# changelog

author: Mark Reynolds <mreynolds@redhat.com> - 2.3.4-3
changelog:
  - Bump version to 2.3.4-3
  - Resolves: rhbz#2189954 - RFE Improve reponse time to filters containing 'nsrole'
  - Resolves: rhbz#2189946 - RFE support of slapi_memberof for plugins/core server
  - Resolves: rhbz#1974242 - Paged search impacts performance


author: Mark Reynolds <mreynolds@redhat.com> - 2.3.6-2
changelog:
  - Bump version to 2.3.6-2
  - Resolves: rhbz#2225532 - 389-ds-base FTBFS with rust-1.71.0
  - Resolves: rhbz#2218209 - useradd: invalid user ID '389:389': installing 389-ds-base in container fails to create the dirsrv user
  - Resolves: rhbz#2207691 - python3-lib389: Python tarfile extraction needs change to avoid a warning
  - Resolves: rhbz#2179278 - dirsrv failed to start after reboot because "dirsrv" did not have access on /run/dirsrv


author: Simon Pichugin <spichugi@redhat.com> - 2.3.6-3
changelog:
  - Bump version to 2.3.6-3
  - Resolves: rhbz#2236163 - Regression: replication can't be enabled for consumer or hub role


author: James Chapman <jachapma@redhat.com> - 2.4.4-1
changelog:
  - Bump version to 2.4.4-1
  - Resolves: RHEL-15907 - Rebase 389-ds-base-2.4 in RHEL 9.4
  - Resolves: RHEL-16830 - ns-slapd crash in slapi_attr_basetype


author: James Chapman <jachapma@redhat.com> - 2.4.5-1
changelog:
  - Bump version to 2.4.5-1
  - Resolves: RHEL-15907 - Rebase 389-ds-base in RHEL 9.4
  - Resolves: RHEL-5142  - RFE Disable Transparent Huge Pages when using large caches
  - Resolves: RHEL-5130  - RFE Add PROXY protocol support to 389-ds-base via confiuration item - similar to Postfix
  - Resolves: RHEL-5133  - RFE Provide a history for 'LastLoginTime'
  - Resolves: RHEL-16984 - RFE inChain Matching Rule


author: James Chapman <jachapma@redhat.com> - 2.4.5-2
changelog:
  - Bump version to 2.4.5-2
  - Resolves: RHEL-15907 - Rebase 389-ds-base in RHEL 9.4
  - Resolves: RHEL-5142  - RFE Disable Transparent Huge Pages when using large caches
  - Resolves: RHEL-5130  - RFE Add PROXY protocol support to 389-ds-base via confiuration item - similar to Postfix
  - Resolves: RHEL-5133  - RFE Provide a history for 'LastLoginTime'
  - Resolves: RHEL-16984 - RFE inChain Matching Rule


author: Simon Pichugin <spichugi@redhat.com> - 2.4.5-4
changelog:
  - Bump version to 2.4.5-4
  - Resolves: RHEL-5130  - RFE Add PROXY protocol support to 389-ds-base via confiuration item - similar to Postfix


author: Viktor Ashirov <vashirov@redhat.com> - 2.4.5-6
changelog:
  - Bump version to 2.4.5-6
  - Resolves: RHEL-30588 - [RFE] allows plugins to log multi-factor authentication notification


author: James Chapman <jachapma@redhat.com> - 2.4.5-7
changelog:
  - Bump version to 2.4.5-7
  - Resolves: RHEL-34819 - redhat-ds:11/389-ds-base: Malformed userPassword may cause crash at do_modify in slapd/modify.c
  - Resolves: RHEL-34825 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ requ


author: James Chapman <jachapma@redhat.com> - 2.4.5-9
changelog:
  - Bump version to 2.4.5-9
  - Resolves: RHEL-44323 - unauthenticated user can trigger a DoS by sending a specific extended search request
  - Resolves: RHEL-40945 - Malformed userPassword hash may cause Denial of Service
  - Resolves: RHEL-49457 - perf search result investigation for many large static groups and members 
  - Resolves: RHEL-49459 - subsuffix are not returned in one level scoped search


author: James Chapman <jachapma@redhat.com> - 2.5.1-1
changelog:
  - Bump version to 2.5.1-1
  - Resolves: RHEL-31777 - Rebase 389-ds-base.2.5.1 in RHEL 9.5
  - Resolves: RHEL-33348 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ requ


author: James Chapman <jachapma@redhat.com> - 2.5.1-2
changelog:
  - Bump version to 2.5.1-2
  - Resolves: RHEL-44324 - unauthenticated user can trigger a DoS by sending a specific extended search request
  - Resolves: RHEL-40946 - Malformed userPassword hash may cause Denial of Service
  - Resolves: RHEL-33087 - dsconf schema does not show inChain matching rule
  - Resolves: RHEL-28177 - Malformed userPassword may cause crash at do_modify in slapd/modify.c
  - Resolves: RHEL-25070 - nsslapd-haproxy-trusted-ip is not in schema


author: Viktor Ashirov <vashirov@redhat.com> - 2.5.2-1
changelog:
  - Bump version to 2.5.2-1
  - Resolves: RHEL-5108 - ns-slapd crash in referint_get_config
  - Resolves: RHEL-5113 - nsslapd-numlisteners limit is not enforced
  - Resolves: RHEL-5115 - `dscreate ds-root` accepts relative path
  - Resolves: RHEL-5131 - ldif2db can be very slow
  - Resolves: RHEL-5138 - Logconv.pl CSV file contains mismatched header and data columns
  - Resolves: RHEL-14760 - ns-slapd crash in vlvIndex_delete
  - Resolves: RHEL-17511 - nsslapd-idletimeout is ignored
  - Resolves: RHEL-49454 - perf search result investigation for many large static groups and members
  - Resolves: RHEL-49458 - subsuffix are not returned in one level scoped search


author: Viktor Ashirov <vashirov@redhat.com> - 2.5.2-2
changelog:
  - Bump version to 2.5.2-2
  - Resolves: RHEL-55744 - ipahealthcheck.ds.backends.BackendsCheck.DSBLE0006: BDB is deprecated and should not be used as a backend


author: James Chapman <jachapma@redhat.com> - 2.5.2-3
changelog:
  - Bump version to 2.5.2-3
  - Resolves: RHEL-65775 - Wrong set of entries returned for some search filters [rhel-9.5.z]
  - Resolves: RHEL-66138 - deadlock during cleanAllRuv [rhel-9.5.z]
  - Resolves: RHEL-67163 - cleanallruv consums CPU and is slow [rhel-9.5.z]
  - Resolves: RHEL-70257 - Freelist ordering causes high wtime [rhel-9.5.z]


author: Viktor Ashirov <vashirov@redhat.com> - 2.5.2-5
changelog:
  - Resolves: RHEL-74350 - Some nsslapd-haproxy-trusted-ip values are discarded upon a restart. [rhel-9.5.z]


author: Viktor Ashirov <vashirov@redhat.com> - 2.5.2-6
changelog:
  - Resolves: RHEL-69825 - "Duplicated DN detected" errors when creating indexes or importing entries. [rhel-9.5.z]
  - Resolves: RHEL-70126 - Crash in attrlist_find() when the Account Policy plugin is enabled. [rhel-9.5.z]
  - Resolves: RHEL-74152 - backup/restore broken [rhel-9.5.z]
  - Resolves: RHEL-74157 - If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex [rhel-9.5.z]
  - Resolves: RHEL-74167 - On replica consumer, account policy plugin fails to manage the last login history [rhel-9.5.z]
  - Resolves: RHEL-78343 - During import of entries without nsUniqueId, a supplier generates duplicate nsUniqueId (LMDB only) [rhel-9.5.z]
  - Resolves: RHEL-79497 - Failed to set sslversionmax to TLS1.3  in FIPS mode with dsconf $INSTANCE security set --tls-protocol-max TLS1.3 [rhel-9.5.z]
  - Resolves: RHEL-81102 - After an initial failure, subsequent online backups will not work. [rhel-9.5.z]
  - Resolves: RHEL-81107 - Online backup hangs sporadically. [rhel-9.5.z]
  - Resolves: RHEL-81113 - IPA LDAP error code T3 when no exceeded time limit from a paged search result [rhel-9.5.z]
  - Resolves: RHEL-81139 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-9.5.z]
  - Resolves: RHEL-81146 - 389DirectoryServer Process Stops When Setting up Sorted VLV Index [rhel-9.5.z]
  - Resolves: RHEL-81157 - AddressSanitizer: double-free  [rhel-9.5.z]
  - Resolves: RHEL-81171 - leaked_storage: Variable "childelems" going out of scope leaks the storage it points to. [rhel-9.5.z]


author: Viktor Ashirov <vashirov@redhat.com> - 2.5.2-9
changelog:
  - Resolves: RHEL-83874 - CVE-2025-2487 389-ds-base: null pointer dereference leads to denial of service [rhel-9.5.z]
  - Resolves: RHEL-80712 - Increased memory consumption caused by NDN cache [rhel-9.5.z]
  - Resolves: RHEL-87194 - Some replication status data are reset upon a restart. [rhel-9.5.z]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-1
changelog:
  - Update to 2.6.1
  - Resolves: RHEL-5151 - [RFE] defer memberof nested updates
  - Resolves: RHEL-54148 - leaked_storage: Variable "childelems" going out of scope leaks the storage it points to.
  - Resolves: RHEL-60135 - deadlock during cleanAllRuv
  - Resolves: RHEL-61341 - After an initial failure, subsequent online backups will not work.
  - Resolves: RHEL-61349 - Remove deprecated setting for HR time stamps in logs
  - Resolves: RHEL-62875 - Passwords are not being updated to use the configured storage scheme ( nsslapd-enable-upgrade-hash is enabled ).
  - Resolves: RHEL-64438 - VLV errors with RSNv3 and pruning enabled [rhel-9]
  - Resolves: RHEL-64854 - cleanallruv consums CPU and is slow
  - Resolves: RHEL-65506 - AddressSanitizer: double-free
  - Resolves: RHEL-65512 - AddressSanitizer: heap-use-after-free in import_abort_all
  - Resolves: RHEL-65561 - LeakSanitizer: detected memory leaks in dbmdb_public_db_op
  - Resolves: RHEL-65662 - Replication issue between masters using cert based authentication
  - Resolves: RHEL-65664 - LDAP unprotected search query during certificate based authentication
  - Resolves: RHEL-65665 - Ambiguous warning about SELinux in dscreate for non-root user
  - Resolves: RHEL-65741 - LeakSanitizer: memory leak in ldbm_entryrdn.c
  - Resolves: RHEL-65776 - Wrong set of entries returned for some search filters [rhel-9]
  - Resolves: RHEL-67004 - "dsconf config replace" should handle multivalued attributes.
  - Resolves: RHEL-67005 - Online backup hangs sporadically.
  - Resolves: RHEL-67008 - Some replication status data are reset upon a restart.
  - Resolves: RHEL-67020 - 389DirectoryServer Process Stops When Setting up Sorted VLV Index
  - Resolves: RHEL-67024 - Some nsslapd-haproxy-trusted-ip values are discarded upon a restart.
  - Resolves: RHEL-69806 - ipahealthcheck.ds.replication displays WARNING '1 conflict entries found under the replication suffix'
  - Resolves: RHEL-69826 - "Duplicated DN detected" errors when creating indexes or importing entries. [rhel-9]
  - Resolves: RHEL-70127 - Crash in attrlist_find() when the Account Policy plugin is enabled. [rhel-9]
  - Resolves: RHEL-70252 - Freelist ordering causes high wtime
  - Resolves: RHEL-71218 - Sub suffix causes "id2entry - Could not open id2entry err 0" error when the Directory Server starts [rhel-9]
  - Resolves: RHEL-74153 - backup/restore broken [rhel-9]
  - Resolves: RHEL-74158 - If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex [rhel-9]
  - Resolves: RHEL-74163 - Crash during bind when acct policy plugin does not have "alwaysrecordlogin" set [rhel-9]
  - Resolves: RHEL-74168 - On replica consumer, account policy plugin fails to manage the last login history [rhel-9]
  - Resolves: RHEL-74174 - Replication broken after backup restore with freeipa configuration [rhel-9]
  - Resolves: RHEL-74353 - nsslapd-haproxy-trusted-ip is not in schema [rhel-9]
  - Resolves: RHEL-76019 - IPA LDAP error code T3 when no exceeded time limit from a paged search result [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-3
changelog:
  - Resolves: RHEL-18333 Can't rename users member of automember rule
  - Resolves: RHEL-61341 After an initial failure, subsequent online backups will not work.
  - Resolves: RHEL-63887 nsslapd-mdb-max-dbs autotuning doesn't work properly
  - Resolves: RHEL-63891 dbscan crashes when showing statistics for MDB
  - Resolves: RHEL-63998 dsconf should check for number of available named databases
  - Resolves: RHEL-78344 During import of entries without nsUniqueId, a supplier generates duplicate nsUniqueId (LMDB only) [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-4
changelog:
  - Resolves: RHEL-78722 - Failed to set sslversionmax to TLS1.3 in FIPS mode with dsconf $INSTANCE security set --tls-protocol-max TLS1.3


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-6
changelog:
  - Resolves: RHEL-86065 - Backport lib389 fixes required for WebUI [rhel-9.6.z]
  - Resolves: RHEL-80713 - Increased memory consumption caused by NDN cache [rhel-9.6.z]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-8
changelog:
  - Resolves: RHEL-83876 - CVE-2025-2487 389-ds-base: null pointer dereference leads to denial of service [rhel-9.6]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-9
changelog:
  - Reverts: RHEL-80713 - Increased memory consumption caused by NDN cache [rhel-9.6.z]
  - Resolves: RHEL-95443 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9.6.z]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-10
changelog:
  - Resolves: RHEL-89735 - dsconf backend replication monitor fails if replica id starts with 0 [rhel-9.6.z]
  - Resolves: RHEL-89746 - ns-slapd crash in dbmdb_import_prepare_worker_entry() [rhel-9.6.z]
  - Resolves: RHEL-89752 - Nested group does not receive memberOf attribute [rhel-9.6.z]
  - Resolves: RHEL-89761 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9.6.z]
  - Resolves: RHEL-89768 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-9.6.z]
  - Resolves: RHEL-89773 - Improve the "result" field of ipa-healthcheck if replicas are busy [rhel-9.6.z]
  - Resolves: RHEL-89781 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-9.6.z]
  - Resolves: RHEL-95767 - Improve  error message when bulk import connection is closed [rhel-9.6.z]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-11
changelog:
  - Resolves: RHEL-18333 - Can't rename users member of automember rule [rhel-9.6.z]
  - Resolves: RHEL-81140 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-9.6.z]
  - Resolves: RHEL-92052 - Memory leak in roles_cache_create_object_from_entry [rhel-9.6.z]
  - Resolves: RHEL-95384 - Getting error messages while migration to LMDB.
  - Resolves: RHEL-106582 - Failure to gather database statistics with LMDB.
  - Resolves: RHEL-106793 - LDAP healthcheck complains about needed parameters when using LMDB.
  - Resolves: RHEL-107004 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9.6.z]
  - Resolves: RHEL-109033 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9.6.z]
  - Resolves: RHEL-109884 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9.6.z]
  - Resolves: RHEL-109888 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9.6.z]
  - Resolves: RHEL-109891 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy.  [rhel-9.6.z]
  - Resolves: RHEL-109896 - AddressSanitizer: leak in do_search [rhel-9.6.z]
  - Resolves: RHEL-109904 - ns-slapd crashed when we add nsslapd-referral [rhel-9.6.z]
  - Resolves: RHEL-109945 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9.6.z]
  - Resolves: RHEL-109954 - CWE-532 Created user password hash available to see in audit log [rhel-9.6.z]
  - Resolves: RHEL-109957 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9.6.z]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-12
changelog:
  - Resolves: RHEL-104590 - RHDS12: Web console doesn't show Server Version [rhel-9.6.z]
  - Resolves: RHEL-104592 - The numSubordinates value is not matching the number of direct children. [rhel-9.6.z]
  - Resolves: RHEL-111227 - Error showing local password policy on web UI [rhel-9.6.z]
  - Resolves: RHEL-112678 - Statistics about index lookup report a wrong duration [rhel-9.6.z]
  - Resolves: RHEL-112692 - Crash if repl keep alive entry can not be created [rhel-9.6.z]
  - Resolves: RHEL-112725 - Exception thrown by dsconf instance repl get_ruv [rhel-9.6.z]
  - Resolves: RHEL-113979 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9.6.z]
  - Resolves: RHEL-114952 - lib389/replica.py is using unexisting datetime.UTC in python3.9 [rhel-9.6.z]
  - Resolves: RHEL-117048 - Replication online reinitialization of a large database gets stalled. [rhel-9.6.z]
  - Resolves: RHEL-117769 - When the server restarts after a crash, the RFE assumes memberof should be recomputed. It triggers a memberof fixup task, dirsrv became unresponsive. [rhel-9.6.z]
  - Resolves: RHEL-117778 - Ignore the memberOfDeferredUpdate setting when LMDB is used.  [rhel-9.6.z]


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-3
changelog:
  - Resolves: RHEL-77983 - Defects found by OpenScanHub
  - Resolves: RHEL-79673 - Improve the "result" field of ipa-healthcheck if replicas are busy
  - Resolves: RHEL-80496 - Can't rename users member of automember rule [rhel-9]
  - Resolves: RHEL-81141 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-9]
  - Resolves: RHEL-89736 - dsconf backend replication monitor fails if replica id starts with 0 [rhel-9]
  - Resolves: RHEL-89745 - ns-slapd crash in dbmdb_import_prepare_worker_entry() [rhel-9]
  - Resolves: RHEL-89753 - Nested group does not receive memberOf attribute [rhel-9]
  - Resolves: RHEL-89769 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-9]
  - Resolves: RHEL-89782 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-9]
  - Resolves: RHEL-95768 - Improve error message when bulk import connection is closed [rhel-9]
  - Resolves: RHEL-101189 - lib389/replica.py is using unexisting datetime.UTC in python3.9


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-4
changelog:
  - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-5
changelog:
  - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9]
  - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry
  - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9]
  - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore.
  - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9]
  - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9]
  - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9]
  - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9]
  - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9]
  - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-7
changelog:
  - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9]
  - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9]
  - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9]
  - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9]
  - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9]
  - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy.  [rhel-9]
  - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9]
  - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-8
changelog:
  - Resolves: RHEL-111228 - Error showing local password policy on web UI [rhel-9.7.z]
  - Resolves: RHEL-117049 - Replication online reinitialization of a large database gets stalled. [rhel-9.7.z]
  - Resolves: RHEL-117770 - When the server restarts after a crash, the RFE assumes memberof should be recomputed. It triggers a memberof fixup task, dirsrv became unresponsive. [rhel-9.7.z]
  - Resolves: RHEL-123230 - Improve the way to detect asynchronous operations in the access logs [rhel-9.7.z]
  - Resolves: RHEL-123243 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9.7.z]
  - Resolves: RHEL-123257 - Typo in errors log after a Memberof fixup task. [rhel-9.7.z]
  - Resolves: RHEL-123278 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9.7.z]
  - Resolves: RHEL-123367 - IPA health check up script shows time skew is over 24 hours [rhel-9.7.z]
  - Resolves: RHEL-123765 - 389-ds-base OpenScanHub Leaks Detected [rhel-9.7.z]
  - Resolves: RHEL-123852 - Units for changing MDB max size are not consistent across different tools [rhel-9.7.z]
  - Resolves: RHEL-123892 - Improve output dsctl dbverify when backend does not exist [rhel-9.7.z]
  - Resolves: RHEL-123896 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9.7.z]
  - Resolves: RHEL-123922 - Changelog trimming - add number of scanned entries to the log [rhel-9.7.z]
  - Resolves: RHEL-126551 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9.7.z]
  - Resolves: RHEL-129558 - Online initialization of consumers fails with error -23 [rhel-9.7.z]
  - Resolves: RHEL-129579 - Fix paged result search locking [rhel-9.7.z]
  - Resolves: RHEL-138480 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9.7.z]
  - Resolves: RHEL-140088 - Upgrading IDM  to latest version: 389-ds-base and ipa-server breaks replication  [rhel-9.7.z]
  - Resolves: RHEL-140274 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9.7.z]


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-9
changelog:
  - Resolves: RHEL-116425 - RetroCL plugin generates invalid LDIF [rhel-9.7.z]
  - Resolves: RHEL-123243 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9.7.z]
  - Resolves: RHEL-123765 - 389-ds-base OpenScanHub Leaks Detected [rhel-9.7.z]
  - Resolves: RHEL-123896 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9.7.z]
  - Resolves: RHEL-129558 - Online initialization of consumers fails with error -23 [rhel-9.7.z]
  - Resolves: RHEL-140088 - Upgrading IDM  to latest version: 389-ds-base and ipa-server breaks replication  [rhel-9.7.z]
  - Resolves: RHEL-142979 - Scalability issue of replication online initialization with large database [rhel-9.7.z]
  - Resolves: RHEL-146898 - memory corruption in alias entry plugin [rhel-9.7.z]
  - Resolves: RHEL-147211 - Access logs are not getting deleted as configured. [rhel-9.7.z]


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-10
changelog:
  - Resolves: RHEL-123243 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9.7.z]
  - Resolves: RHEL-123765 - 389-ds-base OpenScanHub Leaks Detected [rhel-9.7.z]
  - Resolves: RHEL-137083 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.7.z]
  - Resolves: RHEL-140088 - Upgrading IDM  to latest version: 389-ds-base and ipa-server breaks replication  [rhel-9.7.z]
  - Resolves: RHEL-150906 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9.7.z]


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-12
changelog:
  - Resolves: RHEL-153553 - 389-ds-base-2.7.0-10.el9_7 updates dse.ldif with lowercase DNs causing ipa-healthcheck errors


author: Paul Howarth <paul@city-fan.org> - 1.0.5-23
changelog:
  - Don't pass gcc-only compiler flags to other compilers, e.g. clang
    (based on https://src.fedoraproject.org/rpms/Judy/pull-request/3 from
    Timm Baeder)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.46.0-16
changelog:
  - Revert OVS checkpoint rollback patches.
  - Fix OVS stage3 activation without DHCP client initialized (RHEL-49799)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.46.0-18
changelog:
  - Fix crash dereferencing NULL pointer during debug logging (RHEL-46200)
  - Use /etc/hosts for hostname reesolution (RHEL-53202)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.46.0-19
changelog:
  - Retry hostname resolutions when it fails (RHEL-55397)
  - cloud-setup: allow bigger restart bursts (RHEL-56739)
  - cloud-setup: Fix Azure primary and secondary address swap (RHEL-56386)


author: Beniamino Galvani <bgalvani@redhat.com> - 1.45.8-1
changelog:
  - Update to 1.45.8 (development)
  - Introduce "stable-ssid" option for wifi.cloned-mac-address property (RHEL-16470)


author: Ján Václav <jvaclav@redhat.com> - 1.45.9-1
changelog:
  - Update to 1.45.9 (development)
  - Add support for PRP/HSR interface (RHEL-5852)
  - Drop support for the 'slaves-order' option in NetworkManager.conf (RHEL-19437)
  - Return error when setting invalid IP addresses or properties via D-Bus (RHEL-19315)
  - Fix extra route being created besides ECMP route (RHEL-1682)


author: Stanislas FAYE <sfaye@redhat.com> - 1.45.10-1
changelog:
  - Update to 1.45.10 (development)
  - Deprecate and Replace connection.master in libnm-core and libnm (RHEL-17619)


author: Stanislas FAYE <sfaye@redhat.com> - 1.45.90-1
changelog:
  - Update to 1.45.90 release (release candidate)
  - Deprecate and Replace connection.slave-type in libnm-core and libnm (RHEL-17620)
  - [RFE] Support assigning IPv4 static route to interface without IPv4 address (RHEL-5098)


author: Íñigo Huguet <ihuguet@redhat.com> - 1.45.91-1
changelog:
  - Update to 1.45.91 release (release candidate)
  - Support changing the DSCP header field for DHCP packets, and set the default to CS0 (RHEL-16040)
  - Deprecate connection.autoconnect-slaves in favour of autoconnect-ports (RHEL-17621)
  - Don't reset bridge's PVID in reapply if it didn't change (RHEL-21576)


author: Stanislas FAYE <sfaye@redhat.com> - 1.46.0-1
changelog:
  - Update to 1.46.0 release
  - Fix DHCPv4 lease can't be renewed after it expires (RHEL-24127)
  - Support the MACsec offload mode (RHEL-24337)
  - Support creating generic devices via external "device-handler" dispatcher (RHEL-1567)
  - Support changing the eswitch mode (RHEL-1441)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1.46.0-2
changelog:
  - Drop PrivateUser directive from nm-cloud-setup service (RHEL-27503)
  - Support rollback on global DNS (RHEL-29725)
  - Do not allow OVS bridge or port to be parent (RHEL-28545)


author: Beniamino Galvani <bgalvani@redhat.com> 1:1.48.2-1
changelog:
  - Update to 1.48.2 release
  - Save connection timestamps when shutting down (RHEL-35539)
  - Fix regression with OpenVPN dynamic challenge (RHEL-43720)


author: Stanislas Faye <sfaye@redhat.com> 1:1.48.4-1
changelog:
  - Update to 1.48.4 release
  - Support matching a OVS system interface by MAC address (RHEL-34617)
  - When looking up the system hostname from the reverse DNS lookup of
    addresses configured on interfaces, NetworkManager now takes into
    account the content of /etc/hosts (RHEL-33435)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.48.6-1
changelog:
  - Wait until link is ready before activating for ovs-interface (RHEL-49796)
  - Fix rollback on OVS checkpoint (RHEL-31972)
  - Assert that the auto-activate list is empty on dispose (RHEL-44345)


author: Fernando Fernandez Mancera <ferferna@redha.com> - 1:1.46.8-1
changelog:
  - Stop writing offensive terms into keyfiles (RHEL-52597)
  - Remove offensive words (RHEL-33368)
  - Fix cloned-mac-address race condition with DHCP on ovs-interfaces (RHEL-49796)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.48.10-1
changelog:
  - Unblock the autoconnect for children when parent is available (RHEL-46904)
  - Fix crash produced by malformed LLDP package when debug logging (RHEL-46199)
  - Support reapplying bridge-port VLANs (RHEL-26750)
  - Add small backoff time before resync (RHEL-29902)


author: Eduard Abdullin <eabdullin@almalinux.org> - 1:1.48.10-2.alma.1
changelog:
  - cloud-setup: allow bigger restart bursts
  - cloud-setup: azure: ensure that primary address is placed
   first


