]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.530.2.el7uek]
changelog:
  - LTS version: v4.14.325 (Saeed Mirzamohammadi)   
  - Revert "ARM: ep93xx: fix missing-prototype warnings" (Greg Kroah-Hartman)   
  - Revert "MIPS: Alchemy: fix dbdma2" (Greg Kroah-Hartman)   
  - LTS version: v4.14.324 (Saeed Mirzamohammadi)   
  - dma-buf/sw_sync: Avoid recursive lock during fence signal (Rob Clark)   
  - scsi: core: raid_class: Remove raid_component_add() (Zhu Wang)   
  - scsi: snic: Fix double free in snic_tgt_create() (Zhu Wang)   
  - rtnetlink: Reject negative ifindexes in RTM_NEWLINK (Ido Schimmel)   
  - x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 (Feng Tang)   
  - media: vcodec: Fix potential array out-of-bounds in encoder queue_setup (Wei Chen)   
  - lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels (Helge Deller)   
  - batman-adv: Fix batadv_v_ogm_aggr_send memory leak (Remi Pommarel)   
  - batman-adv: Fix TT global entry leak when client roamed back (Remi Pommarel)   
  - batman-adv: Do not get eth header before batadv_check_management_packet (Remi Pommarel)   
  - batman-adv: Trigger events for auto adjusted MTU (Sven Eckelmann)   
  - ibmveth: Use dcbf rather than dcbfl (Michael Ellerman)   
  - ipvs: fix racy memcpy in proc_do_sync_threshold (Sishuai Gong)   
  - ipvs: Improve robustness to the ipvs sysctl (Junwei Hu)   
  - igb: Avoid starting unnecessary workqueues (Alessio Igor Bogani)   
  - sock: annotate data-races around prot->memory_pressure (Eric Dumazet)   
  - tracing: Fix memleak due to race between current_tracer and trace (Zheng Yejian)   
  - net: phy: broadcom: stub c45 read/write for 54810 (Justin Chen)   
  - net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure (Lin Ma)   
  - net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled (Jason Xing)   
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Kuniyuki Iwashima) [Orabug: 35814409] {CVE-2023-4622}
  - ASoC: rt5665: add missed regulator_bulk_disable (Zhang Shurong)   
  - netfilter: set default timeout to 3 secs for sctp shutdown send and recv state (Xin Long)   
  - test_firmware: prevent race conditions by a correct implementation of locking (Mirsad Goran Todorovac)   
  - binder: fix memory leak in binder_init() (Qi Zheng)   
  - serial: 8250: Fix oops for port->pm on uart_change_pm() (Tony Lindgren)   
  - mmc: wbsd: fix double mmc_free_host() in wbsd_init() (Yang Yingliang)   
  - cifs: Release folio lock on fscache read hit. (Russell Harmon via samba-technical)   
  - ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces. (dengxiang)   
  - net: do not allow gso_size to be set to GSO_BY_FRAGS (Eric Dumazet)   
  - sock: Fix misuse of sk_under_memory_pressure() (Abel Wu)   
  - i40e: fix misleading debug logs (Andrii Staikov)   
  - team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Ziyang Xuan)   
  - netfilter: nft_dynset: disallow object maps (Pablo Neira Ayuso)   
  - xfrm: add NULL check in xfrm_update_ae_params (Lin Ma) [Orabug: 35754508] {CVE-2023-3772}
  - ip_vti: fix potential slab-use-after-free in decode_session6 (Zhengchao Shao)   
  - ip6_vti: fix slab-use-after-free in decode_session6 (Zhengchao Shao)   
  - net: af_key: fix sadb_x_filter validation (Lin Ma)   
  - net: xfrm: Fix xfrm_address_filter OOB read (Lin Ma) [Orabug: 35923516] {CVE-2023-39194}
  - fbdev: mmp: fix value check in mmphw_probe() (Yuanjun Gong)   
  - drm/amdgpu: Fix potential fence use-after-free v2 (shanzhulig)   
  - Bluetooth: L2CAP: Fix use-after-free (Zhengping Jiang)   
  - pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (Armin Wolf)   
  - gfs2: Fix possible data races in gfs2_show_options() (Tuo Li)   
  - media: platform: mediatek: vpu: fix NULL ptr dereference (Hans Verkuil)   
  - media: v4l2-mem2mem: add lock to protect parameter num_rdy (Yunfei Dong)   
  - FS: JFS: Check for read-only mounted filesystem in txBegin (Immad Mir)   
  - FS: JFS: Fix null-ptr-deref Read in txBegin (Immad Mir)   
  - MIPS: dec: prom: Address -Warray-bounds warning (Gustavo A. R. Silva)   
  - fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev (Yogesh)   
  - udf: Fix uninitialized array access for some pathnames (Jan Kara)   
  - quota: fix warning in dqgrab() (Ye Bin)   
  - quota: Properly disable quotas when add_dquot_ref() fails (Jan Kara)   
  - ALSA: emu10k1: roll up loops in DSP setup code for Audigy (Oswald Buddenhagen)   
  - drm/radeon: Fix integer overflow in radeon_cs_parser_init (hackyzh002)   
  - lib/mpi: Eliminate unused umul_ppmm definitions for MIPS (Nathan Chancellor)   
  - LTS version: v4.14.323 (Saeed Mirzamohammadi)   
  - alpha: remove __init annotation from exported page_is_ram() (Masahiro Yamada)   
  - scsi: core: Fix possible memory leak if device_add() fails (Zhu Wang)   
  - scsi: snic: Fix possible memory leak if device_add() fails (Zhu Wang)   
  - scsi: 53c700: Check that command slot is not NULL (Alexandra Diupina)   
  - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (Michael Kelley)   
  - scsi: core: Fix legacy /proc parsing buffer overflow (Tony Battersby)   
  - netfilter: nf_tables: report use refcount overflow (Pablo Neira Ayuso)   
  - btrfs: don't stop integrity writeback too early (Christoph Hellwig)   
  - IB/hfi1: Fix possible panic during hotplug remove (Douglas Miller)   
  - drivers: net: prevent tun_build_skb() to exceed the packet size limit (Andrew Kanner)   
  - dccp: fix data-race around dp->dccps_mss_cache (Eric Dumazet)   
  - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Ziyang Xuan)   
  - net/packet: annotate data-races around tp->status (Eric Dumazet)   
  - drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (Karol Herbst)   
  - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Kirill A. Shutemov)   
  - usb: dwc3: Properly handle processing of pending events (Elson Roy Serrao)   
  - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Alan Stern)   
  - iio: cros_ec: Fix the allocation size for cros_ec_command (Yiyuan Guo)   
  - test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation (Mirsad Goran Todorovac)   
  - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (Ryusuke Konishi)   
  - radix tree test suite: fix incorrect allocation size for pthreads (Colin Ian King)   
  - dmaengine: pl330: Return DMA_PAUSED when transaction is paused (Ilpo Järvinen)   
  - ipv6: adjust ndisc_is_useropt() to also return true for PIO (Maciej Żenczykowski)   
  - mmc: moxart: read scr register without changing byte order (Sergei Antonov)   
  - sparc: fix up arch_cpu_finalize_init() build breakage. (Greg Kroah-Hartman)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.530.5.el7uek]
changelog:
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng)  [Orabug: 35824288]  {CVE-2023-42753} 
  - netfilter: xt_u32: validate user space input (Wander Lairson Costa) [Orabug: 35923468] {CVE-2023-39192}
  - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [Orabug: 35923499] {CVE-2023-39193}


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.531.1.el7uek]
changelog:
  - ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block (Gautham Ananthakrishna)  [Orabug: 35859332]  
  - bnxt_en: fix NULL dereference in bnxt_flash_package_from_file() (Samasth Norway Ananda)  [Orabug: 35848949]  
  - LTS version: v4.14.326 (Saeed Mirzamohammadi)   
  - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (valis) [Orabug: 35814287] {CVE-2023-4207} 
  - mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (William Zhang)   
  - mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller (William Zhang)   
  - mtd: rawnand: brcmnand: Fix potential false time out warning (William Zhang)   
  - mtd: rawnand: brcmnand: Fix crash during the panic_write (William Zhang)   
  - nfsd: fix change_info in NFSv4 RENAME replies (Jeff Layton)   
  - btrfs: fix lockdep splat and potential deadlock after failure running delayed items (Filipe Manana)   
  - attr: block mode changes of symlinks (Christian Brauner)   
  - md/raid1: fix error: ISO C90 forbids mixed declarations (Nigel Croxon)   
  - kobject: Add sanity check for kset->kobj.ktype in kset_register() (Zhen Lei)   
  - serial: cpm_uart: Avoid suspicious locking (Christophe Leroy)   
  - scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (Konstantin Shelekhin)   
  - usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc (Ma Ke)   
  - media: pci: cx23885: replace BUG with error return (Hans Verkuil)   
  - media: tuners: qt1010: replace BUG_ON with a regular error (Hans Verkuil)   
  - iio: core: Use min() instead of min_t() to make code more robust (Andy Shevchenko)   
  - media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() (Zhang Shurong)   
  - media: anysee: fix null-ptr-deref in anysee_master_xfer (Zhang Shurong)   
  - media: af9005: Fix null-ptr-deref in af9005_i2c_xfer (Zhang Shurong)   
  - media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() (Zhang Shurong)   
  - media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer (Zhang Shurong)   
  - powerpc/pseries: fix possible memory leak in ibmebus_bus_init() (ruanjinjie)   
  - jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount (Liu Shixin via Jfs-discussion)   
  - fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() (Andrew Kanner)   
  - ext2: fix datatype of block number in ext2_xattr_set2() (Georg Ottinger)   
  - md: raid1: fix potential OOB in raid1_remove_disk() (Zhang Shurong)   
  - drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() (Tuo Li)   
  - alx: fix OOB-read compiler warning (GONG, Ruiqi)   
  - tpm_tis: Resend command to recover from data transfer errors (Alexander Steffen)   
  - crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (Mark O'Donovan)   
  - wifi: mwifiex: fix fortify warning (Dmitry Antipov)   
  - wifi: ath9k: fix printk specifier (Dongliang Mu)   
  - hw_breakpoint: fix single-stepping when using bpf_overflow_handler (Tomislav Novak)   
  - ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470 (Jiri Slaby (SUSE))   
  - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer (Abhishek Mainkar)   
  - btrfs: output extra debug info if we failed to find an inline backref (Qu Wenruo)   
  - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Fedor Pchelkin)   
  - parisc: Drop loops_per_jiffy from per_cpu struct (Helge Deller)   
  - kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg(). (Kuniyuki Iwashima)   
  - ixgbe: fix timestamp configuration code (Vadim Fedorenko)   
  - kcm: Fix memory leak in error path of kcm_sendmsg() (Shigeru Yoshida)   
  - net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all() (Hangyu Hua)   
  - ata: pata_ftide010: Add missing MODULE_DESCRIPTION (Damien Le Moal)   
  - ata: sata_gemini: Add missing MODULE_DESCRIPTION (Damien Le Moal)   
  - igb: Change IGB_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska)   
  - igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska)   
  - kcm: Destroy mutex in kcm_exit_net() (Shigeru Yoshida)   
  - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (valis) [Orabug: 35814456] {CVE-2023-4921}
  - af_unix: Fix data race around sk->sk_err. (Kuniyuki Iwashima)   
  - af_unix: Fix data-races around sk->sk_shutdown. (Kuniyuki Iwashima)   
  - af_unix: Fix data-race around unix_tot_inflight. (Kuniyuki Iwashima)   
  - af_unix: Fix data-races around user->unix_inflight. (Kuniyuki Iwashima)   
  - net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr (Alex Henrie)   
  - igb: disable virtualization features on 82580 (Corinna Vinschen)   
  - net: read sk->sk_family once in sk_mc_loop() (Eric Dumazet)   
  - pwm: lpc32xx: Remove handling of PWM channels (Vladimir Zapolskiy)   
  - watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load (Raag Jadav)   
  - x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm() (Sean Christopherson)   
  - NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info (Fedor Pchelkin)   
  - clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (Dmitry Baryshkov)   
  - parisc: led: Reduce CPU overhead for disk & lan LED computation (Helge Deller)   
  - parisc: led: Fix LAN receive and transmit LEDs (Helge Deller)   
  - drm/ast: Fix DRAM init on AST2200 (Thomas Zimmermann)   
  - fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (Thomas Zimmermann)   
  - scsi: qla2xxx: Turn off noisy message log (Quinn Tran)   
  - scsi: qla2xxx: fix inconsistent TMF timeout (Quinn Tran)   
  - crypto: stm32 - fix loop iterating through scatterlist for DMA (Thomas Bourgoin)   
  - pstore/ram: Check start of empty przs during init (Enlin Mu)   
  - net: handle ARPHRD_PPP in dev_is_mac_header_xmit() (Nicolas Dichtel)   
  - X.509: if signature is unsupported skip validation (Thore Sommer)   
  - dccp: Fix out of bounds access in DCCP error handler (Jann Horn)   
  - parisc: Fix /proc/cpuinfo output for lscpu (Helge Deller)   
  - procfs: block chmod on /proc/thread-self/comm (Aleksa Sarai)   
  - Revert "PCI: Mark NVIDIA T4 GPUs to avoid bus reset" (Bjorn Helgaas)   
  - ntb: Fix calculation ntb_transport_tx_free_entry() (Dave Jiang)   
  - ntb: Clean up tx tail index on link down (Dave Jiang)   
  - ntb: Drop packets when qp link is down (Dave Jiang)   
  - media: dvb: symbol fixup for dvb_attach() (Greg Kroah-Hartman)   
  - backlight/lv5207lp: Compare against struct fb_info.device (Thomas Zimmermann)   
  - backlight/bd6107: Compare against struct fb_info.device (Thomas Zimmermann)   
  - backlight/gpio_backlight: Compare against struct fb_info.device (Thomas Zimmermann)   
  - ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch() (Gustavo A. R. Silva)   
  - ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (Takashi Iwai)   
  - PM / devfreq: Fix leak in devfreq_dev_release() (Boris Brezillon)   
  - igb: set max size RX buffer when store bad packet is enabled (Radoslaw Tyl) [Orabug: 35924097] {CVE-2023-45871}
  - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU (Eric Dumazet) [Orabug: 35924001] {CVE-2023-42752}
  - dmaengine: ste_dma40: Add missing IRQ check in d40_probe (ruanjinjie)   
  - rpmsg: glink: Add check for kstrdup (Jiasheng Jiang)   
  - HID: multitouch: Correct devm device reference for hidinput input_dev name (Rahul Rameshbabu)   
  - Revert "IB/isert: Fix incorrect release of isert connection" (Leon Romanovsky)   
  - amba: bus: fix refcount leak (Peng Fan)   
  - serial: tegra: handle clk prepare error in tegra_uart_hw_init() (Yi Yang)   
  - scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock (Chengfeng Ye)   
  - scsi: core: Use 32-bit hostnum in scsi_host_lookup() (Tony Battersby)   
  - cgroup:namespace: Remove unused cgroup_namespaces_init() (Lu Jialin)   
  - USB: gadget: f_mass_storage: Fix unused variable warning (Alan Stern)   