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.48.10-2
changelog:
  - cloud-setup: Allow bigger restart bursts (RHEL-56740)
  - cloud-setup: Fix Azure swap of primary and secondary IP addresses (RHEL-56387)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.48.10-3
changelog:
  - Only validate the SR-IOV device capability when SR-IOV is enabled (RHEL-58397)
  - Fix bug when deactivating port connections (RHEL-50747)
  - Fix validation of ovs-dpdk interface name (RHEL-60022)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.48.10-4
changelog:
  - Remove routes added by NetworkManager when doing reapply, also those not in main table (RHEL-73013)


author: Wen Liang <wenliang@redhat.com> - 1:1.48.10-5
changelog:
  - vpn: Support routing rules in vpn conenctions (RHEL-73167)
  - vpn: Place gateway route to table defined in ipvx.route-table (RHEL-73166)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.48.10-8
changelog:
  - policy: always reset retries when unblocking children or ports (RHEL-78748)
  - core: prevent the activation of unavailable OVS interfaces only (RHEL-79995)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.52.0-1
changelog:
  - Update to 1.52.0
  - Add support for creating VLANs for secondary VNICs in nm-cloud-setup (RHEL-36423)
  - Always reset retries when unblocking children or ports (RHEL-78122)
  - Prevent the activation of unavailable OVS interfaces (RHEL-79997)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.52.0-3
changelog:
  - Invalid memory access on Dnsconfd DBUS error (RHEL-84692)
  - Support IP configuration for secondary interfaces on Oracle VM from metadata (RHEL-84695)


author: Wen Liang <wenliang@redhat.com> - 1:1.52.0-4
changelog:
  - ovs: allow reapplying ovs-bridge and ovs-port properties (RHEL-87595)
  - core: ovs: fix NULL pointer dereference in ovsdb read timeout callback (RHEL-87347)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.51.7-2
changelog:
  - Remove the build argument -flto-partition to avoid compilation crashes due
    to high memory usage.


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.52.0-6
changelog:
  - ovs: only keep bridges and ports with NM interfaces attached (RHEL-87167)
  - device: update the external-down unmanaged flag on port attach/release (RHEL-93183)
  - ovs: set the tun interface up before stage3 (RHEL-98550)
  - bridge: fix reapplying port VLANs (RHEL-102742)
  - device: don't disable IPv6 in stage3 on reapply (RHEL-102771)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.53.1-1
changelog:
  - Update to 1.53.1 (dev)
  - Update MPTCP endpoints creation order (RHEL-78752)
  - Print all warnings from nmcli to stderr (RHEL-74255)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.2-1
changelog:
  - Update to 1.53.2 (dev)
  - Fix invalid memory access on Dnsconfd DBUS error (RHEL-83175)
  - Avoid getting transient hostname when "localhost" set in /etc/hostname (RHEL-55730)


author: Filip Pokrývka <fpokryvk@redhat.com> - 1:1.53.3-1
changelog:
  - Update to 1.53.3 (dev)
  - Add more IPv6 prefix delegation options (RHEL-85765)
  - Fix order of parsing port/controller properties in nmcli (RHEL-85767)
  - Improve interface activation logic (RHEL-85766)
  - Fix WireGuard IPv6 firewall rules (RHEL-85763)
  - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.4-1
changelog:
  - Update to 1.53.4 (dev)
  - initrd: add new NBFT parser (RHEL-83061)
  - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
  - Support reapply on OVS settings (RHEL-86877)
  - Add support for configuring the loopback interface in nmtui (RHEL-85770)
  - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
  - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
  - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.90-1
changelog:
  - Update to 1.54.0 (rc1)
  - Devices not becoming managed sometimes (RHEL-93108)
  - Crash on _l3cfg_notify_cb (RHEL-92314)
  - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.91-1
changelog:
  - Update to 1.54.0 (rc2)
  - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
  - Fix a race condition in ovs tun interface (RHEL-98551)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.92-1
changelog:
  - Update to 1.54.0 (rc3)
  - Fix ipv6 static route deleted with dualstack (RHEL-102772)
  - Allow setting IP method to disabled in port connection (RHEL-102768)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.54.0-1
changelog:
  - Update to 1.54.0
  - Fix reaply on bridge port VLAN (RHEL-102743)
  - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-2
changelog:
  - Resolve issues found by rpmdiff
    - add explicit Requires: on subpackages to avoid the need to test
      interoperability between the various combinations of old and new
      subpackages


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-3
changelog:
  - Add a patch to resolve one more issue found by rpmdiff/rpminspect:
    fix getaddrinfo detection to avoid using gethostbyname.


author: Neal Gompa <ngompa@centosproject.org> - 2.0.18-1
changelog:
  - Update to 2.0.18
    Resolves: rhbz#2028076
  - Fix multilib conflict with SDL_revision.h (rhbz#2008838)
  - Backport fix for building against wayland-1.20+
  - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-10
changelog:
  - wla-Disable-automatic-log-collector.patch [RHEL-7273]
  - Resolves: RHEL-7273
    ([Azure][WALA] Consider to disable Log collector)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-11
changelog:
  - wla-redhat-Add-a-udev-rule-to-avoid-managing-slave-NICs-.patch [RHEL-5880]
  - Resolves: RHEL-5880
    ([Azure][RHEL-9]68-azure-sriov-nm-unmanaged.rules cannot stop NetworkManager-wait-online.service checking SRIOV interface)


author: Jon Maloy <jmaloy@redhat.com> - 2.7.0.6-12
changelog:
  - wla-redhat-Include-10-azure-unmanaged-sriov.rules-into-i.patch [RHEL-40957]
  - Resolves: RHEL-40957
    ([Azure][ARM][RHEL-9] Kdump cannot save vmcore via ssh or nfs)


author: Jon Maloy <jmaloy@redhat.com> - 2.13.1.1-2
changelog:
  - wla-docs-add-waagent-manpage-3401.patch [RHEL-109496]
  - Resolves: RHEL-109496
    ([Azure][WALA][RHEL-9] Missing man page)


author: Jon Maloy <jmaloy@redhat.com> - 2.13.1.1-3
changelog:
  - wla-Use-systemctl-instead-of-service-to-manager-services.patch [RHEL-97572]
  - Resolves: RHEL-97572
    ([Azure][RHEL-9][WALA][Image mode] Cannot find 'service' command)


author: Jon Maloy <jmaloy@redhat.com> - 2.13.1.1-3.el9_7.1
changelog:
  - wla-Support-for-FIPS-140-3-3324.patch [RHEL-124949]
  - Resolves: RHEL-124949
    (Update walagent to 2.14 to support FIPS 140-3 on Azure [rhel-9.7.z])


author: Jon Maloy <jmaloy@redhat.com> - 2.13.1.1-3.el9_7.2
changelog:
  - wla-Jira-https-issues.redhat.com-browse-RHEL-134939.patch [RHEL-134939]
  - Resolves: RHEL-134939
    (Backport ConditionVirtualization=|microsoft for waagent in RHEL 9.x [rhel-9.7.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-1
changelog:
  - Rebase to 2.7.0.6-1 [bz#2083464]
  - Adding restart_if implementation for RHEL [bz#2081944]
  - Resolves: bz#2083464
    ([Azure][RHEL-9]Rebase WALinuxAgent to v2.7.0.6)
  - Resolves: bz#2081944
    ([Azure][WALA][9.0] WALA provisions VM failed because of no "ifdown")


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-2
changelog:
  - wla-redhat-Fix-command-sequence-for-restarting-net-inter.patch [bz#2098233]
  - Resolves: bz#2098233
    ([Azure][WALA][RHEL-9] [9.1] walinuxagent kills network during boot)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-3
changelog:
  - wla-redhat-Use-NetworkManager-to-set-DHCP-hostnames-on-r.patch [bz#2114830]
  - wla-Update-Log-Collector-default-in-Comments-and-Readme-.patch [bz#2093965]
  - Resolves: bz#2114830
    ([Azure][WALA][RHEL-9.1] Provisioning failed if no ifcfg-eth0)
  - Resolves: bz#2093965
    ([Azure][WALA][RHEL-9] The description of "Logs.Collect" is incorrect)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-4
changelog:
  - wla-redhat-Remove-all-waagent-unit-files-when-uninstalli.patch [bz#2114768]
  - Resolves: bz#2114768
    ([Azure][WALA][RHEL-9] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-5
changelog:
  - wla-redhat-Mark-directories-properly-in-the-files-list.patch [bz#2114768]
  - Resolves: bz#2114768
    ([Azure][WALA][RHEL-9] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-6
changelog:
  - wla-redhat-Remove-files-inside-WALA-services-directory.patch [bz#2114768]
  - Resolves: bz#2114768
    ([Azure][WALA][RHEL-9] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-7
changelog:
  - wla-redhat-Azure-CVM-specific-udev-rules.patch [bz#2162668]
  - Resolves: bz#2162668
    (Add support for importing remotely sealed TPM2 objects)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-8
changelog:
  - wla-redhat-Explicitly-list-udev-rule-requirements-in-the.patch [bz#2165042]
  - Resolves: bz#2165042
    ([9.0.z] /dev/disk/azure/ is created as symlink to sr0 or sda and not as a directory[Azure])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-9
changelog:
  - wla-redhat-Adjust-tpm2_createprimary-key-attributes-to-m.patch [bz#2167322]
  - Resolves: bz#2167322
    (Adjust TPM primary key creation parameters to match Azure)


author: Jon Maloy <jmaloy@redhat.com> - 2.7.0.6-11.el9_6.1
changelog:
  - wla-redhat-Include-10-azure-unmanaged-sriov.rules-into-i.patch [RHEL-88808]
  - Resolves: RHEL-88808
    ([Azure][ARM][RHEL-9] Kdump cannot save vmcore via ssh or nfs [rhel-9.6.z])


author: Jerry Snitselaar <jsnitsel@redhat.com> - 4.1.6-2
changelog:
  - Fix faulty logic in dsa_user_test_runner device clean up.
  - Adds a couple of test clean ups as well.
  Resolves: RHEL-32451


author: Ray Strode <rstrode@redhat.com> - 0.6.55-10
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations.
    Resolves: #2057576


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.3.9-1
changelog:
  - timezone: for kickstart allow also timezones not offered by GUI (rvykydal)
    Resolves: jira#RHEL-13150
  - Rename Organization to Organization ID on subscription screen (mkolman)
    Resolves: jira#RHEL-11167


author: Martin Kolman <mkolman@redhat.com> - 34.25.4.2-1
changelog:
  - tests: Add a test case for the NVMe module (vtrefny)
    Resolves: RHEL-11543
    Resolves: RHEL-11544
  - Add a simple NVMe module for NVMe Fabrics support (vtrefny)
    Resolves: RHEL-11543
    Resolves: RHEL-11544
  - network: ignore BOOTIF connections when creating device configurations
    (rvykydal)
    Resolves: RHEL-4766
  - network: ignore BOOTIF connections when looking for initramfs bond ports
    (rvykydal)
    Resolves: RHEL-4766


author: Martin Kolman <mkolman@redhat.com> - 34.25.4.3-1
changelog:
  - Fix missing emit of zfcp kickstart statements (maier)
    Related: RHEL-11384
  - DeviceTreeViewer: Add path-id attribute to zfcp-attached SCSI disks (maier)
    Related: RHEL-11384
  - Fix missing WWID values for multipath devices in advanced storage UI
    (#2046654) (maier)
    Resolves: RHEL-11384
  - rescue: Don't allow to mount systems without a root device (vponcova)
    Resolves: RHEL-14696
  - Do not crash on default None values of ostreecontainer command (rvykydal)
    Related: RHEL-2250
  - Fix wrong dracut timeout message (jkonecny)
    Resolves: RHEL-5638
  - Move rpm-ostree deps from Lorax to Anaconda (#2125655) (jkonecny)
    Related: RHEL-2250
  - Implement needs_network for rpm_ostree_container (#2125655) (jkonecny)
    Related: RHEL-2250
  - Add tests for RPM Ostree payload with source from container (#2125655)
    (rvykydal)
    Related: RHEL-2250
  - Enable RPM OSTree from container source in payload (#2125655) (rvykydal)
    Resolves: RHEL-2250
  - Add RPM OSTree source from container (#2125655) (rvykydal)
    Related: RHEL-2250


author: Martin Kolman <mkolman@redhat.com> - 34.25.4.5-1
changelog:
  - bootupd: Use --write-uuid (walters)
    Related: RHEL-17205
  - bootloader: Detect bootupd and skip regular install (vslavik)
    Related: RHEL-17205
  - ostree: Use bootupd if installed by payload (vslavik)
    Resolves: RHEL-17205
  - bootloader: Create an installation task for collecting kernel arguments
    (vponcova)
    Related: RHEL-17205
  - bootloader: Add the collect_arguments method (vponcova)
    Related: RHEL-17205
  - bootloader: Remove the install_boot_loader function (vponcova)
    Related: RHEL-17205
  - Apply the bootloader options before the installation (vponcova)
    Related: RHEL-17205


author: Martin Kolman <mkolman@redhat.com> - 34.25.4.6-1
changelog:
  - Disable bug reporting to Bugzilla from anaconda (kkoukiou)
    Resolves: RHEL-24419
  - Fixed file-write operation to a public directory (ataf)
    Resolves: RHEL-23345


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.4.7-1
changelog:
  - Lower log file permission in /tmp (jkonecny)
    Resolves: RHEL-23345
  - Add utility function to set file mode (jkonecny)
    Related: RHEL-23345


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.5.10-1
changelog:
  - Fix check for biosboot partition in GRUB2.check (vtrefny)
    Resolves: RHEL-55922
  - Ignore all storage errors when trying to activate swaps (vtrefny)
    Resolves: RHEL-55922


author: Martin Kolman <mkolman@redhat.com> - 34.25.5.11-1
changelog:
  - security: call /usr/libexec/fips-setup-helper (asosedkin)
    Resolves: RHEL-58667
  - release-notes: Document support for compressed kernel modules in Driver Discs
    (peter.georg)
    Related: RHEL-9913
  - Add documentation about support for compressed kernel modules (peter.georg)
    Resolves: RHEL-9913
  - dd_extract: Update test info to reflect added support for compressed kernel
    modules (peter.georg)
    Resolves: RHEL-9913
  - dd_extract: Add test for zstd compressed kernel module (peter.georg)
    Resolves: RHEL-9913
  - dd_extract: Add test for xz compressed kernel module (peter.georg)
    Resolves: RHEL-9913
  - dd_extract: Add support for compressed kernel modules (peter.georg)
    Resolves: RHEL-9913
  - New version - 34.25.5.10 (k.koukiou)


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.5.13-1
changelog:
  - security: require pykickstart version with %certificates support (rvykydal)
    Resolves: RHEL-61430
  - security: do not crash initramfs ks parsing on failing certificate dump
    (rvykydal)
    Resolves: RHEL-61430
  - security: add service to transfer certificates from initramfs (rvykydal)
    Resolves: RHEL-61430
  - security: import certificates in initramfs (rvykydal)
    Resolves: RHEL-61430
  - security: install certificates in pre-install phase only for dnf payload
    (rvykydal)
    Resolves: RHEL-61430
  - security: raise exception if certificate destination is unknown (rvykydal)
    Resolves: RHEL-61430
  - security: log a warning when dumping certificate over an existing file
    (rvykydal)
    Resolves: RHEL-61430
  - security: pre-install certificates before payload installation (rvykydal)
    Resolves: RHEL-61430
  - security: add API to install certificates early before payload (rvykydal)
    Resolves: RHEL-61430
  - security: install certificates on target system (rvykydal)
    Resolves: RHEL-61430
  - security: Add API for installation on target system (rvykydal)
    Resolves: RHEL-61430
  - security: import certificates early after Anaconda start (rvykydal)
    Resolves: RHEL-61430
  - security: add API to import certificates to Anaconda environment (rvykydal)
    Resolves: RHEL-61430
  - security: add API: Certificate getter (rvykydal)
    Resolves: RHEL-61430
  - kickstart: extend section specification for list of section data (rvykydal)
  - security: implement the support to install certificates to Anaconda
    (rvykydal)
    Resolves: RHEL-61430
  - translations: bump dependency to l10n repo because of branch switch
    (k.koukiou)
  - util: correct errors and suppress stderr for common cases (riehecky)
  - util: Add additional information for EFI systems (riehecky)
    Resolves: RHEL-55128


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.15-1
changelog:
  - security: add a development note for certificates import in initramfs
    (rvykydal)
    Related: RHEL-77155
  - security: do not issue warning on existing certificate file during dump
    (rvykydal)
    Resolves: RHEL-77155
  - network: pass NM global dns configuration to the installed system (rvykydal)
    Resolves: RHEL-71824
  - network: pass global dns initrd option to the installed system (rvykydal)
    Resolves: RHEL-71824


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.16-1
changelog:
  - network: add dnsconfd to selected packages if used in installer (rvykydal)
    Resolves: RHEL-79803
  - network: add dnsconfd to installer environment (rvykydal)
    Resolves: RHEL-79804


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.17-1
changelog:
  - network: start dnsconfd in initramfs (rvykydal)
    Resolves: RHEL-80303
  - network: enable dnsconfd service on installed system if required (rvykydal)
    Resolves: RHEL-80023
  - network: pass 16-dns-backend.conf to target system (rvykydal)
    Resolves: RHEL-80233
  - netowrk: enable dnsconfd service in installer environment (rvykydal)
    Resolves: RHEL-80023


author: Katerina Koukiou <kkoukiou@redhat.com> - 34.25.5.1-1
changelog:
  - anaconda-diskroot: wait before dying on media check fail (awilliam)
    Resolves: RHEL-4790
  - Add ping tool to Dracut (jkonecny)
    Resolves: RHEL-5719
  - gui:Fix index error for _remove_treeinfo_repositories() (liuwenyu.0311)
    Resolves: RHEL-29561


author: Katerina Koukiou <kkoukiou@redhat.com> - 34.25.5.3-1
changelog:
  - Fix Source0 in spec to point to upstream source URL (kkoukiou)
  - Do not try to load sha256 module in intramfs (rvykydal)
    Resolves: RHEL-4747
  - Do not try to load the floppy kernel module (jstodola)
    Resolves: RHEL-4747
  - anaconda-modprobe: don't try and load cramfs (awilliam)
    Resolves: RHEL-4747


author: Katerina Koukiou <kkoukiou@redhat.com> - 34.25.5.5-1
changelog:
  - Update translations from Weblate for rhel-9
  - Do not rewrite logs in rescue mode (jstodola)
    Resolves: RHEL-4794
  - Write a warning rescue selinux (akankovs)
    Resolves: RHEL-14005
  - Fix kickstart --dhcpclass option application (rvykydal)
    Resolves: RHEL-30406


author: Katerina Koukiou <kkoukiou@redhat.com> - 34.25.5.6-1
changelog:
  - Update translations from Weblate for rhel-9
  - Change location of rescue mode flag file (jstodola)
    Resolves: RHEL-4794


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.7-1
changelog:
  - Fix source spoke being inaccessible if payload thread errors out (mkolman)
    Resolves: RHEL-4721
  - Do not create default wired connections for bond ports (rvykydal)
    Resolves: RHEL-38451
  - Consolidate code for dumping network connections (rvykydal)
    Related: RHEL-38451


author: Martin Kolman <mkolman@redhat.com> - 34.25.5.8-1
changelog:
  - Use proxy server also for FTP .treeinfo download (jkonecny)
    Resolves: RHEL-27938
  - Update translations from Weblate for rhel-9 (github-actions)


author: Martin Kolman <mkolman@redhat.com> - 34.25.5.9-1
changelog:
  - network: ignore kickstart configuration of nBFT devices (rvykydal)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - network: do not dump configurations of nBFT devices (rvykydal)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - network: ignore nBFT devices connections in network configuration (rvykydal)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - network: add a test for ignoring ifname=nbft* for device renaming (rvykydal)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - network: do not create empty dir for only ifname=nbft* options (rvykydal)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - network: Avoid creating link files for 'nbft' interfaces (tbzatek)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - Update translations from Weblate for rhel-9 (github-actions)


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.1-1
changelog:
  - network: disable NM autoconnections also when BOOTIF is used (rvykydal)
    Resolves: RHEL-78272
  - network: support inst.net.noautodefault option (rvykydal)
    Related: RHEL-78272
  - security: fix dnsconfd backend option check in initramfs (rvykydal)
    Resolves: RHEL-83214
  - Support leavebootorder for bootupd (jkonecny)
    Resolves: RHEL-40897
  - bootupd: call bootupctl with --update-firmware (awilliam)
    Resolves: RHEL-40897


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.2-1
changelog:
  - Fix typo in systemd service (jstodola)
    Resolves: RHEL-78272
  - s390x - enable raid1 as a stage2 device (dan)
    Resolves: INSTALLER-4148
    Resolves: RHEL-21691
  - edns: restart dnsconfd only after the first kickstart parsing (rvykydal)
    Resolves: RHEL-82694
  - edns: allow dnsconfd name resolution for kickstart fetching (rvykydal)
    Resolves: RHEL-82694


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.3-1
changelog:
  - Sort RPM versions via rpm.labelCompare() and not via
    packaging.version.LegacyVersion() (miro)
    Resolves: RHEL-87358
  - rpm_ostree/installation.py: fix image deployment on s390x (rvykydal)
    Resolves: RHEL-63237
  - Add additional config_get Dracut function tests (jkonecny)
    Related: RHEL-48837
  - Update the tests/README.rst file (jkonecny)
    Related: RHEL-48837
  - Move shell testing to a separated directory (jkonecny)
    Related: RHEL-48837
  - Enable dynamic bash commands disable for tests (jkonecny)
    Related: RHEL-48837
  - Add test for config_get dracut function (jkonecny)
    Related: RHEL-48837
  - Fix trailing `/` when downloading stage2 image (jkonecny)
    Resolves: RHEL-48837
  - Fix whitespace chars broke Dracut config parsing (jkonecny)
    Related: RHEL-48837