  - media: go7007: Remove redundant if statement (Colin Ian King)   
  - dma-buf/sync_file: Fix docs syntax (Rob Clark)   
  - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko)   
  - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko)   
  - x86/APM: drop the duplicate APM_MINOR_DEV macro (Randy Dunlap)   
  - scsi: qla4xxx: Add length check when parsing nlattrs (Lin Ma)   
  - scsi: be2iscsi: Add length check when parsing nlattrs (Lin Ma)   
  - scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param() (Lin Ma)   
  - usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (Xu Yang)   
  - media: mediatek: vcodec: Return NULL if no vdec_fb is found (Irui Wang)   
  - media: cx24120: Add retval check for cx24120_message_send() (Daniil Dulov)   
  - media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (Christophe JAILLET)   
  - media: dib7000p: Fix potential division by zero (Daniil Dulov)   
  - drivers: usb: smsusb: fix error handling code in smsusb_init_device (Dongliang Mu)   
  - NFSD: da_addr_body field missing in some GETDEVICEINFO replies (Chuck Lever)   
  - fs: lockd: avoid possible wrong NULL parameter (Su Hui)   
  - jfs: validate max amount of blocks before allocation. (Alexei Filippov)   
  - powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (Russell Currey)   
  - nfs/blocklayout: Use the passed in gfp flags (Dan Carpenter)   
  - wifi: ath10k: Use RMW accessors for changing LNKCTL (Ilpo Järvinen)   
  - PCI: pciehp: Use RMW accessors for changing LNKCTL (Ilpo Järvinen)   
  - PCI: Mark NVIDIA T4 GPUs to avoid bus reset (Wu Zongyong)   
  - clk: sunxi-ng: Modify mismatched function name (Zhang Jianhua)   
  - drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (Minjie Du)   
  - ALSA: ac97: Fix possible error value of *rac97 (Su Hui)   
  - audit: fix possible soft lockup in __audit_inode_child() (Gaosheng Cui)   
  - smackfs: Prevent underflow in smk_set_cipso() (Dan Carpenter)   
  - of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name() (Ruan Jinjie)   
  - drm: adv7511: Fix low refresh rate register for ADV7533/5 (Bogdan Togorean)   
  - ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split) (Krzysztof Kozlowski)   
  - ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split) (Krzysztof Kozlowski)   
  - ARM: dts: BCM53573: Add cells sizes to PCIe node (Rafał Miłecki)   
  - netrom: Deny concurrent connect(). (Kuniyuki Iwashima)   
  - net: arcnet: Do not call kfree_skb() under local_irq_disable() (Jinjie Ruan)   
  - wifi: ath9k: use IS_ERR() with debugfs_create_dir() (Wang Ming)   
  - wifi: mwifiex: avoid possible NULL skb pointer dereference (Dmitry Antipov)   
  - wifi: ath9k: protect WMI command response buffer replacement with a lock (Fedor Pchelkin)   
  - wifi: mwifiex: Fix missed return in oob checks failed path (Polaris Pi)   
  - wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (Dmitry Antipov)   
  - fs: ocfs2: namei: check return value of ocfs2_add_entry() (Artem Chernyshev)   
  - lwt: Check LWTUNNEL_XMIT_CONTINUE strictly (Yan Zhai)   
  - crypto: caam - fix unchecked return value error (Gaurav Jain)   
  - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Menglong Dong)   
  - Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (Yuanjun Gong)   
  - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Polaris Pi)   
  - can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (Marc Kleine-Budde)   
  - spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (Zhang Shurong)   
  - regmap: rbtree: Use alloc_flags for memory allocations (Dan Carpenter)   
  - cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit() (Liao Chang)   
  - fs: Fix error checking for d_hash_and_lookup() (Wang Ming)   
  - reiserfs: Check the return value from __getblk() (Matthew Wilcox)   
  - Revert "net: macsec: preserve ingress frame ordering" (Sabrina Dubroca)   
  - udf: Handle error when adding extent to a file (Jan Kara)   
  - udf: Check consistency of Space Bitmap Descriptor (Vladislav Efanov)   
  - powerpc/32s: Fix assembler warning about r0 (Christophe Leroy)   
  - powerpc/32: Include .branch_lt in data section (Joel Stanley)   
  - ALSA: seq: oss: Fix racy open/close of MIDI devices (Takashi Iwai)   
  - cifs: add a warning when the in-flight count goes negative (Shyam Prasad N)   
  - sctp: handle invalid error codes without calling BUG() (Dan Carpenter)   
  - bnx2x: fix page fault following EEH recovery (David Christensen)   
  - netlabel: fix shift wrapping bug in netlbl_catmap_setlong() (Dmitry Mastykin)   
  - scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock (Chengfeng Ye)   
  - idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM (Baoquan He)   
  - net: usb: qmi_wwan: add Quectel EM05GV2 (Martin Kohn)   
  - security: keys: perform capable check only on privileged operations (Christian Göttsche)   
  - ASoc: codecs: ES8316: Fix DMIC config (Edgar)   
  - fs/nls: make load_nls() take a const parameter (Saeed Mirzamohammadi)   
  - s390/dasd: use correct number of retries for ERP requests (Stefan Haberland)   
  - m68k: Fix invalid .section syntax (Ben Hutchings)   
  - ethernet: atheros: fix return value check in atl1c_tso_csum() (Yuanjun Gong)   
  - ASoC: da7219: Flush pending AAD IRQ when suspending (Dmytro Maluka)   
  - 9p: virtio: make sure 'offs' is initialized in zc_request (Dominique Martinet)   
  - lib/ubsan: remove returns-nonnull-attribute checks (Andrey Ryabinin)   
  - pinctrl: amd: Don't show `Invalid config param` errors (Mario Limonciello)   
  - nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (Ryusuke Konishi)   
  - nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers() (Ryusuke Konishi)   
  - serial: sc16is7xx: fix bug when first setting GPIO direction (Hugo Villeneuve)   
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (Zheng Wang) [Orabug: 35282808] {CVE-2023-1989}
  - HID: wacom: remove the battery when the EKR is off (Aaron Armstrong Skomra)   
  - USB: serial: option: add FOXCONN T99W368/T99W373 product (Slark Xiao)   
  - USB: serial: option: add Quectel EM05G variant (0x030e) (Martin Kohn)   
  - modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules (Christoph Hellwig)   
  - rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff (Christoph Hellwig)   
  - mmc: au1xmmc: force non-modular build and remove symbol_get usage (Christoph Hellwig)   
  - ARM: pxa: remove use of symbol_get() (Arnd Bergmann)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.532.1.el7uek]
changelog:
  - rds/ib: Preserve dest qp num in the connect request (Arumugam Kolappan)  [Orabug: 35649849]  
  - rds: Provision to allow all trace points at module load time (Arumugam Kolappan)  [Orabug: 35355776]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.532.2.el7uek]
changelog:
  - x86: change default to spec_store_bypass_disable=prctl spectre_v2_user=prctl (Andrea Arcangeli)  [Orabug: 35905888]  
  - LTS version: 4.14.328 (Saeed Mirzamohammadi)   
  - Bluetooth: hci_event: Fix using memcmp when comparing keys (Luiz Augusto von Dentz)   
  - Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name (Kees Cook)   
  - Bluetooth: hci_sock: fix slab oob read in create_monitor_event (Edward AD)   
  - gpio: vf610: set value before the direction to avoid a glitch (Haibo Chen)   
  - s390/pci: fix iommu bitmap allocation (Niklas Schnelle)   