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.4-1
changelog:
  - Revert "s390x - enable raid1 as a stage2 device" (jkonecny)
    Reverts: RHEL-21691
  - test_module_part_blivet: fix pylint disable (jkonecny)
    Related: RHEL-85416
  - pyanaconda: module.common.task fix cyclic import (jkonecny)
    Related: RHEL-85416
  - pyanaconda: module_manager: fix ciclic import (k.koukiou)
    Related: RHEL-85416
  - pyanaconda: bootloader: fix ImportError (k.koukiou)
    Related: RHEL-85416
  - ruff: enable isort rules and autofix all isort warnings Autofixed with: ruff
    check --exclude pyanaconda/core/kickstart/commands.py --fix --select I .
    (jkonecny)
    Resolves: RHEL-85416
  - Add ruff, a very fast linter (vslavik)
    Related: RHEL-85416
  - Relabel /var/log/ and /root/original-ks.cfg (champetier.etienne)
    Resolves: RHEL-85298


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.5-1
changelog:
  - bootloader: drop write_config_console, just preserve console= (awilliam)
    Resolves: RHEL-98670
  - payload/rpm-ostree: Include program output in exception (walters)
    Resolves: RHEL-45184


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.6-1
changelog:
  - Fix vconsole layout doesn't work for ostree (jkonecny)
    Resolves: RHEL-101057
  - test: make dnf substitutions test check only relevant values (rvykydal)
  - test: add new substitution members in dnf tests (rvykydal)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.10.9-15
changelog:
  - Implement new Java bindings and fix ant-manual license
  - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519


author: Neal Gompa <ngompa@centosproject.org> - 0.15.5-2
changelog:
  - Create symlinks manually to make it build
    (the symlinks were not created because of reverting the patch to
    upgrade to Meson 0.62)


author: Neal Gompa <ngompa@centosproject.org> - 0.16.1-1
changelog:
  - Rebase to 0.16.1
    Resolves: rhbz#2169103
  - Drop unneeded downstream hacks to build with older Meson


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 5.2.0-6
changelog:
  - Add parent to biz.aQute.bnd/pom.xml (fixes [WARNING] JAR will be
    empty - no content was marked for inclusion!)
  - Remove scope from dependencies in pom.xml files (fixes missing
    dependencies, dependencies marked with scope provided are ignored by
    the rpm dependency generator)
  - Drop some more commands: shell, exportreport, mbr (uses parts that
    are not packaged)
  - Resolves: rhbz#2033709


author: Kalev Lember <klember@redhat.com> - 2.28.1-1
changelog:
  - Update to 2.28.1
  - Switch to meson build system
  - Update source URLs
  - Tighten -devel subpackage deps
  - Tighten soname globs


author: Richard W.M. Jones <rjones@redhat.com> - 1.13.0-2
changelog:
  - Parse auto_reset_crashkernel in kdump
    resolves: rhbz#2042772
  - Add new directives and options for chrony


author: Richard W.M. Jones <rjones@redhat.com> - 1.13.0-4
changelog:
  - Fix parsing of /usr/lib/tmpfiles.d/provision.conf
  - Fix parsing of /etc/kernel/cmdline
    resolves: rhbz#2155136, rhbz#2159282


author: Parag Nemade <pnemade AT redhat DOT com> - 0.31.1-61
changelog:
  - Resolves: CVE-2019-19004 : integer overflow in input-bmp.c
  - Resolves: CVE-2019-19005 : fix bitmap double free in main.c


author: Parag Nemade <pnemade AT redhat DOT com> - 0.31.1-65
changelog:
  - Resolves: rhbz#2121828 Fix the gating tests by using only local test
    Upstream testsuite will not work as this package code is very old


author: Michal Sekletar <msekleta@redhat.com> - 0.8-21
changelog:
  - fix file attributes on /run/avahi-daemon (RHEL-5633)
  - avahi-client: fix resource leak (RHEL-27722)
  - fix resource leak in avahi_time_event_queue_new (RHEL-27717)


author: Siteshwar Vashisht <svashisht@redhat.com> - 5.1.8-9
changelog:
  - Fix a performance regression while using large number of environment variables
    Resolves: RHEL-20020


author: Jerome Marchand <jmarchan@redhat.com> - 0.26.0-3
changelog:
  - Rebuild with LLVM 16 (rhbz#2050112)
  - Fix compactsnoop (rhbz#2042236)
  - Fix killsnoop documentation (rhbz#2075500)
  - Fix funcslower (rhbz#2075415)
  - Fix deadlock memory usage issue (rhbz#2050112)
  - Fix nfsslower (rhbz#2180934)
  - Use upstream fix for nfsslower unititialized struct issue


author: Jerome Marchand <jmarchan@redhat.com> - 0.28.0-1
changelog:
  - Rebase to v0.28.0 (RHEL-9976)
  - Rebuild with LLVM 17 (RHEL-10591)
  - Fix bpf-biosnoop out of bound access (RHEL-8664)
  - Fix kvmexit missing VM exit reasons and statistics (RHEL-8702)
  - Fix multi-word array type handling (RHEL-8674)
  - Fix tcpstates -Y (RHEL-8490)
  - Fix bio tools (RHEL-8553)


author: Jerome Marchand <jmarchan@redhat.com> - 0.28.0-5
changelog:
  - Fix libbpf bio tools (RHEL-19368)
  - Add S390x support to libbpf-tools (RHEL-16325)
  - Power enhancements(RHEL-11477)


author: Jerome Marchand <jmarchan@redhat.com> - 0.30.0-3
changelog:
  - Really prevent the loading of compromised headers (RHEL-28769, CVE-2024-2314)
  - Add python3-pyelftools dependency (RHEL-36583)


author: Jerome Marchand <jmarchan@redhat.com> - 0.34.0-1
changelog:
  - Rebase to version 0.34.0 (RHEL-78920)
  - Rebuild with LLVM 20 (RHEL-81773)
  - Fix biosnoop pattern option (RHEL-90848)
  - Fix bpf-klockstat on aarch64 and ppc64le (RHEL-78619)
  - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-78166)
  - Remove unsupported slaratetop tool (RHEL-78162)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-16
changelog:
  - Prevent increased CPU load on large DNS messages (CVE-2023-4408)
  - Prevent assertion failure when nxdomain-redirect is used with
   RFC 1918 reverse zones (CVE-2023-5517)
  - Prevent assertion failure if DNS64 and serve-stale is used (CVE-2023-5679)
  - Specific recursive query patterns may lead to an out-of-memory
    condition (CVE-2023-6516)
  - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
    CVE-2023-50868)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-18.2
changelog:
  - Resolve CVE-2024-1975
  - Resolve CVE-2024-1737
  - Resolve CVE-2024-4076
  - Add ability to change runtime limits for max types and records per name


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-31.1
changelog:
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
  - Address various spoofing attacks (CVE-2025-40778)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-34.1
changelog:
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
  - Replace downstream fixes with upstream changes
  - Address various spoofing attacks (CVE-2025-40778)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.27-2
changelog:
  - Disable building of DLZ packages
  - Conflict explicitly with more bind subpackages
  - Merge license subpackage into libs


author: Alex Burmashev <alexander.burmashev@oracle.com> - 32:9.18.29-1.el9_5.1
changelog:
  - Fix CVE-2024-11187 bind: bind9: Many records in the additional section cause CPU exhaustion
  - Fix CVE-2024-12705 bind: bind9: DNS-over-HTTPS implementation suffers from multiple issues under heavy query load


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-2
changelog:
  - Backport nsupdate TLS support into 9.18 (RHEL-76331)
  - Update nsupdate manual about new TLS options
  - Test nsupdate TLS support


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-3
changelog:
  - Limit additional section records CPU processing (CVE-2024-11187)
  - Read HTTPS requests in limited chunks and prevent overload (CVE-2024-12705)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-4.1
changelog:
  - Refuse malformed DNSKEY records (CVE-2025-8677)
  - Address various spoofing attacks (CVE-2025-40778)
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-4.2
changelog:
  - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
  - Add upstream created test to this regression


author: Jakub Martisko <jamartis@redhat.com> - 3.9.0-13
changelog:
  - Add explicit requires to the devel subpackages
  - Note: the the cblas64 seems to be linked against the libblas (not the 64 version)
  - this is not a regression, however in the Fedora it uses libblas64 instead.
  - Resolves: RHEL-5768


author: Hans de Goede <hdegoede@redhat.com> - 5.56-3
changelog:
  - Drop obsolete udev rule + systemd service to call btattach on BT-HCIs
    connected via UART from userspace, this is all handled in the kernel now
  - Add the btmgmt util to the packaged files


author: Patrick Palka <ppalka@redhat.com> - 1.75.0-9
changelog:
  - Apply upstream Boost.Asio patch to resolve RHEL-67973
  - Fix %patch directive compatibility with RPM 4.20


author: Jonathan Wakely <jwakely@redhat.com> - 1.75.0-7
changelog:
  - Build with zstd support (#2091041)
  - Fix rpminspect CI warnings about missing versioned dependencies


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Jerry James <loganjerry@gmail.com> - 1.10.14-1
changelog:
  - Version 1.10.14
  - Remove no longer needed no-unixsocket.patch
  - Add workaround for compiling tests with JDK 11


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-3
changelog:
  - Switch from autotools to meson; enable the tests, since the meson build system
    permits us to use a shared boost library
  - Install examples in the -doc subpackage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-4
changelog:
  - Prepare for future upgrade to API/ABI version 1.16 by introducing virtual
    Provides for a name for API/ABI version 1.0: cairomm1.0. This will be the name
    of a future package that continues to provide API/ABI version 1.0 after the
    upgrade.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-7
changelog:
  - Working (but weak, dependent on SHA1) source signature verification
  - Added API/ABI version to descriptions


author: Roland Grunberg <rgrunber@redhat.com> - 3.2.9-5
changelog:
  - Set maven-javadoc-plugin source to 1.8 for Java 11 build.
  - Ignore 5 test failures from upstream when run on Java 9 or above.


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: <thalman@redhat.com> - 0.6.1-16
changelog:
  - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual
    Authentication Tag provided in the JWE
    Resolves: rhbz#2223308


author: Richard Hughes <richard@hughsie.com> 1.4.5-1
changelog:
  - New upstream version
  - Add new API for gnome-settings-daemon
  - Check for errors from more sqlite calls
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-3
changelog:
  - Resolves: rhbz#2024652
  - Resolves: rhbz#2024657

  - totem: Add cancel_hold_on_retransmit config option (rhbz#2024652)
  - merge upstream commit cdf72925db5a81e546ca8e8d7d8291ee1fc77be4 (rhbz#2024652)
  - totemsrp: Switch totempg buffers at the right time (rhbz#2024657)
  - merge upstream commit e7a82370a7b5d3ca342d5e42e25763fa2c938739 (rhbz#2024657)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-4
changelog:
  - Resolves: rhbz#2070623

  - logrotate: Use copytruncate method by default (rhbz#2070623)
  - merge upstream commit 04362046c4a9d7307feb5b68341d567b7d0b94d6 (rhbz#2070623)


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.2-2
changelog:
  - Fix an assertion failure in the gdb's copy_type()
  - Fix for "bt" command printing "bogus exception frame" warning


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.4-2
changelog:
  - Fix the "dis -lr" not displaying the source file names
    and line numbers
  - Fix incorrect symbol translation by the 'struct blk_mq_ops'


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-2
changelog:
  - vmware_guestdump: Version 7 support
  - Fix incorrect task state during exit
  - Add multi-threads support in crash target
  - Call cmd_bt silently after "set pid"
  - x86_64: Add gdb multi-stack unwind support
  - arm64: Add gdb multi-stack unwind support
  - ppc64: Add gdb multi-stack unwind support
  - Fix the issue of "page excluded" messages flooding
  - Fix "kmem -p" option on Linux 6.16-rc1 and later kernels


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-3
changelog:
  - x86_64: filter unwanted warning message for "bt -T" cmd
  - doc: Update requirements for building on Fedora
  - gdb: Fix a regression for eppic extension on gdb-16.2
  - Fix crash initialization failure on LoongArch with recent GDB versions
  - gdb: Disable DT_DEBUG lookup by GDB inside the vmcore


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-1
changelog:
  - Update to 0.17.7
  - Remove insecure hashes SHA-1 and MD5 from the default build (RhBug:1935486)
  - Fix error when updating repo with removed modules metadata
  - Exit with status code 1 when loading of repo's metadata fails
  - Fix memory leaks (RhBug:1998426)
  - Fix valgrind warnings caused by subprocess calls


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-2
changelog:
  - Switch default of --keep-all-metadata to TRUE and add --discard-additional-metadata (RhBug:2055032)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.20.1-1
changelog:
  - Update to 0.20.1
  - createrepo_c shouldn't silently produce duplicate-NEVRA repos
  - Fix bad performance with task queue management
  - Update errno usage to fix incorrect GError messages
  - Install header for createrepo_shared module
  - Remove C API for cr_xml_parse_main_metadata_together
  - Remove python bindings for xml_parse_main_metadata_together
  - Fix '&' encoding in attributes when parsing repodata
  - Add a streaming parsing API that is user-controllable.
  - Fix a memory leak of primary pkg when parsing interrupted
  - Fix a memory leak when removing the first link in a list
  - Remove `allow_out_of_order` option for `xml_parse_main_metadata_together`
  - Make parse warnings visible through cr.Repomd(), cr.UpdateInfo()
  - Use --error-exit-val option by default
  - If new and old repomd matches during --update don't update
  - Add `cr_repomd_compare` for comparing two repomds
  - Store parsed repomd in `cr_MetadataLocation`
  - Set database version only for the database records, not everything
  - Use copy+delete fallback when moving of a dir fails
  - Fix memory leaks
  - [spec] Option for legacy hashes, enable on RHEL <= 8 (RhBug:2022271)


author: Ondrej Kozina <okozina@redhat.com> - 2.4.3-1
changelog:
  - Update to cryptsetup 2.4.3.
  - patch: Fix typo in repair command prompt.
    Resolves: #2022309 #2023316 #2032782


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-2
changelog:
  - Fix FIPS related bugs.
  - Abort encryption when header and data devices are same.
  - Resolves: #2150251 #2148841


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-3
changelog:
  - patch: Disallow use of internal kenrel crypto driver names in "capi"
  - patch: Also disallow active devices with internal kernel names
  - patch: Fix init_by_name to allow unknown cipher format in dm-crypt
  - patch: Fix reencryption to fail properly for unknown cipher
  - patch: Fix activation of LUKS2 with capi format cipher and kernel
  - Resolves: #2212771


author: Daniel Zatovic <dzatovic@redhat.com> - 2.7.2-1
changelog:
  - Update to cryptsetup 2.7.2
  - Use OpenSLL Argon implementation instead of the built-in one
  - Resolves: RHEL-32377


author: Ondrej Kozina <okozina@redhat.com> - 2.7.2-2
changelog:
  - patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
  - patch: Enable Argon2 in FIPS with openssl backend.
  - patch: Abort online reencryption for misconfigured devices.
  - patch: Harden online reencryption checks in initialization phase.
  - patch: Fix detection of direct-io with suspended devices.
  - patch: Return suspended status also for unknow target types.
  - patch: Do not handle device as suspended on error.
  - Resolves: RHEL-39003 RHEL-41238


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-14
changelog:
  - RHEL-19201 redhat-lsb unnecessary pulls in cups and avahi dependencies
  - RHEL-16026 Cups Browsed does not correctly pull printer location and description information from print server


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-16
changelog:
  - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file
  - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes
  - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source


author: Bryan Gurney <bgurney@redhat.com> - 71.1-7
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
  - Fix enable-namespace all reporting errors incorrectly
  - Add support for inject-smart on papr scm
  - Related: rhbz#2040075
  - Related: rhbz#1873851
  - Related: rhbz#1880578
  - Related: rhbz#1922538
  - Related: rhbz#2087707


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Jeff Moyer <jmoyer@redhat.com> - 78-1
changelog:
  - Rebase to v78
  - Add support for legacy monitor.conf file location
  - Fix a test failure.
  - Resolves: RHEL-10382
  - Resolves: RHEL-8204
  - Resolves: RHEL-29151


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.8-9
changelog:
  - Subpackage python2-dbus has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-6
changelog:
  - Fix lvresize resizing LUKS device only when resizing FS is enabled.
  - Improve lvresize handling of renamed volumes.
  - Fix random unmount when resizing volume backed by thin pool.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.21-3
changelog:
  - Fix lvresize fail in case of multiple mountpoints.
  - Fix allocator for RAID LVs allocating multiple legs on single device.
  - Fix device id handling of WWIDs with trailing spaces.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.23-2
changelog:
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-2
changelog:
  - Fix SPDX License identifiers.
  - Fix input units for VDO LV's minimim_io_size.
  - Fix stripe count and validation for RAID LVs.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-5
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-18
changelog:
  - Add 0079-libmultipath-use-select_reload_action-in-select_acti.patch
  - Add 0080-libmultipath-select-resize-action-even-if-reload-is-.patch
  - Add 0081-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch
  - Add 0082-libmultipath-keep-renames-from-stopping-other-multip.patch
  - Resolves: bz #2166467


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-19
changelog:
  - Fix bugzilla linked to the changes (was previously linked to
    the wrong bug, 2162536)
  - Resolves: bz #2166467


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-20
changelog:
  - Add 0083-multipath.rules-fix-smart-bug-with-failed-valid-path.patch
  - Add 0084-libmultipath-limit-paths-that-can-get-wwid-from-envi.patch
  - Change how the installation dir for kpartx_id is specified
  - Resolves: bz #1926147


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-21
changelog:
  - Add 0085-multipathd-make-pr-registration-consistent.patch
  - Add 0086-libmultipath-make-prflag-an-enum.patch
  - Add 0087-multipathd-handle-no-active-paths-in-update_map_pr.patch
  - Add 0088-libmpathpersist-fix-resource-leak-in-update_map_pr.patch
  - Resolves: bz #2164869


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-22
changelog:
  - Add 0089-RH-Add-mpathcleanup.patch
    * Fixes RHEL-782
  - Add 0090-RH-make-listing-return-an-error-if-the-config-file-i.patch
  - Install mpathcleanup
    * Fixes RHEL-781
  - Resolves: #781, #782


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-23
changelog:
  - Add 0091-multipathd-Added-support-to-handle-FPIN-Li-events-fo.patch
    * Fixes RHEL-6678 (Add support in multipathd for NVMe to listen for FPIN-Li
      events and mark effected paths as marginal)
  - Add 0092-multipath-tools-add-HPE-Alletra-9000-NVMe-to-hardwar.patch
    * Fixes RHEL-1830 (Changes to Arcus NVMeoFC multipath.conf settings for RHEL
      9.x to be included in kernel by default)
  - Resolves: RHEL-6678
  - Resolves: RHEL-1830


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-24
changelog:
  - Add 0093-RH-multipath-add-mpathcleanup-man-page.patch
    * Fixes RHEL-1266 ("There is no man page for mpathcleanup")
  - Resolves: RHEL-1266


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-25
changelog:
  - Add 0094-libmultipath-Add-max_retries-config-option.patch
    * Fixes RHEL-1729 ("Allow multipathd to set the max_retries of the
      scsi_device for paths")
  - Add 0095-libmutipath-Retain-device-size-if-sysfs_get_size-fai.patch
  - Add 0096-multipathd-check-and-update-all-paths-when-in-cli_re.patch
  - Add 0097-multipathd-move-post-reloading-commands-into-resize_.patch
  - Add 0098-multipathd-move-resize_map-to-multipathd-main.c.patch
  - Add 0099-multipathd-Add-auto_resize-config-option.patch
    * Fixes RHEL-986 ("Add option to allow multipathd to detect device
      resizes and autoresize.")
  - Resolves: RHEL-986
  - Resolves: RHEL-1729


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-26
changelog:
  - Add 0100-libmultipath-avoid-temporarily-enabling-queueing-on-.patch
  - Add 0101-multipathd-Make-sure-to-disable-queueing-if-recovery.patch
    * Fixes RHEL-17234 ("RHEL9 dm-multipath no_path_retry [retry number] is
      undone if paths are later lost for an open map.")
  - Add 0102-multipathd-remove-nopath-flushing-code-from-flush_ma.patch
  - Add 0103-multipathd-make-flush_map-delete-maps-like-the-multi.patch
  - Add 0104-multipathd-disable-queueing-when-removing-unknown-ma.patch
    * Fixes RHEL-4998 ("When remove external lun from host, rescan lun status
      will cause the OS hang and no response")
  - Resolves: RHEL-4998
  - Resolves: RHEL-17234


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-27
changelog:
  - Add 0105-multipathd-fix-null-pointer-dereference-in-uev_updat.patch
  - Add 0106-multipathd-fix-auto-resize-configuration.patch
  - Add 0107-libmultipath-fix-displaying-auto_resize-config-setti.patch
    * Fixes RHEL-986 ("Add option to allow multipathd to detect device
      resizes and autoresize.")
  - Resolves: RHEL-986


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-28
changelog:
  - Add 0108-libmultipath-actually-truncate-too-large-vpd-page.patch
  - Add 0109-kpartx-fix-theoretical-overflow-in-loop-device-name.patch
    * Fixes RHEL-31793 ("RHEL SAST Automation: address (selected) true positives")
  - Resolves: RHEL-31793


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-29
changelog:
  - Add 0110-libmultipath-keep-track-of-queueing-state-in-feature.patch
  - Add 0111-libmultipath-export-partmap_in_use.patch
  - Add 0112-libmultipath-change-flush_on_last_del-to-fix-a-multi.patch
  - Add 0113-libmultipath-pad-dev_loss_tmo-to-avoid-race-with-no_.patch
    * Fixes RHEL-30272
  - Add 0114-libmultipath-remove-pathgroup-wildcard-options.patch
  - Add 0115-libmultipath-print-all-values-in-snprint_failback.patch
  - Add 0116-multipathd-Stop-double-counting-map-failures-for-no_.patch
  - Add 0117-multipath-tools-man-pages-add-missing-multipathd-com.patch
  - Add 0118-libmultipath-change-the-vend-prod-rev-printing.patch
  - Add 0119-multipath-tools-man-pages-Add-format-wildcard-descri.patch
    * Fixes RHEL-8304
  - Resolves: RHEL-8304
  - Resolves: RHEL-30272


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-30
changelog:
  - Add 0120-multipath-tools-fix-multipath-ll-bug-for-Native-NVME.patch
    * Fixes RHEL-28068
  - Add 0121-multipathd-set-reply-length-to-zero-for-NULL-replies.patch
    * Fixes RHEL-44569
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-31
changelog:
  - Modify multiple tests especially medium_error_scsi_debug and squelch_scsi_id
    * Fixes RHEL-28068 & RHEL-4459
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-32
changelog:
  - Modify bindings, find_multipaths, and user_friendly_names tests
    * Fixes RHEL-28068 & RHEL-4459
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-35
changelog:
  - Add 0124-libmultipath-add-missing-assert-to-checkers.c.patch
  - Add 0125-libmultipath-foreign-fix-memory-leak-in-nvme-foreign.patch
    * Fixes RHEL-73413
  - Add 0126-libmultipath-export-udev-pthread-cleanup-functions.patch
  - Add 0127-multipathd-set-rport-port_state-to-marginal-for-NVMe.patch
    * Fixes RHEL-67472
  - Resolves: RHEL-73413
  - Resolves: RHEL-67472


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-35.1
changelog:
  - Add 0128-multipath-tools-move-DEFAULT_SOCKET-definition-into-.patch
  - Add 0129-multipath-tools-add-helper-mpath_fill_sockaddr__.patch
  - Add 0130-libmpathutil-add-support-for-Unix-pathname-sockets.patch
  - Add 0131-libmpathutil-move-systemd_listen_fds-support-into-mu.patch
  - Add 0132-multipathd-move-uxsock_trigger-to-uxlsnr.c.patch
  - Add 0133-multipathd-uxlsnr-use-symbolic-values-for-pollfd-ind.patch
  - Add 0134-multipathd-make-uxsock_listen-take-a-pointer-to-fd.patch
  - Add 0135-multipathd-allow-receiving-two-socket-fds-from-syste.patch
  - Add 0136-multipathd-listen-on-pathname-and-abstract-socket-by.patch
  - Add 0137-libmpathcmd-try-both-abstract-and-pathname-sockets.patch
  - Add 0138-libmpathcmd-honor-MULTIPATH_SOCKET_NAME-environment-.patch
  - Add 0139-multipathd-honor-MULTIPATH_SOCKET_NAME-environment-v.patch
    * Fixes RHEL-80352 ("RFE: Enable multipathd to communicate with a
      process in another network namespace")
  - Resolves: RHEL-80352


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-36
changelog:
  - Add 0128-multipath-tools-move-DEFAULT_SOCKET-definition-into-.patch
  - Add 0129-multipath-tools-add-helper-mpath_fill_sockaddr__.patch
  - Add 0130-libmpathutil-add-support-for-Unix-pathname-sockets.patch
  - Add 0131-libmpathutil-move-systemd_listen_fds-support-into-mu.patch
  - Add 0132-multipathd-move-uxsock_trigger-to-uxlsnr.c.patch
  - Add 0133-multipathd-uxlsnr-use-symbolic-values-for-pollfd-ind.patch
  - Add 0134-multipathd-make-uxsock_listen-take-a-pointer-to-fd.patch
  - Add 0135-multipathd-allow-receiving-two-socket-fds-from-syste.patch
  - Add 0136-multipathd-listen-on-pathname-and-abstract-socket-by.patch
  - Add 0137-libmpathcmd-try-both-abstract-and-pathname-sockets.patch
  - Add 0138-libmpathcmd-honor-MULTIPATH_SOCKET_NAME-environment-.patch
  - Add 0139-multipathd-honor-MULTIPATH_SOCKET_NAME-environment-v.patch
    * Fixes RHEL-78758 ("RFE: Enable multipathd to communicate with a
      process in another network namespace")
  - Resolves: RHEL-78758


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-37
changelog:
  - Add 0140-multipath-clean-up-find_multipaths-value-names.patch
  - Add 0141-multipathd-Add-multipathd-man-page-section-about-soc.patch
    * Fixes RHEL-82307 ("There is no man page for RFE: Enable multipathd
      to communicate with a process in another network namespace")
  - Fix multipath_conf_syntax OSCI test.
  - Resolves: RHEL-82307


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-38
changelog:
  - Add 0142-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
  - Add 0143-libmultipath-add-helper-function-check_path_wwid_cha.patch
  - Add 0144-multipathd-re-add-paths-skipped-because-they-were-of.patch
    * Fixes RHEL-82534 ("multipathd does not monitor multipath devices
      created externally while there are offline paths.")
  - Resolves: RHEL-82534


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-39
changelog:
  - Add 0145-multipath-tools-add-DellEMC-ME4-PowerVault-ME4-to-ha.patch
  - Add 0146-multipath-tools-add-HPE-as-vendor-for-OPEN-XP8-array.patch
  - Add 0147-multipath-tools-add-HP-HSVX740-to-hwtable.patch
  - Add 0148-multipath-tools-add-DellEMC-ME5-PowerVault-ME5-to-ha.patch
  - Add 0149-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
    * Fixes RHEL-103109 ("Update multipath builtin config to add new
      device defaults")
  - Resolves: RHEL-103109


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-39.1
changelog:
  - Add 0150-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch
  - Add 0151-libmpathpersist-check-released-key-against-the-reser.patch
  - Add 0152-multipathd-remove-thread-from-mpath_pr_event_handle.patch
  - Add 0153-libmpathpersist-remove-uneeded-wrapper-function.patch
  - Add 0154-libmpathpersist-reduce-log-level-for-persistent-rese.patch
  - Add 0155-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch
  - Add 0156-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch
  - Add 0157-libmpathpersist-limit-changing-prflag-in-update_map_.patch
  - Add 0158-multipathd-Don-t-call-update_map_pr-unnecessarily.patch
  - Add 0159-libmpathpersist-remove-useless-function-send_prout_a.patch
  - Add 0160-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch
  - Add 0161-limpathpersist-redesign-failed-release-workaround.patch
  - Add 0162-libmpathpersist-fail-the-release-if-all-threads-fail.patch
  - Add 0163-limpathpersist-Handle-changing-key-corner-case.patch
  - Add 0164-libmpathpersist-fix-command-keyword-ordering.patch
  - Add 0165-libmpathpersist-use-conf-timeout-for-updating-persis.patch
  - Add 0166-libmapthpersist-Handle-REGISTER-AND-IGNORE-changing-.patch
  - Add 0167-libmultipath-rename-prflag_value-enums.patch
  - Add 0168-libmpathpersist-use-a-switch-statement-for-prout-com.patch
  - Add 0169-libmpathpersist-Add-safety-check-for-preempting-on-k.patch
  - Add 0170-limpathpersist-remove-update_map_pr-code-for-NULL-pp.patch
  - Add 0171-libmpathpersist-move-update_map_pr-to-multipathd.patch
  - Add 0172-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch
  - Add 0173-libmpathpersist-clean-up-duplicate-function-declarat.patch
  - Add 0174-multipathd-wrap-setting-and-unsetting-prflag.patch
  - Add 0175-multipathd-unregister-PR-key-when-path-is-restored-i.patch
  - Add 0176-libmpathpersist-Fix-up-reservation_key-checking.patch
  - Add 0177-libmpathpersist-change-how-reservation-conflicts-are.patch
  - Add 0178-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch
  - Add 0179-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch
  - Add 0180-libmpathpersist-Restore-old-reservation-key-on-failu.patch
  - Add 0181-libmpatpersist-update-reservation-key-before-checkin.patch
  - Add 0182-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch
  - Add 0183-libmpathpersist-Don-t-always-fail-registrations-for-.patch
  - Add 0184-libmpathpersist-Don-t-try-release-workaround-for-inv.patch
  - Add 0185-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch
  - Add 0186-libmpathpersist-reregister-keys-when-self-preempting.patch
  - Add 0187-libmpathpersist-handle-updating-key-race-condition.patch
  - Add 0188-libmpathpersist-handle-preempting-all-registrants-re.patch
  - Add 0189-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch
  - Add 0190-libmpathpersist-Handle-RESERVE-with-reservation-held.patch
  - Add 0191-libmpathpersist-use-check_holding_reservation-in-mpa.patch
  - Add 0192-libmpathpersist-Fix-unregistering-while-holding-the-.patch
  - Add 0193-libmpathpersist-Fix-race-between-restoring-a-path-an.patch
  - Add 0194-multipathd-Fix-tracking-of-old-PR-key.patch
  - Add 0195-multipathd-Fix-race-while-registering-PR-key.patch
  - Add 0196-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch
    * Fixes RHEL-118723 ("There are many bugs in multipath's persistent
      reservation handling [rhel-9.7.z]")
  - Resolves: RHEL-118723


author: Omair Majid <omajid@redhat.com> - 10.0.100~rc.2.25502.107-0.10
changelog:
  - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
  - Resolves: RHEL-121559


author: Tom Deseyn <tom.deseyn@gmail.com> - 8.0.103-3
changelog:
  - We disable checking the signature of the last certificate in a chain if the certificate is supposedly self-signed.
    A side effect of not checking the self-signature of such a certificate is that disabled or unsupported message
    digests used for the signature are not treated as fatal errors.
  - Resolves: RHEL-28344


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-11.1
changelog:
  - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55211)
  - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55225)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-14
changelog:
  - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
  - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)


author: Timothy Redaelli <tredaelli@redhat.com> - 21.11.2-1
changelog:
  - Rebase to 21.11.2 (#2126159)
  - Includes fixes for CVE-2022-2132 (#2107173) and CVE-2022-28199 (#2123616)


author: Oliver Steffen <osteffen@redhat.com> - 20230524-1
changelog:
  - Rebase to edk2-stable202305 tag [RHEL-585]
    Resolves: RHEL-585
    ([rhel-9.3] rebase EDK2 to edk2-stable202305)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20230524-2
changelog:
  - edk2-ArmVirt-add-VirtioSerialDxe-to-ArmVirtQemu-builds.patch [RHEL-643]
  - edk2-ArmVirt-PlatformBootManagerLib-factor-out-IsVirtio.patch [RHEL-643]
  - edk2-ArmVirt-PlatformBootManagerLib-factor-out-IsVirtioPc.patch [RHEL-643]
  - edk2-ArmVirt-PlatformBootManagerLib-set-up-virtio-serial-.patch [RHEL-643]
  - edk2-OvmfPkg-VirtioSerialDxe-use-TPL_NOTIFY.patch [RHEL-643]
  - edk2-OvmfPkg-VirtioSerialDxe-Remove-noisy-debug-print-on-.patch [RHEL-643]
  - edk2-OvmfPkg-PlatformInitLib-limit-phys-bits-to-46.patch [bz#2174749]
  - edk2-Revert-OvmfPkg-disable-dynamic-mmio-window-rhel-only.patch [bz#2174749]
  - edk2-UefiCpuPkg-MpInitLib-fix-apic-mode-for-cpu-hotplug.patch [bz#2124143]
  - edk2-OvmfPkg-PlatformInitLib-check-PcdUse1GPageTable.patch [RHEL-644]
  - edk2-OvmfPkg-OvmfPkgIa32X64-enable-1G-pages.patch [RHEL-644]
  - edk2-OvmfPkg-MicrovmX64-enable-1G-pages.patch [RHEL-644]
  - Resolves: RHEL-643
    (add virtio serial support to armvirt)
  - Resolves: bz#2174749
    ([edk2] re-enable dynamic mmio window)
  - Resolves: bz#2124143
    (ovmf must consider max cpu count not boot cpu count for apic mode [rhel-9])
  - Resolves: RHEL-644
    (enable gigabyte pages)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20230524-3
changelog:
  - edk2-OvmfPkg-AmdSev-fix-BdsPlatform.c-assertion-failure-d.patch [bz#2190244]
  - edk2-OvmfPkg-IoMmuDxe-add-locking-to-IoMmuAllocateBounceB.patch [bz#2211060]
  - edk2-OvmfPkg-AmdSevDxe-Shim-Reboot-workaround-RHEL-only.patch [bz#2218196]
  - Resolves: bz#2190244
    ([EDK2] [AMDSERVER 9.3 Bug] OVMF AP Creation Fixes)
  - Resolves: bz#2211060
    (SEV-es guest randomly stuck at boot to hard drive screen from powerdown and boot again)
  - Resolves: bz#2218196
    (Add vtpm devices with OVMF.amdsev.fd causes VM reset)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20230524-4
changelog:
  - edk2-OvmfPkg-ResetVector-Fix-assembler-bit-test-flag-chec.patch [RHEL-9943]
  - Resolves: RHEL-9943
    ([EDK2][AMDSERVER Bug] OvmfPkg/ResetVector: Fix assembler bit test flag check [rhel-9.3.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-1
changelog:
  - Rebase to edk2-stable202311 [RHEL-12323]
  - Switch to OpenSSL 3.0 [RHEL-49]
  - Resolves: RHEL-12323
    (Rebase EDK2 for RHEL 9.4)
  - Resolves: RHEL-49
    (consume / bundle RHEL-9 OpenSSL (version 3.0.x) in RHEL-9 edk2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-2
changelog:
  - edk2-OvmfPkg-RiscVVirt-use-gEfiAuthenticatedVariableGuid-.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-stop-accepting-gEfiVariableG.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-sanity-check-variables.patch [RHEL-20963]
  - Resolves: RHEL-20963
    ([rhel9] guest fails to boot due to ASSERT error)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-3
changelog:
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411.patch [RHEL-21155]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4117.patch [RHEL-21155]
  - edk2-SecurityPkg-Adding-CVE-2022-36763-to-SecurityFixes.y.patch [RHEL-21155]
  - Resolves: RHEL-21155
    (CVE-2022-36763 edk2: heap buffer overflow in Tcg2MeasureGptTable() [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-4
changelog:
  - edk2-OvmfPkg-VirtNorFlashDxe-add-casts-to-UINTN-and-UINT3.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-clarify-block-write-logic-fi.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-add-a-loop-for-NorFlashWrite.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-allow-larger-writes-without-.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-ValidateFvHeader-unwritten-s.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-move-DoErase-code-block-into.patch [RHEL-20963]
  - Resolves: RHEL-20963
    ([rhel9] guest fails to boot due to ASSERT error)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-5
changelog:
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-4118.patch [RHEL-21157]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4118.patch [RHEL-21157]
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411-2.patch [RHEL-21157]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-411-3.patch [RHEL-21157]
  - edk2-SecurityPkg-Updating-SecurityFixes.yaml-after-symbol.patch [RHEL-21157]
  - edk2-OvmfPkg-Sec-Setup-MTRR-early-in-the-boot-process.patch [RHEL-21704]
  - edk2-MdePkg-ArchitecturalMsr.h-add-defines-for-MTRR-cache.patch [RHEL-21704]
  - edk2-UefiCpuPkg-MtrrLib.h-use-cache-type-defines-from-Arc.patch [RHEL-21704]
  - edk2-OvmfPkg-Sec-use-cache-type-defines-from-Architectura.patch [RHEL-21704]
  - Resolves: RHEL-21157
    (CVE-2022-36764 edk2: heap buffer overflow in Tcg2MeasurePeImage() [rhel-9])
  - Resolves: RHEL-21704
    (vGPU VM take several minutes to show tianocore logo if firmware is ovmf)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-6
changelog:
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Pa.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Add-Unit-tests-to-CI-and-create-Host-Test.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Un.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Pa.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Un.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Patc.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Unit.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Patc.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Unit.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p2.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p3.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p4.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Adds-a-SecurityFix.yaml-file.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Re.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-Removes-duplicate-check-and-repl.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-Packet-Length-is-not-updated-bef.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Updating-SecurityFixes.yaml.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - Resolves: RHEL-21841
    (CVE-2023-45229 edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message [rhel-9])
  - Resolves: RHEL-21843
    (CVE-2023-45230 edk2: Buffer overflow in the DHCPv6 client via a long Server ID option [rhel-9])
  - Resolves: RHEL-21845
    (CVE-2023-45231 edk2: Out of Bounds read when handling a ND Redirect message with truncated options [rhel-9])
  - Resolves: RHEL-21847
    (CVE-2023-45232 edk2: Infinite loop when parsing unknown options in the Destination Options header [rhel-9])
  - Resolves: RHEL-21849
    (TRIAGE CVE-2023-45233 edk2: Infinite loop when parsing a PadN option in the Destination Options header [rhel-9])
  - Resolves: RHEL-21851
    (CVE-2023-45234 edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message [rhel-9])
  - Resolves: RHEL-21853
    (TRIAGE CVE-2023-45235 edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-6.el9_4.1
changelog:
  - edk2-EmbeddedPkg-Hob-Integer-Overflow-in-CreateHob.patch [RHEL-30156]
  - edk2-StandaloneMmPkg-Hob-Integer-Overflow-in-CreateHob.patch [RHEL-30156]
  - Resolves: RHEL-30156
    (CVE-2022-36765 edk2: integer overflow in CreateHob() could lead to HOB OOB R/W [rhel-9.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-6.el9_4.2
changelog:
  - edk2-NetworkPkg-SECURITY-PATCH-CVE-2023-45237.patch [RHEL-40270 RHEL-40272]
  - edk2-NetworkPkg-TcpDxe-SECURITY-PATCH-CVE-2023-45236.patch [RHEL-40270 RHEL-40272]
  - edk2-NetworkPkg-TcpDxe-Fixed-system-stuck-on-PXE-boot-flo.patch [RHEL-40270 RHEL-40272]
  - edk2-MdePkg-BaseRngLib-Add-a-smoketest-for-RDRAND-and-che.patch [RHEL-40270 RHEL-40272]
  - edk2-SecurityPkg-RngDxe-add-rng-test.patch [RHEL-40270 RHEL-40272]
  - edk2-OvmfPkg-wire-up-RngDxe.patch [RHEL-40270 RHEL-40272]
  - edk2-CryptoPkg-Test-call-ProcessLibraryConstructorList.patch [RHEL-40270 RHEL-40272]
  - edk2-MdePkg-X86UnitTestHost-set-rdrand-cpuid-bit.patch [RHEL-40270 RHEL-40272]
  - Resolves: RHEL-40270
    (CVE-2023-45237 edk2: Use of a Weak PseudoRandom Number Generator [rhel-9.4.z])
  - Resolves: RHEL-40272
    (CVE-2023-45236 edk2: Predictable TCP Initial Sequence Numbers [rhel-9.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-6.el9_4.3
changelog:
  - edk2-OvmfPkg-Add-Hash2DxeCrypto-to-OvmfPkg.patch [RHEL-46976]
  - edk2-NetworkPkg-DxeNetLib-adjust-PseudoRandom-error-loggi.patch [RHEL-54188]
  - edk2-NetworkPkg-DxeNetLib-Reword-PseudoRandom-error-loggi.patch [RHEL-54188]
  - Resolves: RHEL-46976
    (No http boot support on edk2-ovmf-20231122-6.el9_4.2)
  - Resolves: RHEL-54188
    ([RHEL-9.4.z] edk2 hit Failed to generate random data)


author: Jon Maloy <jmaloy@redhat.com> - 20231122-6.el9_4.4
changelog:
  - edk2-Bumped-openssl-submodule-version-to-0205b5898872.patch [RHEL-55337]
  - Resolves: RHEL-55337
    (CVE-2024-6119 edk2/openssl: Possible denial of service in X.509 name checks [rhel-9.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240214-2
changelog:
  - edk2-OvmfPkg-PlatformPei-log-a-warning-when-memory-is-tig.patch [RHEL-22202]
  - edk2-OvmfPkg-PlatformPei-consider-AP-stacks-for-pei-memor.patch [RHEL-22202]
  - edk2-OvmfPkg-PlatformPei-rewrite-page-table-calculation.patch [RHEL-22202]
  - edk2-OvmfPkg-PlatformPei-log-pei-memory-cap-details.patch [RHEL-22202]
  - edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.patch [RHEL-22202]
  - edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p2.patch [RHEL-22202]
  - edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p3.patch [RHEL-22202]
  - edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p4.patch [RHEL-22202]
  - edk2-UefiCpuPkg-MpInitLib-Add-support-for-multiple-HOBs-t.p5.patch [RHEL-22202]
  - edk2-UefiCpuPkg-MpInitLib-return-early-in-GetBspNumber.patch [RHEL-22202]
  - Resolves: RHEL-22202
    ([EDK2] Support booting with 4096 vcpus)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-1
changelog:
  - Rebase to edk2-stable202405
  - Bumo openssl to 8e5beb77088b
  - Resolves: RHEL-32486
    (rebase to edk2-stable202405 [rhel-9])
  - Resolves: RHEL-36446
    (edk2: enable MOR [rhel-9])
  - Resolves: RHEL-21653
    (CVE-2023-6237 edk2: openssl: Excessive time spent checking invalid RSA public keys [rhel-9])
  - Resolves: RHEL-21150
    (CVE-2023-6129 edk2: mysql: openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC)
  - Resolves: RHEL-22490
    (CVE-2024-0727 edk2: openssl: denial of service via null dereference [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-2
changelog:
  - edk2-MdeModulePkg-Warn-if-out-of-flash-space-when-writing.patch [RHEL-43442]
  - Resolves: RHEL-43442
    (edk2 disconnects abnormally before loading the kernel)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-3
changelog:
  - edk2-NetworkPkg-DxeNetLib-adjust-PseudoRandom-error-loggi.patch [RHEL-45899]
  - edk2-NetworkPkg-DxeNetLib-Reword-PseudoRandom-error-loggi.patch [RHEL-45899]
  - Resolves: RHEL-45899
    ([RHEL-9.5.0] edk2 hit Failed to generate random data)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-4
changelog:
  - edk2-AmdSevDxe-Fix-the-shim-fallback-reboot-workaround-fo.patch [RHEL-56081]
  - Resolves: RHEL-56081
    ([EDK2] Shim fallback reboot workaround might not work on SNP)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-5
changelog:
  - edk2-UefiCpuPkg-PiSmmCpuDxeSmm-skip-PatchInstructionX86-c.patch [RHEL-45847]
  - Resolves: RHEL-45847
    ([RHEL9.5] Hotplug vcpu to a guest cause guest kernel panic)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-6
changelog:
  - edk2-OvmfPkg-CpuHotplugSmm-delay-SMM-exit.patch [RHEL-56974]
  - edk2-Bumped-openssl-submodule-version-to-0205b5898872.patch [RHEL-55336]
  - Resolves: RHEL-56974
    (qemu-kvm: warning: Blocked re-entrant IO on MemoryRegion: acpi-cpu-hotplug at addr: 0x0 [rhel-9])
  - Resolves: RHEL-55336
    (CVE-2024-6119 edk2/openssl: Possible denial of service in X.509 name checks [rhel-9.5])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-6.el9_5.1
changelog:
  - edk2-MdePkg-Fix-overflow-issue-in-BasePeCoffLib.patch [RHEL-60831]
  - Resolves: RHEL-60831
    (CVE-2024-38796 edk2: Integer overflows in PeCoffLoaderRelocateImage [rhel-9.5])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-6.el9_5.2
changelog:
  - edk2-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-65735]
  - edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-65735]
  - Resolves: RHEL-65735
    ([Regression] HTTP Boot not working on old vCPU without virtio-rng device present  [rhel-9.5.z])


author: Jon Maloy <jmaloy@redhat.com> - 20240524-6.el9_5.3
changelog:
  - edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-63094]
  - Resolves: RHEL-63094
    ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater [rhel-9.5])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-7
changelog:
  - edk2-OvmfPkg-VirtioGpuDxe-ignore-display-resolutions-smal.patch [RHEL-56248]
  - edk2-OvmfPkg-QemuVideoDxe-ignore-display-resolutions-smal.patch [RHEL-56248]
  - edk2-MdePkg-Fix-overflow-issue-in-BasePeCoffLib.patch [RHEL-60833]
  - Resolves: RHEL-56248
    (507x510 display resolution should not crash the firmware [edk2,rhel-9.6])
  - Resolves: RHEL-60833
    (CVE-2024-38796 edk2: Integer overflows in PeCoffLoaderRelocateImage [rhel-9.6])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-8
changelog:
  - edk2-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-65725]
  - Resolves: RHEL-65725
    ([Regression] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-9
changelog:
  - edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66230]
  - Resolves: RHEL-66230
    ([Regression] [aarch64] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6])


author: Jon Maloy <jmaloy@redhat.com> - 20240524-10
changelog:
  - edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-58631]
  - Resolves: RHEL-58631
    ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20241117-2
changelog:
  - edk2-Fix-amd-sev-firmware-file-for-amd-snp.patch [RHEL-72447]
  - Resolves: RHEL-72447
    ( QEMU should creating new json file that will correctly describe firmware for amd-sev-snp [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 20241117-2.el9_6.1
changelog:
  - edk2-Update-dbx-revocation-list-to-2025-02-24-version.patch [RHEL-83018]
  - Resolves: RHEL-83018
    (The newer revocation file and Server 2025 required to update it [rhel-9.6.z])


author: Jon Maloy <jmaloy@redhat.com> - 20241117-3
changelog:
  - edk2-OvmfPkg-Use-the-OvmfPkg-version-of-CcProbeLib.patch [RHEL-70865]
  - edk2-Update-dbx-revocation-list-to-2025-02-24-version.patch [RHEL-83019]
  - Resolves: RHEL-70865
    (SNP guest failed to boot with SVSM using OVMF.amdsev.fd [rhel-9.7])
  - Resolves: RHEL-83019
    (The newer revocation file and Server 2025 required to update it [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20241117-4
changelog:
  - edk2-update-dbx-to-20250610.patch [RHEL-96869]
  - Resolves: RHEL-96869
    ([edk2,rhel-9] dbx update 20250610)


author: Jon Maloy <jmaloy@redhat.com> - 20241117-4.el9_7.1
changelog:
  - edk2-OvmfPkg-IoMmuDxe-Fix-1M-and-2M-buffer-handling.patch [RHEL-121875]
  - Resolves: RHEL-121875
    (Fail to create AMD SEV SLES 15 SP4 guest via virt-install --cdrom [rhel-9.7.z])


author: Jon Maloy <jmaloy@redhat.com> - 20241117-4.el9_7.3
changelog:
  - edk2-OvmfPkg-MemEncryptSevLib-Evict-cache-lines-during-SN.patch [RHEL-125104]
  - edk2-MdePkg-Add-the-COHERENCY_SFW_NO-CPUID-bit-field.patch [RHEL-125104]
  - edk2-OvmfPkg-ResetVector-Make-ReceivedVc-a-flag-in-SEV-ES.patch [RHEL-125104]
  - edk2-OvmfPkg-MemEncryptSevLib-Check-if-SEV-SNP-coherency-.patch [RHEL-125104]
  - edk2-openssl-flatten-contents-of-openssl-tarball.patch [RHEL-115923]
  - edk2-Bumped-openssl-submodule-to-version-3.0.7-29.1.patch [RHEL-115923]
  - Resolves: RHEL-125104
    ([edk2] VM panic on booting SNP guest with large memory on Genoa [rhel-9.7.z])
  - Resolves: RHEL-115923
    (CVE-2025-9230 edk2: Out-of-bounds read & write in RFC 3211 KEK Unwrap [rhel-9.7.z])


author: Miro Hrončok <mhroncok@redhat.com> - 0.29.22-2
changelog:
  - Remove an obsoleted patch
  - Remove old Obsoletes and Conflicts
  - Update description
  - Provide cython, python3-cython


author: Tomas Orsava <torsava@redhat.com> - 0.29.22-6
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Milan Crha <mcrha@redhat.com> - 3.40.4-10
changelog:
  - Related: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add dependency on newly introduced evolution-data-server-ui