  - perf: Disallow mis-matched inherited group reads (Saeed Mirzamohammadi)   
  - USB: serial: option: add Fibocom to DELL custom modem FM101R-GL (Puliang Lu)   
  - USB: serial: option: add entry for Sierra EM9191 with new firmware (Benoît Monin)   
  - USB: serial: option: add Telit LE910C4-WWX 0x1035 composition (Fabio Porcedda)   
  - ACPI: irq: Fix incorrect return value in acpi_register_gsi() (Sunil V L)   
  - Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()" (Andy Shevchenko)   
  - mmc: core: Capture correct oemid-bits for eMMC cards (Avri Altman)   
  - sky2: Make sure there is at least one frag_addr available (Kees Cook)   
  - wifi: cfg80211: avoid leaking stack data into trace (Benjamin Berg)   
  - wifi: mac80211: allow transmitting EAPOL frames with tainted key (Wen Gong)   
  - Bluetooth: hci_core: Fix build warnings (Luiz Augusto von Dentz)   
  - Bluetooth: Avoid redundant authentication (Ying Hsu)   
  - HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event (Ma Ke)   
  - tracing: relax trace_event_eval_update() execution with cond_resched() (Clément Léger)   
  - ata: libata-eh: Fix compilation warning in ata_eh_link_report() (Damien Le Moal)   
  - gpio: timberdale: Fix potential deadlock on &tgpio->lock (Chengfeng Ye)   
  - overlayfs: set ctime when setting mtime and atime (Jeff Layton)   
  - i2c: mux: Avoid potential false error message in i2c_mux_add_adapter (Heiner Kallweit)   
  - btrfs: initialize start_slot in btrfs_log_prealloc_extents (Josef Bacik)   
  - ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone (Tony Lindgren)   
  - i40e: prevent crash on probe if hw registers have invalid values (Michal Schmidt)   
  - net: usb: smsc95xx: Fix an error code in smsc95xx_reset() (Dan Carpenter)   
  - net: rfkill: gpio: prevent value glitch during probe (Josua Mayer)   
  - net: ipv6: fix return value check in esp_remove_trailer (Ma Ke)   
  - net: ipv4: fix return value check in esp_remove_trailer (Ma Ke)   
  - xfrm: fix a data-race in xfrm_gen_index() (Saeed Mirzamohammadi)   
  - netfilter: nft_payload: fix wrong mac header matching (Florian Westphal)   
  - KVM: x86: Mask LVTPC when handling a PMI (Jim Mattson)   
  - regmap: fix NULL deref on lookup (Johan Hovold)   
  - nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (Krzysztof Kozlowski)   
  - Bluetooth: avoid memcmp() out of bounds warning (Arnd Bergmann)   
  - Bluetooth: hci_event: Fix coding style (Luiz Augusto von Dentz)   
  - Bluetooth: vhci: Fix race when opening vhci device (Arkadiusz Bokowy)   
  - Bluetooth: Fix a refcnt underflow problem for hci_conn (Ziyang Xuan)   
  - Bluetooth: Reject connection with the device which has same BD_ADDR (Lee, Chun-Yi)   
  - Bluetooth: hci_event: Ignore NULL link key (Lee, Chun-Yi)   
  - usb: hub: Guard against accesses to uninitialized BOS descriptors (Ricardo Cañuelo)   
  - x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs (Borislav Petkov (AMD))   
  - usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call (Krishna Kurapati)   
  - usb: gadget: udc-xilinx: replace memcpy with memcpy_toio (Piyush Mehta)   
  - pinctrl: avoid unsafe code pattern in find_pinctrl() (Dmitry Torokhov)   
  - cgroup: Remove duplicates in cgroup v1 tasks file (Michal Koutný)   
  - Input: xpad - add PXN V900 support (Matthias Berndt)   
  - Input: powermate - fix use-after-free in powermate_config_complete (Javier Carrasco)   
  - ceph: fix incorrect revoked caps assert in ceph_fill_file_size() (Xiubo Li)   
  - mcb: remove is_added flag from mcb_device struct (Jorge Sanjuan Garcia)   
  - iio: pressure: ms5611: ms5611_prom_is_valid false negative bug (Alexander Zangerl)   
  - iio: pressure: bmp280: Fix NULL pointer exception (Phil Elwell)   
  - usb: musb: Modify the "HWVers" register address (Xingxing Luo)   
  - usb: musb: Get the musb_qh poniter after musb_giveback (Xingxing Luo)   
  - net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read (Javier Carrasco)   
  - usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer (Wesley Cheng)   
  - workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() (Waiman Long)   
  - nfc: nci: assert requested protocol is valid (Jeremy Cline)   
  - ixgbe: fix crash with empty VF macvlan list (Dan Carpenter)   
  - drm/vmwgfx: fix typo of sizeof argument (Konstantin Meskhidze)   
  - ieee802154: ca8210: Fix a potential UAF in ca8210_probe (Dinghao Liu)   
  - drm: etvnaviv: fix bad backport leading to warning (Martin Fuzzey)   
  - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (Hans de Goede)   
  - RDMA/cxgb4: Check skb value for failure to allocate (Artem Chernyshev)   
  - LTS version: 4.14.327 (Saeed Mirzamohammadi)   
  - parisc: Restore __ldcw_align for PA-RISC 2.0 processors (John David Anglin)   
  - RDMA/mlx5: Fix NULL string error (Shay Drory)   
  - RDMA/cma: Fix truncation compilation warning in make_cma_ports (Leon Romanovsky)   
  - gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config() (Bartosz Golaszewski)   
  - IB/mlx4: Fix the size of a buffer in add_port_entries() (Christophe JAILLET)   
  - cpupower: add Makefile dependencies for install targets (Ivan Babrou)   
  - sctp: update hb timer immediately after users change hb_interval (Xin Long)   
  - sctp: update transport state when processing a dupcook packet (Xin Long)   
  - tcp: fix delayed ACKs for MSS boundary condition (Neal Cardwell)   
  - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Shigeru Yoshida)   
  - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() (David Howells)   
  - modpost: add missing else to the "of" check (Mauricio Faria de Oliveira)   
  - scsi: target: core: Fix deadlock due to recursive locking (Junxiao Bi)   
  - regmap: rbtree: Fix wrong register marked as in-cache when creating new node (Richard Fitzgerald)   
  - drivers/net: process the result of hdlc_open() and add call of hdlc_close() in uhdlc_close() (Alexandra Diupina)   
  - ubi: Refuse attaching if mtd's erasesize is 0 (Zhihao Cheng)   
  - wifi: mwifiex: Fix tlv_buf_left calculation (Gustavo A. R. Silva)   
  - scsi: zfcp: Fix a double put in zfcp_port_enqueue() (Dinghao Liu)   
  - media: dvb: symbol fixup for dvb_attach() - again (Greg Kroah-Hartman)   
  - ata: libata: disallow dev-initiated LPM transitions to unsupported states (Niklas Cassel)   
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Budimir Markovic) [Orabug: 35810543] {CVE-2023-4623}
  - ext4: fix rec_len verify error (Shida Zhang)   
  - vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (George Kennedy)   
  - fs: binfmt_elf_efpic: fix personality for ELF-FDPIC (Greg Ungerer)   
  - ata: libata-sata: increase PMP SRST timeout to 10s (Matthias Schiffer)   
  - ata: libata-core: Fix port and device removal (Damien Le Moal)   
  - ata: libata-core: Fix ata_port_request_pm() locking (Damien Le Moal)   
  - btrfs: properly report 0 avail for very full file systems (Josef Bacik)   
  - i2c: i801: unregister tco_pdev in i801_probe() error path (Heiner Kallweit)   
  - ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES (Niklas Cassel)   
  - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (Pan Bian)   
  - serial: 8250_port: Check IRQ data before use (Andy Shevchenko)   
  - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Mika Westerberg)   