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-4
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993247

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993284


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018421

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003670


author: Debarshi Ray <rishi@fedoraproject.org> - 1.12.4-2
changelog:
  - Don't try to add Fedora's OCI Flatpak repository on RHEL
  - Remove an obsolete Fedora-specific update path
  Resolves: #2051697


author: Kalev Lember <klember@redhat.com> - 1.12.9-2
changelog:
  - Backport upstream patches for CVE-2024-42472
  - Require bubblewrap version that has new --bind-fd option backported for
    addressing CVE-2024-42472


author: Tomas Popela <tpopela@redhat.com> - 34-2
changelog:
  - Sync with Fedora
  - Correctly substitute /app/lib in flatpak-builder defaults.json ldflags (by klember)
  - Include fonts-dirs.xml in fontconfig flatpak configuration (by tagoh)
  - Add 05-flatpak-fontpath.conf that forces a different MD5 for fontconfig cache to avoid
    conflict between caches on host and flatpak (by tagoh)


author: Adam Jackson <ajax@redhat.com> - 1.3.5-9
changelog:
  - Remove BuildRequires xprop entirely. If present, the configure script will call
    it looking for a property on the root window that Fedora's X server does not
    set, and which would not work anyway since there is no X server running in the
    buildroot, so we can just remove the dependency.


author: Fabio Alessandro Locati <fale@fedoraproject.org> - 5.13.1-2
changelog:
  - Provide the right font configuration
  - Drop ttf format since upstream affirms that otf is to be preferred


author: Akira TAGOH <tagoh@redhat.com> - 2.13.94-2
changelog:
  - Fix the score calculation on matching for multiple values.
  - Enable 11-lcdfilter-default.conf.
    Resolves: rhbz#1965684
  - Rebase to the latest release.
    Resolves: rhbz#2023161


author: Akira TAGOH <tagoh@redhat.com> - 2.13.95-1
changelog:
  - New upstream release.
  - Update deps to font(notosans)
    https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts


author: Akira TAGOH <tagoh@redhat.com> - 2.14.0-1
changelog:
  - New upstream release.
  - Rebase to 2.14 and revert Noto Default change happened in f36.
    Resolves: rhbz#2075393


author: Parag Nemade <pnemade AT redhat DOT com> - 20201107-1
changelog:
  - Update to 20201107 version (#1895648)
  - removed %gittag0 macro, as it cause problem to automated package update script


author: Parag Nemade <pnemade AT redhat DOT com> - 20201107-7
changelog:
  - Resolves: RHEL-138206
    CVE-2025-15279 GUtils BMP File Parsing Heap-based Buffer Overflow
  - Resolves: RHEL-138228
    CVE-2025-15275 SFD File Parsing Heap-based Buffer Overflow
  - Resolves: RHEL-138158
    CVE-2025-15269 SFD File Parsing Use-After-Free


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Pavel Cahyna <pcahyna@redhat.com> - 1.6.14-2
changelog:
  - Apply upstream patch 41d0d70f
    ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type


author: Antonio Torres <antorres@redhat.com> - 3.0.21-31
changelog:
  - Update OpenSSL 3.0 support backport to current v3.0.x branch state
  - Add "--enable-fips-workaround" to build options
    Related: rhbz#2083699


author: Antonio Torres <antorres@redhat.com> - 3.0.21-34
changelog:
  - Use GID / UID 95 as it's reserved for FreeRADIUS (https://pagure.io/setup/blob/07f8debf03dfb0e5ed36051c13c86c8cd00cd241/f/uidgid#_107)
    Resolves: #2095403


author: Ondrej Holy <oholy@redhat.com> - - 2:2.4.1-4
changelog:
  - CVE-2022-39282: Fix length checks in parallel driver (#2136152)
  - CVE-2022-39283: Add missing length check in video channel (#2136154)
  - CVE-2022-39316, CVE-2022-39317: Add missing length checks in zgfx (#2145140)
  - CVE-2022-39318: Fix division by zero in urbdrc channel (#2145140)
  - CVE-2022-39319: Add missing length checks in urbdrc channel (#2145140)
  - CVE-2022-39320: Ensure urb_create_iocompletion uses size_t (#2145140)
  - CVE-2022-39347: Fix path validation in drive channel (#2145140)
  - CVE-2022-41877: Add missing length check in drive channel (#2145140)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.2-1
changelog:
  - Update to 2.11.2 (RHEL-4290, RHEL-4292, RHEL-4296, RHEL-4298, RHEL-4300,
    RHEL-4302, RHEL-4304, RHEL-4306, RHEL-4308, RHEL-4310, RHEL-4312,
    RHEL-10060)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
    CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,
    CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-1.1
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-142426, RHEL-142410, RHEL-142394, RHEL-142378, RHEL-142362,
    Resolves: RHEL-142346, RHEL-142330


author: Richard Hughes <richard@hughsie.com> 1.8.10-1
changelog:
  - Rebase to latest upstream release to fix multiple ESP detection problems
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.8.10-2
changelog:
  - Rebuild because distrobaker did entirely the wrong thing.
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.9.26-1
changelog:
  - Rebase to get hardware support for CERTPX-13842
  - Resolves: #RHEL-16637
  - Resolves: #RHEL-35373
  - Resolves: #RHEL-61930


author: Marek Polacek <polacek@redhat.com> 11.4.1-2
changelog:
  - update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release
    - PRs bootstrap/90543, c++/53932, c++/69410, c++/92752, c++/98056,
  	c++/98821, c++/100295, c++/100474, c++/101118, c++/101869,
  	c++/102780, c++/103871, c++/104527, c++/105406, c++/105996,
  	c++/106188, c++/106675, c++/106713, c++/106740, c++/107065,
  	c++/107163, c++/107179, c++/107558, c++/107579, c++/107864,
  	c++/108138, c++/108180, c++/108365, c++/108468, c++/108474,
  	c++/108607, c++/108975, c++/108998, c++/109096, c++/109164, c/107127,
  	c/107465, c/109151, d/107592, d/108050, d/108877, d/109108,
  	debug/106719, debug/108573, debug/108716, debug/108967, driver/106624,
  	fortran/85877, fortran/95107, fortran/96024, fortran/96025,
  	fortran/99036, fortran/103259, fortran/104332, fortran/106209,
  	fortran/106945, fortran/107576, fortran/107872, fortran/108131,
  	fortran/108349, fortran/108420, fortran/108421, fortran/108451,
  	fortran/108453, fortran/108501, fortran/108502, fortran/108527,
  	fortran/108529, fortran/108609, fortran/108937, fortran/109186,
  	fortran/109511, fortran/109846, ipa/105685, ipa/106124, ipa/107944,
  	libquadmath/87204, libquadmath/94756, libstdc++/91456,
  	libstdc++/103934, libstdc++/104866, libstdc++/104875,
  	libstdc++/105844, libstdc++/106183, libstdc++/107801,
  	libstdc++/107814, libstdc++/108030, libstdc++/108118,
  	libstdc++/108265, libstdc++/108636, libstdc++/108856,
  	libstdc++/108952, libstdc++/109064, libstdc++/109261,
  	libstdc++/109949, lto/109263, middle-end/104450, middle-end/104464,
  	middle-end/106190, middle-end/107317, middle-end/108237,
  	middle-end/108264, middle-end/108435, middle-end/108459,
  	middle-end/108546, middle-end/108625, middle-end/108685,
  	middle-end/108854, other/108560, other/109306,
  	rtl-optimization/106751, rtl-optimization/107482,
  	rtl-optimization/108193, rtl-optimization/108596,
  	rtl-optimization/109585, target/70243, target/90458, target/96373,
  	target/98776, target/100758, target/104871, target/104921,
  	target/105554, target/105599, target/106736, target/106875,
  	target/107568, target/107714, target/107863, target/108272,
  	target/108348, target/108589, target/108699, target/108807,
  	target/108812, target/108881, target/109067, target/109140,
  	target/109276, testsuite/47334, testsuite/103823, testsuite/108151,
  	testsuite/108973, testsuite/108985, tree-optimization/105484,
  	tree-optimization/106809, tree-optimization/107107,
  	tree-optimization/107212, tree-optimization/107254,
  	tree-optimization/107323, tree-optimization/107451,
  	tree-optimization/107554, tree-optimization/107898,
  	tree-optimization/107997, tree-optimization/108068,
  	tree-optimization/108076, tree-optimization/108095,
  	tree-optimization/108199, tree-optimization/108498,
  	tree-optimization/108688, tree-optimization/108692,
  	tree-optimization/108821, tree-optimization/108950,
  	tree-optimization/109176, tree-optimization/109410,
  	tree-optimization/109473, tree-optimization/109491,
  	tree-optimization/109502, tree-optimization/109573,
  	tree-optimization/109724, tree-optimization/109778
    - PRs fortran/100607, libstdc++/109822, target/109954,
  	tree-optimization/109505


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Marek Polacek <polacek@redhat.com> 11.5.0-1
changelog:
  - update from releases/gcc-11 branch (RHEL-35635)
    - GCC 11.5 release
    - PRs ada/113893, ada/113979, analyzer/104042, c/113262, c/114007, c/114493,
  	c++/89224, c++/92145, c++/92407, c++/97990, c++/99710, c++/100667,
  	c++/100772, c++/101765, c++/103185, c++/104051, c++/111485,
  	c++/111529, c++/113598, c++/113674, c++/114537, c++/114561,
  	c++/114562, c++/114572, c++/114634, c++/114691, d/113125, d/113758,
  	d/114171, debug/111080, debug/112718, driver/115440, fortran/50410,
  	fortran/103715, fortran/104908, fortran/107426, fortran/114474,
  	fortran/114825, gcov-profile/114115, libfortran/110651,
  	libgomp/113192, libquadmath/114533, libstdc++/104259,
  	libstdc++/104606, libstdc++/105417, libstdc++/110054,
  	libstdc++/113250, libstdc++/114147, libstdc++/114401,
  	libstdc++/114750, libstdc++/114803, libstdc++/115269,
  	libstdc++/115454, libstdc++/115575, middle-end/90348,
  	middle-end/95351, middle-end/107385, middle-end/108789,
  	middle-end/110027, middle-end/110115, middle-end/110176,
  	middle-end/111422, middle-end/111632, middle-end/112732,
  	middle-end/113907, middle-end/113921, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/115527,
  	middle-end/115836, objc/101666, objc/101718, preprocessor/105608,
  	rtl-optimization/100303, rtl-optimization/108086,
  	rtl-optimization/110079, rtl-optimization/114768,
  	rtl-optimization/114902, rtl-optimization/115092, sanitizer/97696,
  	sanitizer/111736, sanitizer/114956, sanitizer/115172, target/88309,
  	target/101737, target/101865, target/105522, target/108120,
  	target/108743, target/110411, target/111610, target/111677,
  	target/112397, target/113122, target/113281, target/114049,
  	target/114098, target/114130, target/114184, target/114310,
  	target/114837, target/114846, target/115253, target/115297,
  	target/115360, target/115457, target/115475, target/115611,
  	target/115691, testsuite/113175, testsuite/114034, testsuite/114036,
  	tree-optimization/110386, tree-optimization/110422,
  	tree-optimization/111039, tree-optimization/111070,
  	tree-optimization/111331, tree-optimization/111407,
  	tree-optimization/111445, tree-optimization/111736,
  	tree-optimization/112495, tree-optimization/112505,
  	tree-optimization/112793, tree-optimization/113372,
  	tree-optimization/113552, tree-optimization/113603,
  	tree-optimization/114027, tree-optimization/114115,
  	tree-optimization/114566, tree-optimization/114876,
  	tree-optimization/115192, tree-optimization/115337,
  	tree-optimization/115843
  - fix FLUSH IOSTAT value (PR libfortran/101255, RHEL-32536)
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960)


author: Marek Polacek <polacek@redhat.com> 11.5.0-2
changelog:
  - fix TARGET_CPU_DEFAULT (PR target/105157, RHEL-50037)
  - libstdc++: Workaround kernel-headers on s390x-linux (RHEL-50054)
  - fix wrong code with memcpy from _Complex (PR tree-optimization/116034)


author: Filip Januš <fjanus@redhat.com> - 1.18.1-3
changelog:
  - Resolves: #1799391
  - After upgrade GCC to version gcc version 10.0.1 build fails
  - Patch gdbm_gcc_10.patch was added


author: Ray Strode <rstrode@redhat.com> - 40.1-15
changelog:
  - Fix accountsservice user templates
    Resolves: #2062827
  - Properly force Xorg on matrox cards
    Related: #2074013
  - Fix typo that prevents the correct session type from being
    used when user switching.
    Resolves: #2074014


author: Ray Strode <rstrode@redhat.com> - 40.1-23
changelog:
  - Make /var/log/gdm tmpfiles.d snippet match files manifest
    to fix installability test
    Related: RHEL-19410


author: Joan Torres <joantolo@redhat.com> - 40.1-29
changelog:
  - Fix legacy-xorg session switching
    The fix that intended to fix the issue wasn't complete and also,
    introduced a bug on user switching for non legacy-xorg servers.
    This fix addresses both issues.
  - Avoid waiting 10s when starting GDM in legacy-xorg mode
    Resolves: RHEL-97492


author: Joan Torres <joantolo@redhat.com> - 40.1-31
changelog:
  - Fix legacy-xorg session switching
    The fix that intended to fix the issue wasn't complete and also,
    introduced a bug on user switching for non legacy-xorg servers.
    This fix addresses both issues.
  - Avoid waiting 10s when starting GDM in legacy-xorg mode
    Resolves: RHEL-72694


author: Joan Torres <joantolo@redhat.com> - 40.1-32
changelog:
  - Leave session-opened signature the same as before and use a new
    session-opened-with-session-id signal to keep ABI compatibility
    Related: RHEL-46383


author: Joan Torres <joantolo@redhat.com> - 40.1-35
changelog:
  - Instead of allowing adding custom parameters to Xorg,
    only allow adding -nocursor. Allowing adding custom parameters
    is a potential security issue.
    Related: RHEL-81194


author: Milan Crha <mcrha@redhat.com> - 2.6.0-8
changelog:
  - Backport Fedora change to provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format)
  - Resolves: RHEL-78739


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-15
changelog:
  - RHEL-39110 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-17
changelog:
  - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
  - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction
  - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-16
changelog:
  - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-18
changelog:
  - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable()
  - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-8
changelog:
  - Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-9
changelog:
  - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-11
changelog:
  - Really fix authentication failures when sd-bus clients connect to GDBus servers
  - Resolves: #2217771


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-16.2
changelog:
  - Add patches for CVE-2024-52533 and CVE-2025-4373
  - Update GDateTime test for new tzdata
  - Resolves: RHEL-94290
  - Resolves: RHEL-102845


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-17
changelog:
  - Add patches for CVE-2024-52533 and CVE-2025-4373
  - Update GDateTime test for new tzdata
  - Resolves: RHEL-94483
  - Resolves: RHEL-102844


author: Florian Weimer <fweimer@redhat.com> - 2.34-100.2
changelog:
  - CVE-2024-33599: nscd: buffer overflow in netgroup cache (RHEL-34318)
  - CVE-2024-33600: nscd: null pointer dereferences in netgroup cache
  - CVE-2024-33601: nscd: crash on out-of-memory condition
  - CVE-2024-33602: nscd: memory corruption with NSS netgroup modules


author: Andrew Lukoshko <alukoshko@almalinux.org> - 2.34-100.2.alma.2
changelog:
  - elf: Avoid some free (NULL) calls in _dl_update_slotinfo
  - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39992)


author: Patsy Griffin <patsy@redhat.com> - 2.34-100.3
changelog:
  - elf: Avoid some free (NULL) calls in _dl_update_slotinfo
  - elf: Support recursive use of dynamic TLS in interposed malloc (RHEL-39993)


author: Patsy Griffin <patsy@redhat.com> - 2.34-100.4
changelog:
  - elf: Clarify and invert second argument of _dl_allocate_tls_init
  - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-46763)


author: Patsy Griffin <patsy@redhat.com> - 2.34-122
changelog:
  - elf: Clarify and invert second argument of _dl_allocate_tls_init
  - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36148)


author: Joonas Sarajärvi <muep@iki.fi> - 0.9.9.8-1
changelog:
  - New upstream release (#1823615)
  - pkgconfig support is no longer supported in upstream and not shipped


author: Bastien Nocera <bnocera@redhat.com> - 3.34.3-4
changelog:
  + gnome-bluetooth-3.34.3-4
  - Revert “Require PulseAudio _or_ Pipewire for Bluetooth audio”
  - Closes: #1928166


author: Milan Crha <mcrha@redhat.com> - 41.0-2
changelog:
  - Resolves: #2012699 (Backport changes from Fedora 35)
  - Add patch to mark compulsory only repos, not apps from it
  - Resolves: #2011176 (flathub repo can't be added through gnome-software)
  - Resolves: #2010660 (gs-repos-dialog: Can show also desktop applications)
  - Resolves: #2010353 (Optional repos cannot be disabled)
  - Resolves: #2010740 (Refresh on repository setup change)
  - Resolves: #2009063 (Correct update notifications)


author: Milan Crha <mcrha@redhat.com> - 41.5-2
changelog:
  - Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file)
  - Resolves: #2129021 (Hide some errors in non-debug builds)


author: Peter Jones <pjones@redhat.com> - 3.0.9-3
changelog:
  - Fix some minor rpmlint complaints
  - Pull recent patches from upstream
  - Add support for ELF constructors and destructors
  - Fix a minor licensing problem


author: Peter Jones <pjones@redhat.com> - 3.0.11-1
changelog:
  - Update to 3.0.11 (via patches generated from git)
  - Plus newer upstream fixes (also via patches generated from git)
  - Fix shell exit failures in make
  - Fix .reloc section generation
  - Fix CHAR8 definition
  - Fix "make DESTDIR=..."
  - Change the installed .a/.o layout
  - Provide makefiles for consumers to use.
  - Make the -devel noarch since it's just headers.
  - Add a bunch of compatibility symlinks for the 3.0.8 filesystem layout
    These will go away once we've migrated everything using them in fedora
    to use the newer make system...


author: Peter Jones <pjones@redhat.com> - 3.0.11-2
changelog:
  - Make a compat subpackage to provide the old paths to our libraries, linker
    script, and includes.


author: David King <amigadave@amigadave.com> - 1.68.0-6
changelog:
  - Add Requires on python-markdown for g-ir-doc-tool (#1979144)
  - Add license texts and documentation files (#1979144)


author: Akira TAGOH <tagoh@redhat.com> - 20201206-1
changelog:
  - Updates to 20201206.
    Resolves: rhbz#1899847
  - Refactoring spec file.
  - Fix invalid metainfo files.
    Resolves: rhbz#1830709


author: Peng Wu <pwu@redhat.com> - 20230817-1
changelog:
  - Update Noto CJK to Sans 2.004 and Serif 2.002
  - Drop some Noto CJK Language Specific OTFs sub packages
  - Resolves: RHEL-13738


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-2
changelog:
  - Patch CVE-2023-44429: AV1 codec parser heap-based buffer overflow
  - Patch CVE-2023-44446: MXF demuxer use-after-free
  - Resolves: RHEL-17030, RHEL-17039


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-4
changelog:
  - CVE-2023-40474: Integer overflow leading to heap overwrite in MXF
  - CVE-2023-40475: Integer overflow leading to heap overwrite in MXF
  - CVE-2023-40476: Integer overflow in H.265 video parser
  - ZDI-CAN-22300: buffer overflow vulnerability
  - Resolves: RHEL-19501, RHEL-19505, RHEL-19506, RHEL-20201


author: Kalev Lember <klember@redhat.com> - 1.33-1
changelog:
  - Update to 1.33
  - Switch to meson build system
  - Explicitly byte-compile python files using py_byte_compile macro


author: Kalev Lember <klember@redhat.com> - 3.24.3-1
changelog:
  - Update to 3.24.3
  - Use https source URLs
  - Re-enable LTO now that we have upstream fix in place (#1898054)
  - Switch to meson build system
  - Tighten soname globs


author: Bruno Meneguele <bmeneg@redhat.com> - 1.3.2-9
changelog:
  - Use upstream accepted patch for the memory leak
  - Make SHA-256 the default hash algorithm (rhbz#1934949)


author: Bruno Meneguele <bmeneg@redhat.com> - 1.4-1
changelog:
  - Modify some pieces to get closer to Fedora's specfile
  - Remove patch handling memory leak: solved in the rebase
  - Remove patch handling SHA-256 default hash: solved in the rebase
  - Rebase to upstream release v1.4 (rhbz#2026028)


author: Coiby Xu <coxu@redhat.com> - 1.6.2-1
changelog:
  - ima-setup: run zipl after building initramfs for s390x (RHEL-72293)
  - update to upstream 1.6.2 (RHEL-82793)


author: Coiby Xu <coxu@redhat.com> - 1.6.2-2
changelog:
  - Verify IMA signature to make sure it's correct (RHEL-105471)
  - Drop old libimaevm.so.4 (RHEL-82797)


author: Eugene Syromiatnikov <esyr@redhat.com> - 23.11-2
changelog:
  - Revert commit "lib: update detection of non-architectural L3CAT" that removed
    L3CAT detection support on Tiger Lake and Erkhart Lake CPUs (RHEL-22729)


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-2.el9
changelog:
  - macvlan: Add bclim parameter (Andrea Claudi) [2186945]
  - Update kernel headers (Andrea Claudi) [2186945]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-5.el9
changelog:
  - tc: add missing separator (Andrea Claudi) [RHEL-337]
  - u32: fix TC_U32_TERMINAL printing (Andrea Claudi) [RHEL-586]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-5.1.el9
changelog:
  - man: ip-link.8: add a note for gso_ipv4_max_size (Andrea Claudi)
  - iplink: add gso and gro max_size attributes for ipv4 (Andrea Claudi)
  - Update kernel headers (Andrea Claudi)
  - ss: Add support for dumping TCP bound-inactive sockets. (Andrea Claudi)


author: Phil Sutter <psutter@redhat.com> - 7.11-8
changelog:
  - Ship iptables-translate utility with ipset package
  - Add missing function to libipset.map and bump library version
  - Fix all debug mode warnings
  - ipset-translate: allow invoking with a path name
  - Fix IPv6 sets nftables translation
  - Fix typo in ipset-translate man page
  - tests: add tests ipset to nftables
  - add ipset to nftables translation infrastructure
  - lib: Detach restore routine from parser
  - lib: split parser from command execution


author: Charalampos Stratakis <cstratak@redhat.com> - 2.13.1-1
changelog:
  - Update to 2.13.1 (#1831402)
  - Fix docs build failures with Sphinx 3 (#1823532)
  - Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.382.b05-2
changelog:
  - Update to shenandoah-jdk8u382-b05 (GA)
  - Update release notes for shenandoah-8u382-b05.
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - Use tapsets from the misc tarball on portable builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - The 'prelease' variable should refer to 'portablerelease', not 'rpmrelease'
  - Bump release number so we are newer than 9.0
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b01-1
changelog:
  - Update to shenandoah-jdk8u392-b01 (GA)
  - Update release notes for shenandoah-8u392-b01.
  - Sync the copy of the portable specfile with the latest update
  - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Related: RHEL-12209