  - watchdog: iTCO_wdt: No need to stop the timer in probe (Mika Westerberg)   
  - ata: libahci: clear pending interrupt status (Szuying Chen)   
  - ata: ahci: Drop pointless VPRINTK() calls and convert the remaining ones (Hannes Reinecke)   
  - fbdev/sh7760fb: Depend on FB=y (Thomas Zimmermann)   
  - ata: libata-eh: do not clear ATA_PFLAG_EH_PENDING in ata_eh_reset() (Niklas Cassel)   
  - ring-buffer: Avoid softlockup in ring_buffer_resize() (Zheng Yejian)   
  - selftests/ftrace: Correctly enable event in instance-event.tc (Zheng Yejian)   
  - parisc: irq: Make irq_stack_union static to avoid sparse warning (Helge Deller)   
  - parisc: iosapic.c: Fix sparse warnings (Helge Deller)   
  - parisc: sba: Fix compile warning wrt list of SBA devices (Helge Deller)   
  - xtensa: boot/lib: fix function prototypes (Max Filippov)   
  - xtensa: boot: don't add include-dirs (Randy Dunlap)   
  - clk: tegra: fix error return case for recalc_rate (Timo Alho)   
  - i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() (Xiaoke Wang)   
  - gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() (Christophe JAILLET)   
  - team: fix null-ptr-deref when team device type is changed (Ziyang Xuan)   
  - powerpc/perf/hv-24x7: Update domain value check (Kajol Jain)   
  - ipv4: fix null-deref in ipv4_link_failure (Kyle Zeng)   
  - NFS/pNFS: Report EINVAL errors from connect() to the server (Trond Myklebust)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.532.3.el7uek]
changelog:
  - Revert "mmc: core: Capture correct oemid-bits for eMMC cards" (Dominique Martinet)   
  - media: dvb-usb-v2: af9035: fix missing unlock (Hans Verkuil)   
  - perf/core: Fix potential NULL deref (Peter Zijlstra)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.532.3.1.el7uek]
changelog:
  - KVM: x86: Don't unnecessarily force masterclock update on vCPU hotplug (Sean Christopherson)  [Orabug: 36148712]


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.533.1.el7uek]
changelog:
  - vhost-scsi: fix vqs allocation memory corruption (Dongli Zhang)  [Orabug: 36110885]  
  - xfs: try to avoid allocation blocking on busy extents (Mark Tinguely)  [Orabug: 35960820]  
  - KVM: x86: Don't unnecessarily force masterclock update on vCPU hotplug (Sean Christopherson)  [Orabug: 35910097]


author: Yifei Liu <yifei.l.liu@oracle.com> [4.14.35-2047.533.2.el7uek]
changelog:
  - LTS version: 4.14.334 (Yifei Liu)   
  - powerpc/ftrace: Fix stack teardown in ftrace_no_trace (Naveen N Rao)   
  - powerpc/ftrace: Create a dummy stackframe to fix stack unwind (Naveen N Rao)   
  - ring-buffer: Fix memory leak of free page (Steven Rostedt (Google))   
  - team: Fix use-after-free when an option instance allocation fails (Florent Revest)   
  - ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS (Baokun Li)   
  - HID: hid-asus: add const to read-only outgoing usb buffer (Denis Benato)   
  - net: usb: qmi_wwan: claim interface 4 for ZTE MF290 (Lech Perczak)   
  - asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation (Linus Torvalds)   
  - HID: multitouch: Add quirk for HONOR GLO-GXXX touchpad (Aoba K)   
  - HID: hid-asus: reset the backlight brightness level on resume (Denis Benato)   
  - platform/x86: intel_telemetry: Fix kernel doc descriptions (Andy Shevchenko)   
  - bcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc() (Coly Li)   
  - blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!" (Ming Lei)   
  - appletalk: Fix Use-After-Free in atalk_ioctl (Hyunwoo Kim)   
  - vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space() (Nikolay Kuratov)   
  - sign-file: Fix incorrect return values check (Yusong Gao)   
  - net: Remove acked SYN flag from packet in the transmit queue correctly (Dong Chenchen)   
  - qed: Fix a potential use-after-free in qed_cxt_tables_alloc (Dinghao Liu)   
  - net/rose: Fix Use-After-Free in rose_ioctl (Hyunwoo Kim)   
  - atm: Fix Use-After-Free in do_vcc_ioctl (Hyunwoo Kim)   
  - atm: solos-pci: Fix potential deadlock on &tx_queue_lock (Chengfeng Ye)   
  - atm: solos-pci: Fix potential deadlock on &cli_queue_lock (Chengfeng Ye)   
  - qca_spi: Fix reset behavior (Stefan Wahren)   
  - qca_debug: Fix ethtool -G iface tx behavior (Stefan Wahren)   
  - qca_debug: Prevent crash on TX ring changes (Stefan Wahren)   
  - LTS version: 4.14.333 (Yifei Liu)   
  - drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group (Ido Schimmel)   
  - psample: Require 'CAP_NET_ADMIN' when joining "packets" group (Ido Schimmel)   
  - genetlink: add CAP_NET_ADMIN test for multicast bind (Ido Schimmel)   
  - netlink: don't call ->netlink_bind with table lock held (Ido Schimmel)   
  - nilfs2: fix missing error check for sb_set_blocksize call (Ryusuke Konishi)   
  - KVM: s390/mm: Properly reset no-dat (Claudio Imbrenda)   
  - serial: 8250_omap: Add earlycon support for the AM654 UART controller (Ronald Wahl)   
  - serial: sc16is7xx: address RX timeout interrupt errata (Daniel Mack)   
  - parport: Add support for Brainboxes IX/UC/PX parallel cards (Cameron Williams)   
  - packet: Move reference count in packet_sock to atomic_long_t (Daniel Borkmann)   
  - tracing: Fix a possible race when disabling buffered events (Petr Pavlu)   
  - tracing: Fix incomplete locking when disabling buffered events (Petr Pavlu)   
  - tracing: Always update snapshot buffer size (Steven Rostedt (Google))   
  - nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage() (Ryusuke Konishi)   
  - ALSA: pcm: fix out-of-bounds in snd_pcm_state_names (Jason Zhang)   
  - scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle() (Dinghao Liu)   
  - tracing: Fix a warning when allocating buffered events fails (Petr Pavlu)   
  - hwmon: (acpi_power_meter) Fix 4.29 MW bug (Armin Wolf)   
  - RDMA/bnxt_re: Correct module description string (Kalesh AP)   
  - tcp: do not accept ACK of bytes we never sent (Eric Dumazet)   
  - net: hns: fix fake link up on xge port (Yonglong Liu)   
  - drm/amdgpu: correct chunk_ptr to a pointer to chunk. (YuanShang)   
  - tg3: Increment tx_dropped in tg3_tso_bug() (Alex Pakhunov)   
  - tg3: Move the [rt]x_dropped counters to tg3_napi (Alex Pakhunov)   
  - LTS version: 4.14.332 (Yifei Liu)   
  - driver core: Release all resources during unbind before updating device links (Saravana Kannan)   
  - net: ravb: Start TX queues after HW initialization succeeded (Claudiu Beznea)   
  - ravb: Fix races between ravb_tx_timeout_work() and net related ops (Yoshihiro Shimoda)   
  - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet (Zhengchao Shao)   
  - btrfs: send: ensure send_fd is writable (Jann Horn)   
  - btrfs: fix off-by-one when checking chunk map includes logical address (Filipe Manana)   
  - powerpc: Don't clobber f0/vs0 during fp|altivec register save (Timothy Pearson)   
  - dm verity: don't perform FEC for failed readahead IO (Wu Bo)   
  - dm-verity: align struct dm_verity_fec_io properly (Mikulas Patocka)   
  - firewire: core: fix possible memory leak in create_units() (Yang Yingliang)   
  - pinctrl: avoid reload of p state in list iteration (Maria Yu)   
  - usb: dwc3: set the dma max_seg_size (Ricardo Ribalda)   
  - USB: serial: option: don't claim interface 4 for ZTE MF290 (Lech Perczak)   
  - USB: serial: option: fix FM101R-GL defines (Puliang Lu)   
  - USB: serial: option: add Fibocom L7xx modules (Victor Fragoso)   
  - bcache: prevent potential division by zero error (Rand Deeb)   
  - bcache: check return value from btree_node_alloc_replacement() (Coly Li)   
  - USB: serial: option: add Luat Air72*U series products (Asuna Yang)   
  - s390/dasd: protect device queue against concurrent access (Jan Höppner)   
  - mtd: rawnand: brcmnand: Fix ecc chunk calculation for erased page bitfips (Claire Lin)   
  - net: axienet: Fix check for partial TX checksum (Samuel Holland)   
  - amd-xgbe: propagate the correct speed and duplex status (Raju Rangoju)   
  - amd-xgbe: handle corner-case during sfp hotplug (Raju Rangoju)   
  - arm/xen: fix xen_vcpu_info allocation alignment (Stefano Stabellini)   
  - net: usb: ax88179_178a: fix failed operations during ax88179_reset (Jose Ignacio Tornos Martinez)   
  - ipv4: Correct/silence an endian warning in __ip_do_redirect (Kunwu Chan)   
  - drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP full (Jonas Karlman)   
  - ata: pata_isapnp: Add missing error check for devm_ioport_map() (Chen Ni)   
  - drm/panel: simple: Fix Innolux G101ICE-L01 timings (Marek Vasut)   
  - RDMA/irdma: Prevent zero-length STAG registration (Christopher Bednarz)   
  - LTS version: 4.14.331 (Yifei Liu)   
  - net: sched: fix race condition in qdisc_graft() (Eric Dumazet)   
  - scsi: virtio_scsi: limit number of hw queues by nr_cpu_ids (Dongli Zhang)   
  - ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks (Kemeng Shi)   
  - ext4: correct return value of ext4_convert_meta_bg (Kemeng Shi)   
  - ext4: correct offset of gdb backup in non meta_bg group to update_backups (Kemeng Shi)   
  - ext4: apply umask if ACL support is disabled (Max Kellermann)   
  - media: venus: hfi: fix the check to handle session buffer requirement (Vikash Garodia)   
  - media: sharp: fix sharp encoding (Sean Young)   
  - i2c: i801: fix potential race in i801_block_transaction_byte_by_byte (Heiner Kallweit)   
  - net: dsa: lan9303: consequently nested-lock physical MDIO (Alexander Sverdlin)   
  - ALSA: info: Fix potential deadlock at disconnection (Takashi Iwai)   
  - parisc/pgtable: Do not drop upper 5 address bits of physical address (Helge Deller)   
  - parisc: Prevent booting 64-bit kernels on PA1.x machines (Helge Deller)   
  - mcb: fix error handling for different scenarios when parsing (Sanjuán García, Jorge)   
  - jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev (Zhihao Cheng)   
  - genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware (Herve Codina)   
  - mmc: meson-gx: Remove setting of CMD_CFG_ERROR (Rong Chen)   
  - PM: hibernate: Clean up sync_read handling in snapshot_write_next() (Brian Geffon)   
  - PM: hibernate: Use __get_safe_page() rather than touching the list (Brian Geffon)   
  - mmc: vub300: fix an error code (Dan Carpenter)   
  - PCI/sysfs: Protect driver's D3cold preference from user space (Lukas Wunner)   
  - hvc/xen: fix error path in xen_hvc_init() to always register frontend driver (David Woodhouse)   
  - audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare() (Paul Moore)   
  - audit: don't take task_lock() in audit_exe_compare() code path (Paul Moore)   
  - KVM: x86: Ignore MSR_AMD64_TW_CFG access (Maciej S. Szmigiero)   
  - randstruct: Fix gcc-plugin performance mode to stay in group (Kees Cook)   
  - media: venus: hfi: add checks to perform sanity on queue pointers (Vikash Garodia)   
  - pwm: Fix double shift bug (Dan Carpenter)   
  - gfs2: ignore negated quota changes (Bob Peterson)   
  - media: vivid: avoid integer overflow (Hans Verkuil)   
  - media: gspca: cpia1: shift-out-of-bounds in set_flicker (Rajeshwar R Shinde)   
  - i2c: sun6i-p2wi: Prevent potential division by zero (Axel Lin)   
  - tty: vcc: Add check for kstrdup() in vcc_probe() (Yi Yang)   
  - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (Wenchao Hao)   
  - atm: iphase: Do PCI error checks on own line (Ilpo Järvinen)   
  - ALSA: hda: Fix possible null-ptr-deref when assigning a stream (Cezary Rojewski)   
  - jfs: fix array-index-out-of-bounds in diAlloc (Manas Ghandat)   
  - jfs: fix array-index-out-of-bounds in dbFindLeaf (Manas Ghandat)   
  - fs/jfs: Add validity check for db_maxag and db_agpref (Juntong Deng)   
  - fs/jfs: Add check for negative db_l2nbperpage (Juntong Deng)   
  - RDMA/hfi1: Use FIELD_GET() to extract Link Width (Ilpo Järvinen)   
  - crypto: pcrypt - Fix hungtask for PADATA_RESET (Lu Jialin)   
  - selftests/efivarfs: create-read: fix a resource leak (zhujun2)   
  - drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga (Mario Limonciello)   
  - drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 (Mario Limonciello)   
  - net: annotate data-races around sk->sk_dst_pending_confirm (Eric Dumazet)   
  - wifi: ath10k: fix clang-specific fortify warning (Dmitry Antipov)   
  - wifi: ath9k: fix clang-specific fortify warnings (Dmitry Antipov)   
  - wifi: mac80211: don't return unset power in ieee80211_get_tx_power() (Ping-Ke Shih)   
  - x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size (Mike Rapoport (IBM))   
  - clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware (Ronald Wahl)   
  - clocksource/drivers/timer-imx-gpt: Fix potential memory leak (Jacky Bai)   
  - locking/ww_mutex/test: Fix potential workqueue corruption (John Stultz)   
  - LTS version: 4.14.330 (Yifei Liu)   
  - btrfs: use u64 for buffer sizes in the tree search ioctls (Filipe Manana)   
  - fbdev: fsl-diu-fb: mark wr_reg_wa() static (Arnd Bergmann)   
  - netfilter: xt_recent: fix (increase) ipv6 literal buffer length (Maciej Żenczykowski)   
  - tg3: power down device only on SYSTEM_POWER_OFF (George Shuklin)   
  - dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses. (Kuniyuki Iwashima)   
  - dccp: Call security_inet_conn_request() after setting IPv4 addresses. (Kuniyuki Iwashima)   
  - tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (Shigeru Yoshida)   
  - llc: verify mac len before reading mac header (Willem de Bruijn)   
  - pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume (Florian Fainelli)   
  - media: s3c-camif: Avoid inappropriate kfree() (Katya Orlova)   
  - pcmcia: ds: fix possible name leak in error path in pcmcia_device_add() (Yang Yingliang)   
  - pcmcia: ds: fix refcount leak in pcmcia_device_add() (Yang Yingliang)   
  - pcmcia: cs: fix possible hung task and memory leak pccardd() (Yang Yingliang)   
  - dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc() (Christophe JAILLET)   
  - USB: usbip: fix stub_dev hub disconnect (Jonas Blixt)   
  - misc: st_core: Do not call kfree_skb() under spin_lock_irqsave() (Jinjie Ruan)   
  - dmaengine: ti: edma: handle irq_of_parse_and_map() errors (Dan Carpenter)   
  - usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency (Jia-Ju Bai)   
  - tty: tty_jobctrl: fix pid memleak in disassociate_ctty() (Yi Yang)   
  - mfd: dln2: Fix double put in dln2_probe (Dinghao Liu)   
  - ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails (Cezary Rojewski)   
  - sh: bios: Revive earlyprintk support (Geert Uytterhoeven)   
  - RDMA/hfi1: Workaround truncation compilation error (Leon Romanovsky)   
  - ext4: move 'ix' sanity check to corrent position (Gou Hao)   
  - ARM: 9321/1: memset: cast the constant byte to unsigned char (Kursad Oney)   
  - hwrng: geode - fix accessing registers (Jonas Gorski)   
  - firmware: ti_sci: Mark driver as non removable (Dhruva Gole)   