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.392.b08-2
changelog:
  - Update to shenandoah-jdk8u392-b08 (GA)
  - Update release notes for shenandoah-8u392-b08.
  - Sync the copy of the portable specfile with the latest update
  - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Regenerate PR2462 patch following JDK-8315135
  - Bump version of bundled libpng to 1.6.39
  - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095)
  - Add missing JFR, alt-java, jre-* and java-* alternative ghosts
  - Move jcmd to the headless package
  - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
  - Resolves: RHEL-12208
  - Resolves: RHEL-13587
  - Resolves: RHEL-13590
  - Resolves: RHEL-13593
  - Resolves: RHEL-13583
  - Resolves: RHEL-13605
  - Resolves: RHEL-13615


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.402.b06-0.2.ea
changelog:
  - Update to shenandoah-jdk8u402-b06 (GA)
  - Update release notes for shenandoah-8u402-b06.
  - Sync NEWS with vanilla branch version.
  - Sync the copy of the portable specfile with the latest update
  - Drop local copy of JDK-8312489 which is now included upstream
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-17918
  - Resolves: RHEL-20987


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.2.ea
changelog:
  - Invoke xz in multi-threaded mode
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
  - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
  - Use backward-compatible patch syntax
  - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
  - generate_source_tarball.sh: Remove trailing period in echo
  - generate_source_tarball.sh: Use long-style argument to grep
  - generate_source_tarball.sh: Add license
  - generate_source_tarball.sh: Add indentation instructions for Emacs
  - Related: RHEL-30934


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.2.ea
changelog:
  - Turn off xz multi-threading on i686 as it fails with an out of memory error
  - Move to upstream tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources
  - generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity
  - generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork
  - generate_source_tarball.sh: Adapt version logic to work with 8u
  - generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086)
  - generate_source_tarball.sh: Update examples in header for clarity
  - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
  - generate_source_tarball.sh: Only add --depth=1 on non-local repositories
  - Move maintenance scripts to a scripts subdirectory
  - icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository
  - discover_trees.sh: Set compile-command and indentation instructions for Emacs
  - discover_trees.sh: shellcheck: Do not use -o (SC2166)
  - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: Add authorship
  - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
  - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
  - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: Set compile-command and indentation instructions for Emacs
  - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
  - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
  - Remove obsolete file generate_singlerepo_source_tarball.sh
  - Remove obsolete file get_sources.sh
  - Remove obsolete file update_main_sources.sh
  - generate_source_tarball.sh: Handle an existing checkout
  - generate_source_tarball.sh: Sync indentation with java-21-openjdk version
  - generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS
  - Sync patch set with portable build
  - Related: RHEL-30934


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.2.ea
changelog:
  - Update to shenandoah-jdk8u412-b07 (EA)
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-30934


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-2
changelog:
  - Update to shenandoah-jdk8u412-b08 (GA)
  - Update release notes for shenandoah-8u412-b08.
  - Complete release note for Certainly roots
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-32409


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.422.b01-0.1.ea
changelog:
  - Update to shenandoah-jdk8u422-b01 (EA)
  - Update release notes for shenandoah-8u422-b01.
  - Switch to EA mode.
  - Sync the copy of the portable specfile with the latest update
  - Update NEWS file and rename remove-intree-libraries.sh so portable can be rebuilt
  - Document policy repacking script and rename to correct spelling and style
  - Limit Java only tests to one architecture using jdk_test_arch
  - Temporarily include Zero-based architectures in jdk_test_arch until they are portable
  - Related: RHEL-46860
  - Resolves: RHEL-47069
  - Resolves: RHEL-47090


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.422.b05-1.1
changelog:
  - Update to shenandoah-jdk8u422-b05 (GA)
  - Update release notes for shenandoah-8u422-b05.
  - Rebase PR2462 patch following patched hunk being removed by JDK-8322106
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - Actually require tzdata 2024a now it is available in the buildroot
  - Add missing build dependencies on zlib-devel and tar
  - Update LCMS version to match JDK-8245400
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **
  - Resolves: RHEL-46860
  - Resolves: RHEL-47011


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.432.b06-1
changelog:
  - Update to shenandoah-jdk8u432-b06 (GA)
  - Update release notes for shenandoah-8u432-b06.
  - Drop JDK-828109{6,7,8}/PR3836 patch following integration of upstream version
  - Regenerate JDK-8199936/PR3533 patch following JDK-828109{6,7,8} integration
  - Bump version of bundled zlib to 1.3.1 following JDK-8324632
  - Include backport of JDK-8328999 to update giflib to 5.2.2
  - Bump version of bundled giflib to 5.2.2 following JDK-8328999
  - Add build scripts to repository to ease remembering all CentOS & RHEL targets and options
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-58794
  - Resolves: RHEL-62280
  - Resolves: RHEL-61287
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.432.b06-3
changelog:
  - Rebuild RPM for 9.5 0day release
  - Related: RHEL-58794
  - Related: RHEL-62280
  - Related: RHEL-61287


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b05-0.2.ea
changelog:
  - Update to 8u442-b05 (EA).
  - Update release notes for 8u442-b05.
  - Switch to EA mode for pre-release.
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-73998


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b05-0.3.ea
changelog:
  - Add zero_arches to the portable_build_arches now that the portable build bundles libffi
  - Temporarily workaround libffi.so not being in lib/%{archinstall} by copying it
  - Exclude libffi.so from the debugedit run
  - Add a simple -version check on both the JDK and JRE bin/java
  - Add libffi.so to the filelist, including expanding the lib/%{archinstall} contents as with jre/lib
  - Sync the copy of the portable specfile and new patches with the latest update
  - Resolves: RHEL-74305


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b06-2
changelog:
  - Update to 8u442-b06 (GA)
  - Update release notes for 8u442-b06.
  - Switch to GA mode for final release
  - Revise JDK-8141590 backport to install libffi.so* in lib as well as jre/lib
  - Sync the copy of the portable specfile with the latest update
  - Remove libffi.so copying workaround now the portable build installs it in lib
  - Add bundled libffi.so to _privatelibs
  - Remove libffi.so copy if we are building on the same platform as the portable
  - Resolves: RHEL-73551
  - Related: RHEL-74305


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.452.b09-1
changelog:
  - Update to 8u452-b09 (GA)
  - Update release notes for 8u452-b09.
  - Remove long option documentation from JDK-8335912/JDK-8337499 as not present in 8u
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86976
  - Resolves: RHEL-86618


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-1
changelog:
  - Update to 8u462-b08 (GA)
  - Update release notes for 8u462-b08.
  - Require tzdata 2025b due to upstream inclusion of JDK-8352716
  - Add early backport of JDK-8339414
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-101657
  - Resolves: RHEL-102311
  - Resolves: RHEL-102910


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.452.b09-2
changelog:
  - Update to 8u452-b09 (GA)
  - Update release notes for 8u452-b09.
  - Remove long option documentation from JDK-8335912/JDK-8337499 as not present in 8u
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86967
  - Resolves: RHEL-86620


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-3
changelog:
  - Update to 8u462-b08 (GA)
  - Update release notes for 8u462-b08.
  - Require tzdata 2025b due to upstream inclusion of JDK-8352716
  - Add early backport of JDK-8339414
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-101648
  - Resolves: RHEL-102312
  - Resolves: RHEL-97496


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-4
changelog:
  - Bump rpmrelease for CentOS build
  - Remove obsolete hack to hardcode newer portable version on RHEL
  - Related: RHEL-101648
  - Related: RHEL-102312
  - Related: RHEL-97496


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-5
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-119329


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.472.b08-1
changelog:
  - Update to 8u472-b08 (GA).
  - Update release notes for 8u472-b08.
  - Drop local JDK-8339414 fix as this is now included upstream
  - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118767
  - Resolves: RHEL-119455


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.472.b08-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118767
  - Related: RHEL-119455
  - Related: RHEL-118775


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.482.b08-1
changelog:
  - Update to 8u482-b08 (GA).
  - Update release notes for 8u482-b08.
  - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this
  - Turn on system FreeType as on later JDK versions and add to _privatelibs
  - Set bundled FreeType version to 2.13.2 following JDK-8316028
  - Bump LCMS 2 version to 2.14.0 following JDK-8297088
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
  - Resolves: RHEL-142687
  - Resolves: RHEL-139534
  - Resolves: RHEL-131588
  - Resolves: RHEL-131600
  - Resolves: RHEL-142875
  - Resolves: RHEL-142697


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1
changelog:
  - Update to jdk-11.0.20.0+8 (GA)
  - Update release notes to 11.0.20.0+8
  - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
  - Bump tzdata requirement to 2023c now it is available in the buildroot
  - Bump bundled LCMS version to 2.15 as in jdk-11.0.20+1.
  - Bump bundled HarfBuzz version to 7.0.1 as in jdk-11.0.20+7
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2217715
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-3
changelog:
  - Fix tzdata requirement copy-and-paste error that led to two BuildRequires and no Requires
  - Resolves: rhbz#2224420


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1
changelog:
  - Update to jdk-11.0.20.1+1 (GA)
  - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
  - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Resolves: rhbz#2236590


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.21.0.9-2
changelog:
  - Update to jdk-11.0.21+9 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Re-generate FIPS patch against 11.0.21+1 following backport of JDK-8155246
  - Re-generate SHA3 patch following backport of JDK-8242151
  - Bump libpng version to 1.6.39 following JDK-8305815
  - Bump HarfBuzz version to 7.2.0 following JDK-8307301
  - Bump freetype version to 2.13.0 following JDK-8306881
  - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Apply all patches using -p1
  - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2
  - Add missing JFR alternative ghost
  - Move jcmd to the headless package
  - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
  - Resolves: RHEL-12214
  - Resolves: RHEL-13526
  - Resolves: RHEL-13529
  - Resolves: RHEL-13532
  - Resolves: RHEL-13536
  - Resolves: RHEL-13539


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1
changelog:
  - Update to jdk-11.0.22+7 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Drop local copy of JDK-8312489 which is now included upstream
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-20991


author: Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1
changelog:
  - Update to jdk-11.0.23+9 (GA)
  - Update release notes to 11.0.23+9
  - Switch to GA mode for release
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-30920


author: Anton Bobrov <abobrov@redhat.com> - 1:11.0.24.0.8-1
changelog:
  - Update to jdk-11.0.24+8 (GA)
  - Update release notes to 11.0.24+8
  - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes
  - Switch to GA mode for release
  - Fix Provides to reflect up to date component versions
  - Add zlib build required or bundled version (1.3.1), depending on system_libs setting
  - Resolves: RHEL-45202
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **


author: Antonio Vieiro <avieirov@redhat.com> - 1:11.0.25.0.6-0.2.ea
changelog:
  - Update to jdk-11.0.25+6 (EA)
  - Update release notes to 11.0.25+6
  - Switch to EA mode
  - Bump giflib version to 5.2.2 following JDK-8328999
  - Bump libpng version to 1.6.43 following JDK-8329004
  - Related: RHEL-58775


author: Antonio Vieiro <avieirov@redhat.com> - 1:11.0.25.0.7-0.3.ea
changelog:
  - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml
  - RHJDKBP-874 - Removed 
  - Related: RHEL-58775


author: Antonio Vieiro <avieirov@redhat.com> - 1:11.0.25.0.9-2
changelog:
  - Update to jdk-11.0.25+9 (GA)
  - Update release notes to 11.0.25+9
  - Switch to GA mode for release
  - Related: RHEL-58775
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **


author: Antonio Vieiro <avieirov@redhat.com> - 1:11.0.25.0.9-3
changelog:
  - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z
  - Resolves: RHEL-63042 
  - See-Also: RHEL-63043 RHEL-63044


author: Antonio Vieiro <avieirov@redhat.com> - 1:11.0.25.0.9-3
changelog:
  - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z
  - Resolves: RHEL-63042 
  - See-Also: RHEL-63043
  - See-Also: RHEL-63044


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.25.0.9-6
changelog:
  - Make java-11-openjdk the default JDK only on RHEL x86_32
  - Drop system timezone data dependency from base RHEL 11u builds
  - Resolves: RHEL-70599
  - See-Also: RHEL-70600
  - See-Also: RHEL-70601
  - Resolves: RHEL-71242
  - See-Also: RHEL-71243
  - See-Also: RHEL-71244


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.25.0.9-3
changelog:
  - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17
  - Disable copy-jdk-configs for Flatpak builds
  - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction
  - Resolves: RHEL-73880
  - See-Also: RHEL-73881
  - See-Also: RHEL-73882
  - See-Also: RHEL-73873


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.8.0.6-0.1.ea
changelog:
  - Update to jdk-17.0.8+6 (EA)
  - Sync the copy of the portable specfile with the latest update
  - Resolves: rhbz#2217716


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.8.0.7-1
changelog:
  - Update to jdk-17.0.8+7 (GA)
  - Update release notes to 17.0.8+7
  - Switch to GA mode for final release.
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - * This tarball is embargoed until 2023-07-18 @ 1pm PT. *
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.8.1.1-1
changelog:
  - Update to jdk-17.0.8.1+1 (GA)
  - Update release notes to 17.0.8.1+1
  - Add backport of JDK-8312489 already upstream in 17.0.10 (see OPENJDK-2095)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Synchronise runtime and buildtime tzdata requirements
  - Resolves: rhbz#2236592


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.9.0.9-1
changelog:
  - Update to jdk-17.0.9+9 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Re-generate FIPS patch against 17.0.9+1 following backport of JDK-8209398
  - Bump libpng version to 1.6.39 following JDK-8305815
  - Bump HarfBuzz version to 7.2.0 following JDK-8307301
  - Bump freetype version to 2.13.0 following JDK-8306881
  - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  - Sync generate_tarball.sh with 11u version
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Use upstream release URL for OpenJDK source
  - Apply all patches using -p1
  - Temporarily turn off 'fresh_libjvm' due to removal of JVM_IsThreadAlive (JDK-8305425)
  - Add missing JFR and jpackage alternative ghosts
  - Move jcmd to the headless package
  - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
  - Resolves: RHEL-12226
  - Resolves: RHEL-13662
  - Resolves: RHEL-13673
  - Resolves: RHEL-13683
  - Resolves: RHEL-13648
  - Resolves: RHEL-13651


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.10.0.7-1
changelog:
  - Update to jdk-17.0.10+6 (EA)
  - fips-17u-d63771ea660.patch: Regenerate from gnu-andrew branch
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Append -ea designator when required
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash
  - generate_source_tarball.sh: shellcheck: Double-quote variable references
  - generate_source_tarball.sh: shellcheck: Do not use -a
  - generate_source_tarball.sh: shellcheck: Do not use $ in expression
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Add note on network usage of OPENJDK_LATEST
  - Related: RHEL-20995


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.10.0.7-1
changelog:
  - Update to jdk-17.0.10+7 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Move to -P<n> usage for patch macro which works on all RPM versions
  - Remove RH1648644 patch not in portable build (and so not applied to binary used)
  - Re-enable DEFAULT_PROMOTED_VERSION_PRE check disabled for the July 2023 release
  - generate_source_tarball.sh: Add --sort=name to tar invocation for reproducibility
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-20995


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.11.0.7-0.2.ea
changelog:
  - Update to jdk-17.0.11+7 (EA)
  - Update buildjdkver to match the featurever
  - Use featurever macro to specify fips patch
  - Explain patchN syntax situation in a comment
  - Sync generate_source_tarball.sh
  - Require tzdata 2023d (JDK-8322725)
  - openjdk_news.sh: Use grep -E instead of egrep
  - Remove RH1649512 patch for libjpeg-turbo FAR macro
  - Move pcsc-lite-libs patch to in-need-of-upstreaming section
  - Related: RHEL-30939


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.11.0.9-2
changelog:
  - Update to jdk-17.0.11+9 (GA)
  - Add openjdk-17.0.11+9.tar.xz to .gitignore
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Update buildver from 7 to 9
  - Update portablerelease from 1 to 3
  - Change is_ga from 0 to 1 to enable GA mode for release
  - Update tzdata Requires comment to mention that 2024a is not yet in the buildroot
  - Update tzdata BuildRequires comment to mention that 2024a is not yet in the buildroot
  - Update tzdata BuildRequires from 2023c to 2023d
  - Update sources from openjdk-17.0.11+7-ea.tar.xz to openjdk-17.0.11+9.tar.xz
  - Resolves: RHEL-30939
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.12.0.6-0.1.ea
changelog:
  - Update to jdk-17.0.12+6 (EA)
  - Add openjdk-17.0.12+6-ea.tar.xz to .gitignore
  - Set updatever to 12
  - Set buildver to 6
  - Set rpmrelease to 1
  - Set is_ga to 0
  - Update sources to openjdk-17.0.12+6-ea.tar.xz
  - Require tzdata-java 2024a at runtime and for build (JDK-8325150)
  - Update lcms2 bundled provides to 2.16.0
  - Add zlib 1.3.1 bundled provides and zlib-devel build requirement (OPENJDK-3065)
  - Label as error a designator mismatch
  - Change a fix-me comment to a note instead
  - Sync generate_source_tarball.sh from Fedora rawhide


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.12.0.6-0.1.ea
changelog:
  - generate_source_tarball.sh: Update examples in header for clarity
  - generate_source_tarball.sh: Cleanup message issued when checkout already exists
  - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
  - generate_source_tarball.sh: Only add --depth=1 on non-local repositories
  - icedtea_sync.sh: Reinstate from rhel-8.9.0 branch
  - Move maintenance scripts to a scripts subdirectory
  - discover_trees.sh: Set compile-command and indentation instructions for Emacs
  - discover_trees.sh: shellcheck: Do not use -o (SC2166)
  - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: Add authorship
  - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
  - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
  - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: Set compile-command and indentation instructions for Emacs
  - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
  - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
  - generate_source_tarball.sh: Output values of new options WITH_TEMP and OPENJDK_LATEST
  - generate_source_tarball.sh: Double-quote DEPTH reference (SC2086)
  - generate_source_tarball.sh: Avoid empty DEPTH reference while still appeasing shellcheck


author: Anton Bobrov <abobrov@redhat.com> - 1:17.0.12.0.6-0.1.ea
changelog:
  - generate_source_tarball.sh: Use tar exclude options for VCS files
  - generate_source_tarball.sh: Improve VCS exclusion


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.12.0.6-0.1.ea
changelog:
  - Delete fips-17u-d63771ea660.patch
  - Add fips-17u-e893be00150.patch
  - Update fipsver to e893be00150


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.12.0.6-0.1.ea
changelog:
  - Add upstream patch that removes illegal RLO Unicode characters (JDK-8332174)
  - Sync the copy of the portable specfile with the latest update


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.12.0.6-0.1.ea
changelog:
  - Add debuginfo section to rpminspect.yaml (OPENJDK-2904)
  - Add unicode section to rpminspect.yaml (OPENJDK-2904)


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.12.0.7-2
changelog:
  - Update to jdk-17.0.12+7 (GA)
  - Update .gitignore to ignore openjdk-17.0.12+7.tar.xz
  - Sync java-17-openjdk-portable.specfile
  - Set buildver to 7
  - Set portablerelease 1
  - Set is_ga to 1
  - Update sources to openjdk-17.0.12+7.tar.xz
  - Resolves: RHEL-46641
  - Resolves: RHEL-47019
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.12.0.7-3
changelog:
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9
  - Set rpmrelease to 3
  - Set portablesuffix to el9


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.1-0.2.ea
changelog:
  - Update to jdk-17.0.13+1 (EA)
  - Update .gitignore to ignore openjdk-17.0.13+1-ea.tar.xz
  - Synchronize java-17-openjdk-portable.specfile
  - Set updatever to 13
  - Set buildver to 1
  - Set is_ga to 0
  - Update sources to openjdk-17.0.13+1-ea.tar.xz
  - Related: RHEL-58785
  - Remove 0001-8332174-Remove-2-unpaired-RLO-Unicode-characters-in-.patch
  - Remove unicode section from rpminspect.yml, fixed instead by
    https://gitlab.cee.redhat.com/osci/rpminspect-data-redhat/-/merge_requests/180
    (OPENJDK-2904)
  - Related: RHEL-58785


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.9-0.1.ea
changelog:
  - Update to jdk-17.0.13+9 (EA)
  - Update .gitignore to ignore openjdk-17.0.13+9-ea.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9
  - Set buildver to 9
  - Set rpmrelease to 1
  - Set portablerelease to 1
  - Update sources to openjdk-17.0.13+9-ea.tar.xz
  - Related: RHEL-58785


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.10-0.1.ea
changelog:
  - Update to jdk-17.0.13+10 (EA)
  - Update .gitignore to ignore openjdk-17.0.13+10-ea.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9
  - Set buildver to 10
  - Update sources to openjdk-17.0.13+10-ea.tar.xz
  - Related: RHEL-58785


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.13.0.10-0.2.ea
changelog:
  - Vary portablesuffix depending on whether we are on RHEL ('el8') or CentOS ('el9')
  - Set rpmrelease to 2
  - Related: RHEL-58785


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.11-2
changelog:
  - Update to jdk-17.0.13+11 (GA)
  - Update .gitignore to ignore openjdk-17.0.13+11.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set buildver to 11
  - Set is_ga to 1
  - Update sources to openjdk-17.0.13+11.tar.xz
  - Resolves: RHEL-58785
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.13.0.11-4
changelog:
  - Set this to be the default/system JDK providing 'java', 'jre', 'java-devel', etc.
  - Set rpmrelease to 4
  - Resolves: RHEL-63034


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.1-0.2.ea
changelog:
  - Update to jdk-17.0.14+1 (EA)
  - Add to .gitignore openjdk-17.0.14+1-ea.tar.xz
  - Set updatever to 14
  - Set buildver to 1
  - Set rpmrelease to 2
  - Set is_ga to 0
  - Update sources to openjdk-17.0.14+1-ea.tar.xz
  - Double percent signs consistently throughout comments
  - Set bundled giflib provide version to 5.2.2
  - Set bundled libpng provide version to 1.6.43
  - Warn about bundled provide version bumps and backouts in openjdk_news.sh
  - Remove 0001-8332174-Remove-2-unpaired-RLO-Unicode-characters-in-.patch file
  - Revert: Use component in EPEL and Fedora bug URLs


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.7-2
changelog:
  - Update to jdk-17.0.14+7 (GA)
  - Add to .gitignore openjdk-17.0.14+7.tar.xz
  - Set buildver to 7
  - Set is_ga to 1
  - Update sources to openjdk-17.0.14+7.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Resolves: RHEL-73981
  - Resolves: RHEL-73559
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.15.0.6-2
changelog:
  - Update to jdk-17.0.15+6 (GA)
  - Add to .gitignore openjdk-17.0.15+6.tar.xz
  - Set updatever to 15
  - Set buildver to 6
  - Update sources to openjdk-17.0.15+6.tar.xz
  - Set bundled freetype provide version to 2.13.2
  - Set bundled harfbuzz provide version to 8.2.2
  - Require tzdata-java 2025a at runtime and for build
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Update FIPS patch
  - Resolves: RHEL-86627
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.16.0.8-2
changelog:
  - Update to jdk-17.0.16+8
  - Add to .gitignore openjdk-17.0.16+8.tar.xz
  - Set updatever to 16
  - Set buildver to 8
  - Set rpmrelease to 2
  - Update sources to openjdk-17.0.16+8.tar.xz
  - Resolves: RHEL-101788
  - Resolves: RHEL-101795
  - Resolves: RHEL-101796
  - Resolves: RHEL-101797
  - Resolves: RHEL-102283
  - Resolves: RHEL-102286
  - Resolves: RHEL-102285
  - Resolves: RHEL-102284
  - Require tzdata-java 2025b at runtime and for build
  - Set bundled freetype provide version to 2.13.3
  - Set bundled harfbuzz provide version to 10.4.0
  - Set bundled lcms2 provide version to 2.17.0
  - Set bundled libpng provide version to 1.6.47
  - Recommend pipewire
  - Related: RHEL-102667
  - Resolves: RHEL-102669
  - Resolves: RHEL-102670
  - Resolves: RHEL-102672
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.17.0.10-1
changelog:
  - Update to jdk-17.0.17+10 (GA)
  - Add to .gitignore openjdk-17.0.17+10.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set updatever to 17
  - Set buildver to 10
  - Set rpmrelease to 1, remove 'must start at 2' comment
  - Set bundled harfbuzz version to 11.2.0
  - Update sources to openjdk-17.0.17+10.tar.xz
  - Resolves: RHEL-119458
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.18.0.7-0.1.ea
changelog:
  - Update to jdk-17.0.18+7 (EA)
  - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz
  - Set updatever to 18
  - Set buildver to 7
  - Set is_ga to 0
  - Update sources to openjdk-17.0.18+7-ea.tar.xz
  - Set bundled libpng version to 1.6.51
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.18.0.8-1
changelog:
  - Update to jdk-17.0.18+8 (GA)
  - Add to .gitignore openjdk-17.0.18+8.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set buildver to 8
  - Set is_ga to 1
  - Update sources to openjdk-17.0.18+8.tar.xz
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Related: RHEL-103209


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.2-0.1.ea
changelog:
  - Update to jdk-21.0.8+2 (EA)
  - Update release notes to 21.0.8+2
  - Sync the copy of the portable specfile with the latest update
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Related: RHEL-101798
  - Resolves: RHEL-103209


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.8-0.1.ea
changelog:
  - Update to jdk-21.0.8+8 (EA)
  - Update release notes to 21.0.8+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-101798


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland
  - Resolves: RHEL-102677


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Update to jdk-21.0.8+9 (GA)
  - Update release notes to 21.0.8+9
  - Switch to GA mode
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-102289


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-1
changelog:
  - Update to jdk-21.0.9+10 (GA)
  - Update release notes to 21.0.9+10
  - Bump harfbuzz version to 11.2.0 following JDK-8355528
  - Add NEWS corrections from Thomas
  - Use double spacing consistently in notes for this release
  - Correct 11u release reference to corresponding 21u release as pointed out by Kieran
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118774
  - Resolves: RHEL-119466


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118774
  - Related: RHEL-119466


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.10.0.7-1
changelog:
  - Update to jdk-21.0.10+7 (GA)
  - Update release notes to 21.0.10+7
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-142859
  - Resolves: RHEL-139560
  - Resolves: RHEL-131592
  - Resolves: RHEL-131602
  - Resolves: RHEL-122121
  - Resolves: RHEL-142820
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.1.0.12-2
changelog:
  - Switch to using portable binaries built on RHEL 7
  - Sync the copy of the portable specfile with the RHEL 7 version
  - Related: RHEL-12997


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.1.0.12-3
changelog:
  - Include JDK-8311630 patch to implement Foreign Function & Memory preview API on s390x
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-16386


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.2.0.13-1
changelog:
  - Update to jdk-21.0.2+13 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Bump libpng version to 1.6.40 following JDK-8316030
  - Bump HarfBuzz version to 8.2.2 following JDK-8313643
  - Drop local JDK-8311630 patch which is now upstream
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-20998


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.3+1 (EA)
  - Update release notes to 21.0.3+1
  - Switch to EA mode
  - Require tzdata 2023d due to upstream inclusion of JDK-8322725
  - Bump FreeType version to 2.13.2 following JDK-8316028
  - Related: RHEL-30945


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.2.ea
changelog:
  - Install alt-java man page from the misc tarball as it is no longer in the JDK image
  - generate_source_tarball.sh: Update examples in header for clarity
  - generate_source_tarball.sh: Cleanup message issued when checkout already exists
  - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
  - generate_source_tarball.sh: Only add --depth=1 on non-local repositories
  - Move maintenance scripts to a scripts subdirectory
  - discover_trees.sh: Set compile-command and indentation instructions for Emacs
  - discover_trees.sh: shellcheck: Do not use -o (SC2166)
  - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: Add authorship
  - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
  - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
  - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: Set compile-command and indentation instructions for Emacs
  - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
  - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
  - generate_source_tarball.sh: Output values of new options WITH_TEMP and OPENJDK_LATEST
  - generate_source_tarball.sh: Double-quote DEPTH reference (SC2086)
  - generate_source_tarball.sh: Avoid empty DEPTH reference while still appeasing shellcheck
  - Related: RHEL-30945


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.3.0.1-0.2.ea
changelog:
  - Invoke xz in multi-threaded mode
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Append -ea designator when required
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Fix -ea logic to add dash
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
  - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
  - Use backward-compatible patch syntax
  - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
  - generate_source_tarball.sh: Fix whitespace
  - generate_source_tarball.sh: Remove trailing period in echo
  - generate_source_tarball.sh: Use long-style argument to grep
  - generate_source_tarball.sh: Add license
  - generate_source_tarball.sh: Add indentation instructions for Emacs
  - Related: RHEL-30945


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.7-0.1.ea
changelog:
  - Update to jdk-21.0.3+7 (EA)
  - Update release notes to 21.0.3+7
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - Drop JDK-8009550 which is now available upstream
  - Re-generate FIPS patch against 21.0.3+7 following backport of JDK-8325254
  - Resolves: RHEL-30945


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.9-1
changelog:
  - Update to jdk-21.0.3+9 (GA)
  - Update release notes to 21.0.3+9
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-32423


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.3+1 (EA)
  - Update release notes to 21.0.3+1
  - Switch to EA mode
  - Require tzdata 2023d due to upstream inclusion of JDK-8322725
  - Bump FreeType version to 2.13.2 following JDK-8316028
  - Related: RHEL-30946


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.2.ea
changelog:
  - Install alt-java man page from the misc tarball as it is no longer in the JDK image
  - generate_source_tarball.sh: Update examples in header for clarity
  - generate_source_tarball.sh: Cleanup message issued when checkout already exists
  - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
  - generate_source_tarball.sh: Only add --depth=1 on non-local repositories
  - Move maintenance scripts to a scripts subdirectory
  - discover_trees.sh: Set compile-command and indentation instructions for Emacs
  - discover_trees.sh: shellcheck: Do not use -o (SC2166)
  - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: Add authorship
  - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
  - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
  - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: Set compile-command and indentation instructions for Emacs
  - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
  - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
  - generate_source_tarball.sh: Output values of new options WITH_TEMP and OPENJDK_LATEST
  - generate_source_tarball.sh: Double-quote DEPTH reference (SC2086)
  - generate_source_tarball.sh: Avoid empty DEPTH reference while still appeasing shellcheck
  - Related: RHEL-30946


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.3.0.1-0.2.ea
changelog:
  - Invoke xz in multi-threaded mode
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Append -ea designator when required
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Fix -ea logic to add dash
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
  - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
  - Use backward-compatible patch syntax
  - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
  - generate_source_tarball.sh: Fix whitespace
  - generate_source_tarball.sh: Remove trailing period in echo
  - generate_source_tarball.sh: Use long-style argument to grep
  - generate_source_tarball.sh: Add license
  - generate_source_tarball.sh: Add indentation instructions for Emacs
  - Related: RHEL-30946


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.7-0.1.ea
changelog:
  - Update to jdk-21.0.3+7 (EA)
  - Update release notes to 21.0.3+7
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - Drop JDK-8009550 which is now available upstream
  - Re-generate FIPS patch against 21.0.3+7 following backport of JDK-8325254
  - Resolves: RHEL-30946


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.9-1
changelog:
  - Update to jdk-21.0.3+9 (GA)
  - Update release notes to 21.0.3+9
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-32424


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.4+1 (EA)
  - Update release notes to 21.0.4+1
  - Switch to EA mode
  - Bump LCMS 2 version to 2.16.0 following JDK-8321489
  - Add zlib build requirement or bundled version (1.3.1), depending on system_libs setting
  - Restore NEWS file so portable can be rebuilt
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-45356
  - Resolves: RHEL-46028


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.5-0.1.ea
changelog:
  - Update to jdk-21.0.4+5 (EA)
  - Update release notes to 21.0.4+5
  - Limit Java only tests to one architecture using jdk_test_arch
  - Actually require tzdata 2024a now it is available in the buildroot
  - Resolves: RHEL-45356
  - Resolves: RHEL-47399


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-1
changelog:
  - Update to jdk-21.0.4+7 (GA)
  - Update release notes to 21.0.4+7
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - Add missing section headers in NEWS
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **
  - Resolves: RHEL-47022


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.4+1 (EA)
  - Update release notes to 21.0.4+1
  - Switch to EA mode
  - Bump LCMS 2 version to 2.16.0 following JDK-8321489
  - Add zlib build requirement or bundled version (1.3.1), depending on system_libs setting
  - Restore NEWS file so portable can be rebuilt
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-45355
  - Resolves: RHEL-46029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.5-0.1.ea
changelog:
  - Update to jdk-21.0.4+5 (EA)
  - Update release notes to 21.0.4+5
  - Limit Java only tests to one architecture using jdk_test_arch
  - Actually require tzdata 2024a now it is available in the buildroot
  - Resolves: RHEL-45355
  - Resolves: RHEL-47395


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-1
changelog:
  - Update to jdk-21.0.4+7 (GA)
  - Update release notes to 21.0.4+7
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - Add missing section headers in NEWS
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **
  - Resolves: RHEL-47023


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-2
changelog:
  - Vary portablesuffix depending on whether we are on RHEL ('el8') or CentOS ('el9')
  - Handle debugedit being a separate package installed in /usr on RHEL/CentOS 10
  - Add build scripts to repository to ease remembering all CentOS & RHEL targets and options
  - Related: RHEL-58797


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.9-0.2.ea
changelog:
  - Update to jdk-21.0.5+9 (EA)
  - Update release notes to 21.0.5+9
  - Switch to EA mode
  - Bump giflib version to 5.2.2 following JDK-8328999
  - Bump libpng version to 1.6.43 following JDK-8329004
  - Sync with RHEL 7 portable build:
    - Use ExclusiveArch over ExcludeArch
    - pkgos definition needs to be early enough to be used in portablesuffix
  - Make build scripts executable
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-58797
  - Resolves: RHEL-17191


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-2
changelog:
  - Update to jdk-21.0.5+10 (GA)
  - Update release notes to 21.0.5+10
  - Switch to GA mode.
  - Revert JDK-8327501 & JDK-8328366 backport until more mature.
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
  - Resolves: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-3
changelog:
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
  - Related: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-2
changelog:
  - Update to jdk-21.0.5+11 (GA)
  - Update release notes to 21.0.5+11
  - Remove local JDK-8327501 & JDK-8328366 backport as this is now upstream.
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-3
changelog:
  - Transition to the devkit build by not defining pkgos
  - Exempt x86_64 from the static libs debuginfo test until portable uses an older DWARF version
  - Sync the copy of the portable specfile with the devkit version
  - Include the devkit specfile and patches
  - Document the devkit in README.md
  - Resolves: RHEL-74403


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-1
changelog:
  - Update to jdk-21.0.6+7 (GA)
  - Update release notes to 21.0.6+7
  - Sync the copy of the portable & devkit specfiles with the latest update
  - Include the latest devkit patches
  - Update README.md to list an easier way of disabling the devkit
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **
  - Resolves: RHEL-73562


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-1
changelog:
  - Update to jdk-21.0.7+6 (GA)
  - Update release notes to 21.0.7+6
  - Rebase FIPS support against 21.0.7+5
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86984
  - Resolves: RHEL-86621


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-2
changelog:
  - Add local version of JDK-8351500 for early interim release before 21.0.8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-90309


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.8+1 (EA)
  - Update release notes to 21.0.8+1
  - Bump freetype version to 2.13.3 following JDK-8348596
  - Bump harfbuzz version to 10.4.0 following JDK-8348597
  - Bump lcms2 version to 2.17.0 following JDK-8348110
  - Bump libpng version to 1.6.47 following JDK-8348598
  - Switch to EA mode
  - Drop JDK-8351500 local patch which is now available in 21.0.8+1 upstream
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-101798


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Create java-25-openjdk package based on java-21-openjdk
  - Update to jdk-25.0.1+8 (GA)
  - Update release notes with features of JDK 22, 23, 24 & 25
  - Mention finalisation JEP for features finalised in JDK 22, 23 & 24
  - Update release notes to 25.0.1+8
  - Update README file for java-25-openjdk
  - Make sure this is not the default/system JDK providing 'java', 'jre', 'java-devel' ,etc.
  - Remove 21u FIPS patch and disable use until we are ready for the 25 version
  - Adjust CLDR expectations in TestTranslations.java after JDK-8317979 started using tzdata values
  - Adjust TestTranslations.java to expect the same short name throughout for fr_FR and de_DE (bug?)
  - Remove references to libsystemconf.so and nss.fips.cfg from the 21u FIPS patch
  - Include static libraries in the vm_variant subdirectory after JDK-8307858 (libjvm.a)
  - Flip equals test in TestSecurityProperties.java to handle null values from Security.getProperty
  - Introduce crypto_policy_active to designate whether we should expect policy adherence in testing
  - Flip crypto_policy_active to false while the crypto policy & FIPS patch is not present
  - Handle new libsimdsort.so introduced on x86_64 only by JDK-8309130
  - Remove lible.so handling following its removal in JDK-8327476: "Upgrade JLine to 3.26.1"
  - Install jaxp-strict.properties.template added by JDK-8330542: "Template for Creating Strict JAXP Configuration File"
  - alt-java man page installation is now handled by the OpenJDK build
  - Adjust TestTranslations.java with updated German translations from CLDR 46 (JDK-8333582) (Mountain->Mountains)
  - Run javap with the disassembled code (-c) option now required for -l by JDK-8345145
  - Remove default.policy and java.policy following JDK-8338411: "Permanently Disable the Security Manager"
  - Make man page handling dependent on pandoc being available during the portable build
  - Handle new CDS archive variants (*_coh*) added by Compact Object Headers (JDK-8305895)
  - Add missing man page alternatives for jdeprscan, jfr, jhsdb, jimage, jlink & jmod and fix alphabetical ordering
  - Support jnativescan added by JDK-8317611: "Add a tool like jdeprscan to find usage of restricted methods"
  - Add recent native libraries to _privatelibs (libjsvml.so, libsimdsort.so, libsyslookup.so)
  - Support libsleef on AArch64 & RISC-V added by JDK-8329816, JDK-8320500 (RISC-V) & JDK-8312425 (AArch64)
  - Remove superfluous backslashes that cause two alternative commands to be combined
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-126022


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Add libnssadapter.so
  - Add FIPS crypto-policies configuration
  - Remove obsolete security.useSystemPropertiesFile setup
  - Update TestSecurityProperties.java test and calling convention
  - Resolves: RHEL-128414
  - Resolves: RHEL-128412


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS
  - Patch the nssadapter build to recognise LDFLAGS
  - Resolves: RHEL-131898


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-2
changelog:
  - Add java-25-openjdk-crypto-adapter subpackage
  - Update library setting in create-redhat-properties-files.bash
  - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties
  - Resolves: RHEL-132520
  - Resolves: RHEL-132523


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-2
changelog:
  - Incorporate new FIPS patch for 25u
  - Drop static libjvm.a following adjusted build target for portable build
  - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image
  - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-133743
  - Resolves: RHEL-133737
  - Related: RHEL-131898


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-1
changelog:
  - Update to jdk-25.0.2+10 (GA)
  - Update release notes to 25.0.2+10
  - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
  - Test for java.security's existence in create-redhat-properties-files.bash
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
  - Resolves: RHEL-139577
  - Resolves: RHEL-142856
  - Resolves: RHEL-142808


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2.git.d18d5863-1
changelog:
  - Update to the upstream v3.0.2 + tip of origin/master
    with fixes for an important issue:
    https://github.com/nhorman/rng-tools/pull/123
    https://github.com/smuellerDD/jitterentropy-library/issues/37
  - Add important upstream fixes for the one CPU case (bz 1974132)


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2-2.git.409828cf
changelog:
  - Update to the latest upstream commits upto 409828cf (bz 1973157)
  - Add clock_gettime() software time source
  - Add a code for choosing between software and hardware time sources
    https://github.com/smuellerDD/jitterentropy-library/pull/57
    https://bugzilla.redhat.com/show_bug.cgi?id=1974132


author: Vladis Dronov <vdronov@redhat.com> - 3.3.1-2
changelog:
  - Update to the upstream v3.3.1 @ 887c9871 (bz 2015560)
  - Fix a security issue found by a covscan in jitterentropy library


author: Björn Esser <besser82@fedoraproject.org> - 0.14-2
changelog:
  - Add a patch to backport fixes applied on upstream master branch
  - Re-enable RDRAND as json-c can detect broken implementations in CPUs now
  - Disable -Werror during build


author: Björn Esser <besser82@fedoraproject.org> - 0.14-6
changelog:
  - Build using Ninja instead of Make
  - Add a patch to move Doxyfile into doc subdir
  - Remove pre-built html documentation
  - Update Doxyfile during %prep
  - Add a patch to apply some optimizations to arraylist
  - Hardlink the files in %_pkgdocdir