  - ARM: dts: qcom: mdm9615: populate vsdcc fixed regulator (Krzysztof Kozlowski)   
  - drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe() (Christophe JAILLET)   
  - drm/radeon: possible buffer overflow (Konstantin Meskhidze)   
  - drm/rockchip: vop: Fix reset of state in duplicate state crtc funcs (Jonas Karlman)   
  - platform/x86: wmi: Fix probe failure when failing to register WMI devices (Armin Wolf)   
  - clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data (Jiasheng Jiang)   
  - clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data (Jiasheng Jiang)   
  - clk: keystone: pll: fix a couple NULL vs IS_ERR() checks (Dan Carpenter)   
  - clk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies (Devi Priya)   
  - ipv6: avoid atomic fragment on GSO packets (Yan Zhai)   
  - ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias() (Christophe JAILLET)   
  - thermal: core: prevent potential string overflow (Dan Carpenter)   
  - wifi: rtlwifi: fix EDCA limit set by BT coexistence (Dmitry Antipov)   
  - tcp_metrics: do not create an entry from tcp_init_metrics() (Eric Dumazet)   
  - tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics() (Eric Dumazet)   
  - i40e: fix potential memory leaks in i40e_remove() (Andrii Staikov)   
  - LTS version: 4.14.329 (Yifei Liu)   
  - tty: 8250: Add support for Intashield IS-100 (Cameron Williams)   
  - tty: 8250: Add support for Brainboxes UP cards (Cameron Williams)   
  - tty: 8250: Add support for additional Brainboxes UC cards (Cameron Williams)   
  - tty: 8250: Remove UC-257 and UC-431 (Cameron Williams)   
  - usb: storage: set 1.50 as the lower bcdDevice for older "Super Top" compatibility (LihaSika)   
  - PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device (Vicki Pfau)   
  - remove the sx8 block driver (Christoph Hellwig)   
  - ata: ahci: fix enum constants for gcc-13 (Arnd Bergmann)   
  - net: chelsio: cxgb4: add an error code check in t4_load_phy_fw (Su Hui)   
  - platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e (Hans de Goede)   
  - scsi: mpt3sas: Fix in error path (Tomas Henzl)   
  - fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit() (Jorge Maidana)   
  - ASoC: rt5650: fix the wrong result of key button (Shuming Fan)   
  - netfilter: nfnetlink_log: silence bogus compiler warning (Florian Westphal)   
  - fbdev: atyfb: only use ioremap_uc() on i386 and ia64 (Arnd Bergmann)   
  - Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport (Dmitry Torokhov)   
  - dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe (Zhang Shurong)   
  - irqchip/stm32-exti: add missing DT IRQ flag translation (Ben Wolsieffer)   
  - ASoC: simple-card: fixup asoc_simple_probe() error handling (Kuninori Morimoto)   
  - x86: Fix .brk attribute in linker script (Juergen Gross)   
  - rpmsg: Fix possible refcount leak in rpmsg_register_device_override() (Hangyu Hua)   
  - rpmsg: glink: Release driver_override (Bjorn Andersson)   
  - rpmsg: Fix calling device_lock() on non-initialized device (Krzysztof Kozlowski)   
  - rpmsg: Fix kfree() of static memory on setting driver_override (Krzysztof Kozlowski)   
  - driver: platform: Add helper for safer setting of driver_override (Krzysztof Kozlowski)   
  - x86/mm: Fix RESERVE_BRK() for older binutils (Josh Poimboeuf)   
  - x86/mm: Simplify RESERVE_BRK() (Josh Poimboeuf)   
  - x86/i8259: Skip probing when ACPI/MADT advertises PCAT compatibility (Thomas Gleixner)   
  - nfsd: lock_rename() needs both directories to live on the same fs (Al Viro)   
  - f2fs: fix to do sanity check on inode type during garbage collection (Chao Yu)   
  - kobject: Fix slab-out-of-bounds in fill_kobj_path() (Wang Hai)   
  - drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() (Lukasz Majczak)   
  - ARM: 8933/1: replace Sun/Solaris style flag on section directive (Nick Desaulniers)   
  - i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node() (Herve Codina)   
  - i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node() (Herve Codina)   
  - i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node() (Herve Codina)   
  - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (Ivan Vecera)   
  - gtp: uapi: fix GTPA_MAX (Pablo Neira Ayuso)   
  - tcp: fix wrong RTO timeout when received SACK reneging (Fred Chen)   
  - r8152: Increase USB control msg timeout to 5000ms as per spec (Douglas Anderson)   
  - igb: Fix potential memory leak in igb_add_ethtool_nfc_entry (Mateusz Palczewski)   
  - treewide: Spelling fix in comment (Kunwu Chan)   
  - virtio_balloon: Fix endless deflation and inflation on arm64 (Gavin Shan)   
  - mcb-lpc: Reallocate memory region to avoid memory overlapping (Rodríguez Barbarin, José Javier)   
  - mcb: Return actual parsed size when reading chameleon table (Rodríguez Barbarin, José Javier)


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.533.3.el7uek]
changelog:
  - net: rfkill: gpio: set GPIO direction (Rouven Czerwinski)   
  - sched/fair: Fix tg->load when offlining a CPU (Vincent Guittot)  [Orabug: 36185208]  
  - IB/cm: Cancel mad on the DREQ event when the state is MRA_REP_RCVD (Mark Zhang)  [Orabug: 36143229]  
  - sched/rt: pick_next_rt_entity(): check list_entry (Pietro Borrello)  [Orabug: 35181559]  {CVE-2023-1077}


author: Saeed Mirzamohammadi <saeed.mirzamohammadi@oracle.com> [4.14.35-2047.532.2.el7uek]
changelog:
  - x86: change default to spec_store_bypass_disable=prctl spectre_v2_user=prctl (Andrea Arcangeli)  [Orabug: 35905888]  
  - LTS version: 4.14.328 (Saeed Mirzamohammadi)   
  - Bluetooth: hci_event: Fix using memcmp when comparing keys (Luiz Augusto von Dentz)   
  - Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name (Kees Cook)   
  - Bluetooth: hci_sock: fix slab oob read in create_monitor_event (Edward AD)   
  - gpio: vf610: set value before the direction to avoid a glitch (Haibo Chen)   
  - s390/pci: fix iommu bitmap allocation (Niklas Schnelle)   
  - perf: Disallow mis-matched inherited group reads (Saeed Mirzamohammadi)   
  - USB: serial: option: add Fibocom to DELL custom modem FM101R-GL (Puliang Lu)   
  - USB: serial: option: add entry for Sierra EM9191 with new firmware (Benoît Monin)   
  - USB: serial: option: add Telit LE910C4-WWX 0x1035 composition (Fabio Porcedda)   
  - ACPI: irq: Fix incorrect return value in acpi_register_gsi() (Sunil V L)   
  - Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()" (Andy Shevchenko)   
  - mmc: core: Capture correct oemid-bits for eMMC cards (Avri Altman)   
  - sky2: Make sure there is at least one frag_addr available (Kees Cook)   
  - wifi: cfg80211: avoid leaking stack data into trace (Benjamin Berg)   
  - wifi: mac80211: allow transmitting EAPOL frames with tainted key (Wen Gong)   
  - Bluetooth: hci_core: Fix build warnings (Luiz Augusto von Dentz)   
  - Bluetooth: Avoid redundant authentication (Ying Hsu)   
  - HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event (Ma Ke)   
  - tracing: relax trace_event_eval_update() execution with cond_resched() (Clément Léger)   
  - ata: libata-eh: Fix compilation warning in ata_eh_link_report() (Damien Le Moal)   
  - gpio: timberdale: Fix potential deadlock on &tgpio->lock (Chengfeng Ye)   
  - overlayfs: set ctime when setting mtime and atime (Jeff Layton)   
  - i2c: mux: Avoid potential false error message in i2c_mux_add_adapter (Heiner Kallweit)   
  - btrfs: initialize start_slot in btrfs_log_prealloc_extents (Josef Bacik)   
  - ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone (Tony Lindgren)   
  - i40e: prevent crash on probe if hw registers have invalid values (Michal Schmidt)   
  - net: usb: smsc95xx: Fix an error code in smsc95xx_reset() (Dan Carpenter)   
  - net: rfkill: gpio: prevent value glitch during probe (Josua Mayer)   
  - net: ipv6: fix return value check in esp_remove_trailer (Ma Ke)   
  - net: ipv4: fix return value check in esp_remove_trailer (Ma Ke)   
  - xfrm: fix a data-race in xfrm_gen_index() (Saeed Mirzamohammadi)   
  - netfilter: nft_payload: fix wrong mac header matching (Florian Westphal)   
  - KVM: x86: Mask LVTPC when handling a PMI (Jim Mattson)   
  - regmap: fix NULL deref on lookup (Johan Hovold)   
  - nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (Krzysztof Kozlowski)   
  - Bluetooth: avoid memcmp() out of bounds warning (Arnd Bergmann)   
  - Bluetooth: hci_event: Fix coding style (Luiz Augusto von Dentz)   
  - Bluetooth: vhci: Fix race when opening vhci device (Arkadiusz Bokowy)   
  - Bluetooth: Fix a refcnt underflow problem for hci_conn (Ziyang Xuan)   
  - Bluetooth: Reject connection with the device which has same BD_ADDR (Lee, Chun-Yi) [Orabug: 35959597] {CVE-2020-26555}
  - Bluetooth: hci_event: Ignore NULL link key (Lee, Chun-Yi)   
  - usb: hub: Guard against accesses to uninitialized BOS descriptors (Ricardo Cañuelo)   
  - x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs (Borislav Petkov (AMD))   
  - usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call (Krishna Kurapati)   
  - usb: gadget: udc-xilinx: replace memcpy with memcpy_toio (Piyush Mehta)   
  - pinctrl: avoid unsafe code pattern in find_pinctrl() (Dmitry Torokhov)   
  - cgroup: Remove duplicates in cgroup v1 tasks file (Michal Koutný)   
  - Input: xpad - add PXN V900 support (Matthias Berndt)   
  - Input: powermate - fix use-after-free in powermate_config_complete (Javier Carrasco)   
  - ceph: fix incorrect revoked caps assert in ceph_fill_file_size() (Xiubo Li)   
  - mcb: remove is_added flag from mcb_device struct (Jorge Sanjuan Garcia)   
  - iio: pressure: ms5611: ms5611_prom_is_valid false negative bug (Alexander Zangerl)   
  - iio: pressure: bmp280: Fix NULL pointer exception (Phil Elwell)   
  - usb: musb: Modify the "HWVers" register address (Xingxing Luo)   
  - usb: musb: Get the musb_qh poniter after musb_giveback (Xingxing Luo)   
  - net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read (Javier Carrasco)   
  - usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer (Wesley Cheng)   
  - workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() (Waiman Long)   
  - nfc: nci: assert requested protocol is valid (Jeremy Cline)   
  - ixgbe: fix crash with empty VF macvlan list (Dan Carpenter)   
  - drm/vmwgfx: fix typo of sizeof argument (Konstantin Meskhidze)   
  - ieee802154: ca8210: Fix a potential UAF in ca8210_probe (Dinghao Liu)   
  - drm: etvnaviv: fix bad backport leading to warning (Martin Fuzzey)   
  - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (Hans de Goede)   
  - RDMA/cxgb4: Check skb value for failure to allocate (Artem Chernyshev)   
  - LTS version: 4.14.327 (Saeed Mirzamohammadi)   
  - parisc: Restore __ldcw_align for PA-RISC 2.0 processors (John David Anglin)   
  - RDMA/mlx5: Fix NULL string error (Shay Drory)   
  - RDMA/cma: Fix truncation compilation warning in make_cma_ports (Leon Romanovsky)   
  - gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config() (Bartosz Golaszewski)   
  - IB/mlx4: Fix the size of a buffer in add_port_entries() (Christophe JAILLET)   
  - cpupower: add Makefile dependencies for install targets (Ivan Babrou)   
  - sctp: update hb timer immediately after users change hb_interval (Xin Long)   
  - sctp: update transport state when processing a dupcook packet (Xin Long)   
  - tcp: fix delayed ACKs for MSS boundary condition (Neal Cardwell)   
  - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Shigeru Yoshida)   
  - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() (David Howells)   
  - modpost: add missing else to the "of" check (Mauricio Faria de Oliveira)   
  - scsi: target: core: Fix deadlock due to recursive locking (Junxiao Bi)   
  - regmap: rbtree: Fix wrong register marked as in-cache when creating new node (Richard Fitzgerald)   
  - drivers/net: process the result of hdlc_open() and add call of hdlc_close() in uhdlc_close() (Alexandra Diupina)   
  - ubi: Refuse attaching if mtd's erasesize is 0 (Zhihao Cheng)   
  - wifi: mwifiex: Fix tlv_buf_left calculation (Gustavo A. R. Silva)   
  - scsi: zfcp: Fix a double put in zfcp_port_enqueue() (Dinghao Liu)   
  - media: dvb: symbol fixup for dvb_attach() - again (Greg Kroah-Hartman)   
  - ata: libata: disallow dev-initiated LPM transitions to unsupported states (Niklas Cassel)   
  - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Budimir Markovic) [Orabug: 35810543] {CVE-2023-4623}
  - ext4: fix rec_len verify error (Shida Zhang)   
  - vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (George Kennedy)   
  - fs: binfmt_elf_efpic: fix personality for ELF-FDPIC (Greg Ungerer)   
  - ata: libata-sata: increase PMP SRST timeout to 10s (Matthias Schiffer)   
  - ata: libata-core: Fix port and device removal (Damien Le Moal)   
  - ata: libata-core: Fix ata_port_request_pm() locking (Damien Le Moal)   
  - btrfs: properly report 0 avail for very full file systems (Josef Bacik)   
  - i2c: i801: unregister tco_pdev in i801_probe() error path (Heiner Kallweit)   
  - ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES (Niklas Cassel)   
  - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (Pan Bian)   
  - serial: 8250_port: Check IRQ data before use (Andy Shevchenko)   
  - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Mika Westerberg)   
  - watchdog: iTCO_wdt: No need to stop the timer in probe (Mika Westerberg)   
  - ata: libahci: clear pending interrupt status (Szuying Chen)   
  - ata: ahci: Drop pointless VPRINTK() calls and convert the remaining ones (Hannes Reinecke)   
  - fbdev/sh7760fb: Depend on FB=y (Thomas Zimmermann)   
  - ata: libata-eh: do not clear ATA_PFLAG_EH_PENDING in ata_eh_reset() (Niklas Cassel)   
  - ring-buffer: Avoid softlockup in ring_buffer_resize() (Zheng Yejian)   
  - selftests/ftrace: Correctly enable event in instance-event.tc (Zheng Yejian)   
  - parisc: irq: Make irq_stack_union static to avoid sparse warning (Helge Deller)   
  - parisc: iosapic.c: Fix sparse warnings (Helge Deller)   
  - parisc: sba: Fix compile warning wrt list of SBA devices (Helge Deller)   
  - xtensa: boot/lib: fix function prototypes (Max Filippov)   
  - xtensa: boot: don't add include-dirs (Randy Dunlap)   
  - clk: tegra: fix error return case for recalc_rate (Timo Alho)   
  - i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() (Xiaoke Wang)   
  - gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() (Christophe JAILLET)   
  - team: fix null-ptr-deref when team device type is changed (Ziyang Xuan)   
  - powerpc/perf/hv-24x7: Update domain value check (Kajol Jain)   
  - ipv4: fix null-deref in ipv4_link_failure (Kyle Zeng)   
  - NFS/pNFS: Report EINVAL errors from connect() to the server (Trond Myklebust)