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.4.1.el9_4]
changelog:
  - redhat/configs: enable pwr-mlxbf (Nirmala Dalvi) [RHEL-21119]
  - power: reset: pwr-mlxbf: support graceful reboot instead of emergency reset (Nirmala Dalvi) [RHEL-21119]
  - power: reset: use capital "OR" for multiple licenses in SPDX (Nirmala Dalvi) [RHEL-21119]
  - power: reset: pwr-mlxbf: change rst_pwr_hid and low_pwr_hid from global to local variables (Nirmala Dalvi) [RHEL-21119]
  - power: reset: pwr-mlxbf: add missing include (Nirmala Dalvi) [RHEL-21119]
  - power: reset: pwr-mlxbf: add BlueField SoC power control driver (Nirmala Dalvi) [RHEL-21119]
  - redhat/configs: enable pinctrl_mlxbf3 This driver is required to support the pinctrl device on the Bluefield-3 card. (Nirmala Dalvi) [RHEL-21115]
  - pinctrl: mlxbf3: Remove gpio_disable_free() (Nirmala Dalvi) [RHEL-21115]
  - pinctrl: use capital "OR" for multiple licenses in SPDX (Nirmala Dalvi) [RHEL-21115]
  - pinctrl: mlxbf3: set varaiable mlxbf3_pmx_funcs storage-class-specifier to static (Nirmala Dalvi) [RHEL-21115]
  - pinctrl: mlxbf3: Add pinctrl driver support (Nirmala Dalvi) [RHEL-21115]
  - redhat/configs: enable gpio_mlxbf3 (Nirmala Dalvi) [RHEL-21113]
  - gpio: mlxbf3: add an error code check in mlxbf3_gpio_probe (Nirmala Dalvi) [RHEL-21113]
  - gpio: mlxbf3: use capital "OR" for multiple licenses in SPDX (Nirmala Dalvi) [RHEL-21113]
  - gpio: mlxbf3: Support add_pin_ranges() (Nirmala Dalvi) [RHEL-21113]
  - gpio: mlxbf3: Add gpio driver support (Nirmala Dalvi) [RHEL-21113]
  - redhat/configs: enable mlxbf-pmc (Luiz Capitulino) [RHEL-21122]
  - platform/mellanox: mlxbf-pmc: Ignore unsupported performance blocks (Luiz Capitulino) [RHEL-21122]
  - platform/mellanox: mlxbf-pmc: mlxbf_pmc_event_list(): make size ptr optional (Luiz Capitulino) [RHEL-21122]
  - platform/mellanox: mlxbf-pmc: Cleanup signed/unsigned mix-up (Luiz Capitulino) [RHEL-21122]
  - platform/mellanox: mlxbf-pmc: Replace uintN_t with kernel-style types (Luiz Capitulino) [RHEL-21122]
  - platform/mellanox: mlxbf-pmc: Fix offset calculation for crspace events (Luiz Capitulino) [RHEL-21122]
  - platform/mellanox: Check devm_hwmon_device_register_with_groups() return value (Luiz Capitulino) [RHEL-21122]
  - platform/mellanox: Add null pointer checks for devm_kasprintf() (Luiz Capitulino) [RHEL-21122]
  - platform/mellanox: mlxbf-pmc: Add support for BlueField-3 (Luiz Capitulino) [RHEL-21122]
  - platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events (Luiz Capitulino) [RHEL-21122]
  - platform/mellanox: mlxbf-pmc: Fix potential buffer overflows (Luiz Capitulino) [RHEL-21122]
  - platform/mellanox: mlxbf-pmc: fix sscanf() error checking (Luiz Capitulino) [RHEL-21122]
  - platform/mellanox: mlxbf-pmc: fix kernel-doc notation (Luiz Capitulino) [RHEL-21122]
  - SUNRPC: Remove stale comments (Jeffrey Layton) [RHEL-22860]
  - NFSD: Remove BUG_ON in nfsd4_process_cb_update() (Jeffrey Layton) [RHEL-22860]
  - NFSD: Replace comment with lockdep assertion (Jeffrey Layton) [RHEL-22860]
  - NFSD: Remove unused @reason argument (Jeffrey Layton) [RHEL-22860]
  - NFSD: Add callback operation lifetime trace points (Jeffrey Layton) [RHEL-22860]
  - NFSD: Rename nfsd_cb_state trace point (Jeffrey Layton) [RHEL-22860]
  - NFSD: Replace dprintks in nfsd4_cb_sequence_done() (Jeffrey Layton) [RHEL-22860]
  - NFSD: Add nfsd_seq4_status trace event (Jeffrey Layton) [RHEL-22860]
  - NFSD: Retransmit callbacks after client reconnects (Jeffrey Layton) [RHEL-22860]
  - NFSD: Reschedule CB operations when backchannel rpc_clnt is shut down (Jeffrey Layton) [RHEL-22860]
  - NFSD: Convert the callback workqueue to use delayed_work (Jeffrey Layton) [RHEL-22860]
  - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Jeffrey Layton) [RHEL-22860]
  - NFSv4, NFSD: move enum nfs_cb_opnum4 to include/linux/nfs4.h (Jeffrey Layton) [RHEL-22860]
  - tls: fix use-after-free on failed backlog decryption (Sabrina Dubroca) [RHEL-26410 RHEL-26415] {CVE-2024-26584}
  - tls: separate no-async decryption request handling from async (Sabrina Dubroca) [RHEL-26410 RHEL-26415] {CVE-2024-26584}
  - tls: decrement decrypt_pending if no async completion will be called (Sabrina Dubroca) [RHEL-26416 RHEL-26421] {CVE-2024-26583}
  - net: tls: fix use-after-free with partial reads and async decrypt (Sabrina Dubroca) [RHEL-26398 RHEL-26401] {CVE-2024-26582}
  - net: tls: handle backlogging of crypto requests (Sabrina Dubroca) [RHEL-26410 RHEL-26415] {CVE-2024-26584}
  - tls: fix race between tx work scheduling and socket close (Sabrina Dubroca) [RHEL-26361 RHEL-26363] {CVE-2024-26585}
  - tls: fix race between async notify and socket close (Sabrina Dubroca) [RHEL-26416 RHEL-26421] {CVE-2024-26583}
  - net: tls: factor out tls_*crypt_async_wait() (Sabrina Dubroca) [RHEL-26416 RHEL-26421] {CVE-2024-26583}
  - i2c: mlxbf: Use devm_platform_get_and_ioremap_resource() (Luiz Capitulino) [RHEL-21116]
  - I2C: Explicitly include correct DT includes (Luiz Capitulino) [RHEL-21116]
  - i2c: mlxbf: Use dev_err_probe in probe function (Luiz Capitulino) [RHEL-21116]
  - i2c: Convert to platform remove callback returning void (Luiz Capitulino) [RHEL-21116]
  - i2c: mlxbf: depend on ACPI; clean away ifdeffage (Luiz Capitulino) [RHEL-21116]
  - i2c: mlxbf: remove device tree support (Luiz Capitulino) [RHEL-21116]
  - i2c: mlxbf: support BlueField-3 SoC (Luiz Capitulino) [RHEL-21116]
  - i2c: mlxbf: add multi slave functionality (Luiz Capitulino) [RHEL-21116]
  - i2c: mlxbf: support lock mechanism (Luiz Capitulino) [RHEL-21116]
  - i2c: mlxbf: Fix frequency calculation (Luiz Capitulino) [RHEL-21116]
  - i2c: mlxbf: Refactor _UID handling to use acpi_dev_uid_to_integer() (Luiz Capitulino) [RHEL-21116]
  - i2c: mlxbf: remove IRQF_ONESHOT (Luiz Capitulino) [RHEL-21116]
  - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Luiz Capitulino) [RHEL-21116]
  - i2c: mlxbf: incorrect base address passed during io write (Luiz Capitulino) [RHEL-21116]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.5.1.el9_4]
changelog:
  - i2c: i801: Fix block process call transactions (David Arcari) [RHEL-26479 RHEL-26481] {CVE-2024-26593}
  - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-23428 RHEL-23429] {CVE-2024-26602}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.6.1.el9_4]
changelog:
  - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Daniel Vacek) [RHEL-26063]
  - ASoC: Intel: soc-acpi: rt713+rt1316, no sdw-dmic config (Jaroslav Kysela) [RHEL-26456]
  - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Maxim Levitsky) [RHEL-26435]
  - hv_netvsc: Fix race condition between netvsc_probe and netvsc_remove (Maxim Levitsky) [RHEL-26435]
  - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ivan Vecera) [RHEL-26463 RHEL-26465] {CVE-2024-26586}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.7.1.el9_4]
changelog:
  - NFS: Read unlock folio on nfs_page_create_from_folio() error (Benjamin Coddington) [RHEL-18029]
  - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-15701]
  - i40e: Fix firmware version comparison function (Ivan Vecera) [RHEL-15701]
  - i40e: disable NAPI right after disabling irqs when handling xsk_pool (Ivan Vecera) [RHEL-15701]
  - i40e: take into account XDP Tx queues when stopping rings (Ivan Vecera) [RHEL-15701]
  - i40e: avoid double calling i40e_pf_rxq_wait() (Ivan Vecera) [RHEL-15701]
  - i40e: Fix wrong mask used during DCB config (Ivan Vecera) [RHEL-15701]
  - i40e: Fix waiting for queues of all VSIs to be disabled (Ivan Vecera) [RHEL-15701]
  - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-15701]
  - net: intel: fix old compiler regressions (Ivan Vecera) [RHEL-15701]
  - i40e: update xdp_rxq_info::frag_size for ZC enabled Rx queue (Ivan Vecera) [RHEL-15701]
  - i40e: set xdp_rxq_info::frag_size (Ivan Vecera) [RHEL-15701]
  - intel: xsk: initialize skb_frag_t::bv_offset in ZC drivers (Ivan Vecera) [RHEL-15701]
  - i40e: handle multi-buffer packets that are shrunk by xdp prog (Ivan Vecera) [RHEL-15701]
  - i40e: Include types.h to some headers (Ivan Vecera) [RHEL-15701]
  - i40e: Restore VF MSI-X state during PCI reset (Ivan Vecera) [RHEL-15701]
  - i40e: fix use-after-free in i40e_aqc_add_filters() (Ivan Vecera) [RHEL-15701]
  - i40e: Avoid unnecessary use of comma operator (Ivan Vecera) [RHEL-15701]
  - i40e: Fix VF disable behavior to block all traffic (Ivan Vecera) [RHEL-15701]
  - i40e: Fix filter input checks to prevent config with invalid values (Ivan Vecera) [RHEL-15701]
  - i40e: field get conversion (Ivan Vecera) [RHEL-15701]
  - i40e: field prep conversion (Ivan Vecera) [RHEL-15701]
  - intel: add bit macro includes where needed (Ivan Vecera) [RHEL-15701]
  - i40e: remove fake support of rx-frames-irq (Ivan Vecera) [RHEL-15701]
  - i40e: Fix ST code value for Clause 45 (Ivan Vecera) [RHEL-15701]
  - i40e: Fix unexpected MFS warning message (Ivan Vecera) [RHEL-15701]
  - i40e: Remove queue tracking fields from i40e_adminq_ring (Ivan Vecera) [RHEL-15701]
  - i40e: Remove AQ register definitions for VF types (Ivan Vecera) [RHEL-15701]
  - i40e: Delete unused and useless i40e_pf fields (Ivan Vecera) [RHEL-15701]
  - i40e: Fix adding unsupported cloud filters (Ivan Vecera) [RHEL-15701]
  - i40e: Delete unused i40e_mac_info fields (Ivan Vecera) [RHEL-15701]
  - i40e: Move inline helpers to i40e_prototype.h (Ivan Vecera) [RHEL-15701]
  - i40e: Remove VF MAC types (Ivan Vecera) [RHEL-15701]
  - i40e: Use helpers to check running FW and AQ API versions (Ivan Vecera) [RHEL-15701]
  - i40e: Add other helpers to check version of running firmware and AQ API (Ivan Vecera) [RHEL-15701]
  - i40e: Move i40e_is_aq_api_ver_ge helper (Ivan Vecera) [RHEL-15701]
  - i40e: Initialize hardware capabilities at single place (Ivan Vecera) [RHEL-15701]
  - i40e: Consolidate hardware capabilities (Ivan Vecera) [RHEL-15701]
  - i40e: Use DECLARE_BITMAP for flags field in i40e_hw (Ivan Vecera) [RHEL-15701]
  - i40e: Use DECLARE_BITMAP for flags and hw_features fields in i40e_pf (Ivan Vecera) [RHEL-15701]
  - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-15701]
  - i40e: Remove unused flags (Ivan Vecera) [RHEL-15701]
  - i40e: add an error code check in i40e_vsi_setup (Ivan Vecera) [RHEL-15701]
  - i40e: increase max descriptors for XL710 (Ivan Vecera) [RHEL-15701]
  - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (Ivan Vecera) [RHEL-15701]
  - i40e: sync next_to_clean and next_to_process for programming status desc (Ivan Vecera) [RHEL-15701]
  - i40e: Fix I40E_FLAG_VF_VLAN_PRUNING value (Ivan Vecera) [RHEL-15701]
  - i40e: xsk: remove count_mask (Ivan Vecera) [RHEL-15701]
  - i40e: use scnprintf over strncpy+strncat (Ivan Vecera) [RHEL-15701]
  - intel: fix format warnings (Ivan Vecera) [RHEL-15701]
  - i40e: Refactor and rename i40e_read_pba_string() (Ivan Vecera) [RHEL-15701]
  - i40e: Split and refactor i40e_nvm_version_str() (Ivan Vecera) [RHEL-15701]
  - i40e: prevent crash on probe if hw registers have invalid values (Ivan Vecera) [RHEL-15701]
  - i40e: Move DDP specific macros and structures to i40e_ddp.c (Ivan Vecera) [RHEL-15701]
  - i40e: Remove circular header dependencies and fix headers (Ivan Vecera) [RHEL-15701]
  - i40e: Split i40e_osdep.h (Ivan Vecera) [RHEL-15701]
  - i40e: Move memory allocation structures to i40e_alloc.h (Ivan Vecera) [RHEL-15701]
  - i40e: Simplify memory allocation functions (Ivan Vecera) [RHEL-15701]
  - i40e: Refactor I40E_MDIO_CLAUSE* macros (Ivan Vecera) [RHEL-15701]
  - i40e: Move I40E_MASK macro to i40e_register.h (Ivan Vecera) [RHEL-15701]
  - i40e: Remove back pointer from i40e_hw structure (Ivan Vecera) [RHEL-15701]
  - i40e: Add rx_missed_errors for buffer exhaustion (Ivan Vecera) [RHEL-15701]
  - net: Tree wide: Replace xdp_do_flush_map() with xdp_do_flush(). (Ivan Vecera) [RHEL-15701]
  - i40e: fix potential memory leaks in i40e_remove() (Ivan Vecera) [RHEL-15701]
  - i40e: fix potential NULL pointer dereferencing of pf->vf i40e_sync_vsi_filters() (Ivan Vecera) [RHEL-15701]
  - i40e: fix misleading debug logs (Ivan Vecera) [RHEL-15701]
  - i40e: Replace one-element array with flex-array member in struct i40e_profile_aq_section (Ivan Vecera) [RHEL-15701]
  - i40e: Replace one-element array with flex-array member in struct i40e_section_table (Ivan Vecera) [RHEL-15701]
  - i40e: Replace one-element array with flex-array member in struct i40e_profile_segment (Ivan Vecera) [RHEL-15701]
  - i40e: Replace one-element array with flex-array member in struct i40e_package_header (Ivan Vecera) [RHEL-15701]
  - i40e: Remove unused function declarations (Ivan Vecera) [RHEL-15701]
  - i40e: remove i40e_status (Ivan Vecera) [RHEL-15701]
  - i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (Ivan Vecera) [RHEL-15701]
  - i40e: xsk: add TX multi-buffer support (Ivan Vecera) [RHEL-15701]
  - i40e: xsk: add RX multi-buffer support (Ivan Vecera) [RHEL-15701]
  - i40e, xsk: fix comment typo (Ivan Vecera) [RHEL-15701]
  - i40e: remove unnecessary check for old MAC == new MAC (Ivan Vecera) [RHEL-15701]
  - i40e: fix i40e_setup_misc_vector() error handling (Ivan Vecera) [RHEL-15701]
  - i40e: fix accessing vsi->active_filters without holding lock (Ivan Vecera) [RHEL-15701]
  - i40e: Add support for VF to specify its primary MAC address (Ivan Vecera) [RHEL-15701]
  - i40e: fix registers dump after run ethtool adapter self test (Ivan Vecera) [RHEL-15701]
  - i40e: fix flow director packet filter programming (Ivan Vecera) [RHEL-15701]
  - i40e: add support for XDP multi-buffer Rx (Ivan Vecera) [RHEL-15701]
  - i40e: add xdp_buff to i40e_ring struct (Ivan Vecera) [RHEL-15701]
  - i40e: introduce next_to_process to i40e_ring (Ivan Vecera) [RHEL-15701]
  - i40e: use frame_sz instead of recalculating truesize for building skb (Ivan Vecera) [RHEL-15701]
  - i40e: Change size to truesize when using i40e_rx_buffer_flip() (Ivan Vecera) [RHEL-15701]
  - i40e: add pre-xdp page_count in rx_buffer (Ivan Vecera) [RHEL-15701]
  - i40e: change Rx buffer size for legacy-rx to support XDP multi-buffer (Ivan Vecera) [RHEL-15701]
  - i40e: consolidate maximum frame size calculation for vsi (Ivan Vecera) [RHEL-15701]
  - i40e: check vsi type before setting xdp_features flag (Ivan Vecera) [RHEL-15701]
  - drivers: net: turn on XDP features (Ivan Vecera) [RHEL-15701]
  - i40e: add xdp frags support to ndo_xdp_xmit (Ivan Vecera) [RHEL-15701]
  - dmaengine: idxd: Ensure safe user copy of completion record (Jerry Snitselaar) [RHEL-28511]
  - dmaengine: idxd: Remove shadow Event Log head stored in idxd (Jerry Snitselaar) [RHEL-28511]
  - dmaengine: idxd: Move dma_free_coherent() out of spinlocked context (Jerry Snitselaar) [RHEL-28511]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.8.1.el9_4]
changelog:
  - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29679]
  - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29679]
  - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-7976]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.10.1.el9_4]
changelog:
  - NFS: remove sync_mode test from nfs_writepage_locked() (Jeffrey Layton) [RHEL-28630]
  - nfs: Remove writepage (Jeffrey Layton) [RHEL-28630]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.12.1.el9_4]
changelog:
  - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28877 RHEL-28878] {CVE-2023-52489}
  - Revert "[redhat] kabi: add symbol __scsi_execute to stablelist" (Ewan D. Milne) [RHEL-30725]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.14.1.el9_4]
changelog:
  - crypto: dh - implement FIPS PCT (Vladis Dronov) [RHEL-27009 RHEL-25845]
  - crypto: tcrypt - add ffdhe2048(dh) test (Vladis Dronov) [RHEL-27009 RHEL-25845]
  - crypto: dh - Make public key test FIPS-only (Vladis Dronov) [RHEL-27009 RHEL-25845]
  - printk: allow disabling printk per-console device kthreads at boot (Luis Claudio R. Goncalves) [RHEL-30678 RHEL-17709]
  - mm, vmscan: remove ISOLATE_UNMAPPED (Nico Pache) [RHEL-29235 RHEL-28667]
  - trace-vmscan-postprocess: sync with tracepoints updates (Nico Pache) [RHEL-29235 RHEL-28667]
  - tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate (Nico Pache) [RHEL-29235 RHEL-28667]
  - mm/mglru: skip special VMAs in lru_gen_look_around() (Nico Pache) [RHEL-29235 RHEL-28667]
  - mm/mglru: reclaim offlined memcgs harder (Nico Pache) [RHEL-29235 RHEL-28667]
  - mm/mglru: try to stop at high watermarks (Nico Pache) [RHEL-29235 RHEL-28667]
  - mm/mglru: fix underprotected page cache (Nico Pache) [RHEL-29235 RHEL-28667]
  - mm: multi-gen LRU: reuse some legacy trace events (Nico Pache) [RHEL-29235 RHEL-28667]
  - mm: multi-gen LRU: improve design doc (Nico Pache) [RHEL-29235 RHEL-28667]
  - mm: multi-gen LRU: clean up sysfs code (Nico Pache) [RHEL-29235 RHEL-28667]
  - cpu/hotplug: Do not bail-out in DYING/STARTING sections (David Arcari) [RHEL-29673 RHEL-19514]
  - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-29079 RHEL-17113] {CVE-2023-6240}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.15.1.el9_4]
changelog:
  - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-30110 RHEL-19000]
  - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-30110 RHEL-19000]
  - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-30110 RHEL-19000]
  - crypto: iaa - mark tech preview (Vladis Dronov) [RHEL-32242 RHEL-29685]
  - crypto: iaa - Fix nr_cpus < nr_iaa case (Vladis Dronov) [RHEL-32242 RHEL-29685]
  - crypto: iaa - fix the missing CRYPTO_ALG_ASYNC in cra_flags (Vladis Dronov) [RHEL-32242 RHEL-29685]
  - crypto: iaa - Fix comp/decomp delay statistics (Vladis Dronov) [RHEL-32242 RHEL-29685]
  - crypto: iaa - Fix async_disable descriptor leak (Vladis Dronov) [RHEL-32242 RHEL-29685]
  - crypto: iaa - Remove unnecessary debugfs_create_dir() error check in iaa_crypto_debugfs_init() (Vladis Dronov) [RHEL-32242 RHEL-29685]
  - crypto: iaa - Remove header table code (Vladis Dronov) [RHEL-32242 RHEL-29685]
  - cgroup: cgroup-v1: do not exclude cgrp_dfl_root (Laurent Vivier) [RHEL-32716 RHEL-31381]
  - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30030 RHEL-30031] {CVE-2024-25743 CVE-2024-25742}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.16.1.el9_4]
changelog:
  - memory: tegra: Skip SID programming if SID registers aren't set (Robert Foss) [RHEL-32675 RHEL-23656]
  - memory: tegra: Add SID override programming for MC clients (Robert Foss) [RHEL-32675 RHEL-23656]
  - iommu: Don't reserve 0-length IOVA region (Robert Foss) [RHEL-32675 RHEL-23656]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.17.1.el9_4]
changelog:
  - ceph: switch to use cap_delay_lock for the unlink delay list (Jay Shin) [RHEL-33003 RHEL-32997]
  - ceph: remove useless session parameter for check_caps() (Xiubo Li) [RHEL-33003 RHEL-19813]
  - ceph: flush the dirty caps immediatelly when quota is approaching (Xiubo Li) [RHEL-33003 RHEL-19813]
  - vhost: Add smp_rmb() in vhost_enable_notify() (Gavin Shan) [RHEL-31839 RHEL-26104]
  - vhost: Add smp_rmb() in vhost_vq_avail_empty() (Gavin Shan) [RHEL-31839 RHEL-26104]
  - iommu/vt-d: Support enforce_cache_coherency only for empty domains (Jerry Snitselaar) [RHEL-32793 RHEL-31083]
  - iommu/vt-d: Add MTL to quirk list to skip TE disabling (Jerry Snitselaar) [RHEL-32793 RHEL-31083]
  - iommu/vt-d: Make context clearing consistent with context mapping (Jerry Snitselaar) [RHEL-32793 RHEL-31083]
  - iommu/vt-d: Disable PCI ATS in legacy passthrough mode (Jerry Snitselaar) [RHEL-32793 RHEL-31083]
  - iommu/vt-d: Omit devTLB invalidation requests when TES=0 (Jerry Snitselaar) [RHEL-32793 RHEL-31083]
  - PCI/MSI: Prevent MSI hardware interrupt number truncation (Myron Stowe) [RHEL-33656 RHEL-21453]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.18.1.el9_4]
changelog:
  - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-32971 RHEL-30082] {CVE-2024-26642}
  - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-33070 RHEL-30078] {CVE-2024-26643}
  - netfilter: nft_ct: fix l3num expectations with inet pseudo family (Phil Sutter) [RHEL-32963 RHEL-31345] {CVE-2024-26673}
  - netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations (Phil Sutter) [RHEL-32963 RHEL-31345] {CVE-2024-26673}
  - arm64: tlb: Fix TLBI RANGE operand (Shaoqin Huang) [RHEL-33412 RHEL-26259]
  - arm64/mm: Modify range-based tlbi to decrement scale (Shaoqin Huang) [RHEL-33412 RHEL-26259]
  - rh_messages.h: mark mlx5 on Bluefield-3 as unmaintained (Scott Weaver) [RHEL-35878 RHEL-33061]
  - net: ip_tunnel: prevent perpetual headroom growth (Guillaume Nault) [RHEL-33934 RHEL-31816] {CVE-2024-26804}
  - gitlab-ci: use zstream builder container image (Michael Hofmann)
  - selftests: net: gro fwd: update vxlan GRO test expectations (Antoine Tenart) [RHEL-30910 RHEL-19729]
  - udp: prevent local UDP tunnel packets from being GROed (Antoine Tenart) [RHEL-30910 RHEL-19729]
  - udp: do not transition UDP GRO fraglist partial checksums to unnecessary (Antoine Tenart) [RHEL-30910 RHEL-19729]
  - gro: fix ownership transfer (Antoine Tenart) [RHEL-30910 RHEL-19729]
  - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Antoine Tenart) [RHEL-30910 RHEL-19729]
  - bpf, tcx: Get rid of tcx_link_const (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Add additional mprog query test coverage (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Make seen_tc* variable tests more robust (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Test query on empty mprog and pass revision into attach (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Adapt assert_mprog_count to always expect 0 count (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Test bpf_mprog query API via libbpf and raw syscall (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftest/bpf: Add various selftests for program limits (Felix Maurer) [RHEL-33062 RHEL-28590]
  - bpf: Refuse unused attributes in bpf_prog_{attach,detach} (Felix Maurer) [RHEL-33062 RHEL-28590]
  - bpf: Handle bpf_mprog_query with NULL entry (Felix Maurer) [RHEL-33062 RHEL-28590]
  - net: Fix skb consume leak in sch_handle_egress (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Add various more tcx test cases (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Add test for detachment on empty mprog entry (Felix Maurer) [RHEL-33062 RHEL-28590]
  - tcx: Fix splat during dev unregister (Felix Maurer) [RHEL-33062 RHEL-28590]
  - tcx: Fix splat in ingress_destroy upon tcx_entry_free (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Add mprog API tests for BPF tcx links (Felix Maurer) [RHEL-33062 RHEL-28590]
  - selftests/bpf: Add mprog API tests for BPF tcx opts (Felix Maurer) [RHEL-33062 RHEL-28590]
  - bpf: Add fd-based tcx multi-prog infra with link support (Felix Maurer) [RHEL-33062 RHEL-28590]
  - bpftool: Implement link show support for tcx (Artem Savkov) [RHEL-33062 RHEL-23643]
  - bpftool: Extend net dump with tcx progs (Artem Savkov) [RHEL-33062 RHEL-23643]
  - bpf: fix precision backtracking instruction iteration (Jay Shin) [RHEL-35230 RHEL-23643]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.19.1.el9_4]
changelog:
  - x86/mce: Cleanup mce_usable_address() (Prarit Bhargava) [RHEL-33810 RHEL-25415]
  - x86/mce: Define amd_mce_usable_address() (Prarit Bhargava) [RHEL-33810 RHEL-25415]
  - x86/MCE/AMD: Split amd_mce_is_memory_error() (Prarit Bhargava) [RHEL-33810 RHEL-25415]
  - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35302 RHEL-35078] {CVE-2024-26993}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.20.1.el9_4]
changelog:
  - ipv6: sr: fix possible use-after-free and null-ptr-deref (Hangbin Liu) [RHEL-33968 RHEL-31732] {CVE-2024-26735}
  - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-36145 RHEL-29035]
  - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-36145 RHEL-29035]
  - PCI: Fix pci_rh_check_status() call semantics (Luiz Capitulino) [RHEL-36541 RHEL-35032]
  - cxgb4: Properly lock TX queue for the selftest. (John B. Wyatt IV) [RHEL-36530 RHEL-31990 RHEL-9354]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.21.1.el9_4]
changelog:
  - drm/i915/display: Increase number of fast wake precharge pulses (Mika Penttilä) [RHEL-36534 RHEL-20439]
  - drm/i915/psr: Improve fast and IO wake lines calculation (Mika Penttilä) [RHEL-36534 RHEL-20439]
  - drm/i915/display: Make intel_dp_aux_fw_sync_len available for PSR code (Mika Penttilä) [RHEL-36534 RHEL-20439]
  - smb: client: improve DFS mount check (Jay Shin) [RHEL-36743 RHEL-28739]
  - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-37622 RHEL-9872]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.22.1.el9_4]
changelog:
  - dpll: fix dpll_pin_on_pin_register() for multiple parent pins (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: indent DPLL option type by a tab (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: fix dpll_xa_ref_*_del() for multiple registrations (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: spec: use proper enum for pin capabilities attribute (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: move all dpll<>netdev helpers to dpll code (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: fix build failure due to rcu_dereference_check() on unknown type (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: rely on rcu for netdev_dpll_pin() (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: fix possible deadlock during netlink dump operation (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: check that pin is registered in __dpll_pin_unregister() (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: move xa_erase() call in to match dpll_pin_alloc() error path order (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: expose fractional frequency offset value to user (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: allocate pin ids in cycle (Petr Oros) [RHEL-36572 RHEL-32098]
  - dpll: remove leftover mode_supported() op and use mode_get() instead (Petr Oros) [RHEL-36572 RHEL-32098]
  - Documentation: dpll: wrap DPLL_CMD_PIN_GET output in a code block (Petr Oros) [RHEL-36572 RHEL-32098]
  - Documentation: dpll: Fix code blocks (Petr Oros) [RHEL-36572 RHEL-32098]
  - MAINTAINERS: adjust header file entry in DPLL SUBSYSTEM (Petr Oros) [RHEL-36572 RHEL-32098]
  - netdev: Remove unneeded semicolon (Petr Oros) [RHEL-36572 RHEL-32098]
  - netlink: add variable-length / auto integers (Petr Oros) [RHEL-36572 RHEL-30145]
  - netlink: allow be16 and be32 types in all uint policy checks (Ivan Vecera) [RHEL-36572 RHEL-30656]
  - net: netlink: recommend policy range validation (Ivan Vecera) [RHEL-36572 RHEL-30344]
  - netlink: add nla be16/32 types to minlen array (Ivan Vecera) [RHEL-36572 RHEL-30344]
  - netlink: introduce bigendian integer types (Michal Schmidt) [RHEL-36572 RHEL-30344]
  - netlink: introduce NLA_POLICY_MAX_BE (Ivan Vecera) [RHEL-36572 RHEL-30344]
  - ice: use irq_update_affinity_hint() (Michal Schmidt) [RHEL-38512 RHEL-35293]
  - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-9296 RHEL-19514]
  - x86/smpboot: Make TSC synchronization function call based (David Arcari) [RHEL-9296 RHEL-19514]
  - Bluetooth: hci_core: Remove le_restart_scan work (David Marlin) [RHEL-38524 RHEL-30099]
  - hwmon: (coretemp) Enlarge per package core count limit (David Arcari) [RHEL-35447 RHEL-22705]
  - hwmon: (coretemp) Fix bogus core_id to attr name mapping (David Arcari) [RHEL-35447 RHEL-22705]
  - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-35447 RHEL-22705]
  - perf: arm_cspmu: Reject events meant for other PMUs (Michael Petlan) [RHEL-34991 RHEL-25824]
  - smb: client: refresh referral without acquiring refpath_lock (Jay Shin) [RHEL-38904 RHEL-7986]
  - smb: client: guarantee refcounted children from parent session (Jay Shin) [RHEL-38904 RHEL-7986]
  - smb3: show beginning time for per share stats (Jay Shin) [RHEL-38904 RHEL-31245]
  - smb: client: fix mount when dns_resolver key is not available (Jay Shin) [RHEL-38904 RHEL-31245]
  - smb: client: get rid of dfs code dep in namespace.c (Jay Shin) [RHEL-38904 RHEL-31245]
  - smb: client: get rid of dfs naming in automount code (Jay Shin) [RHEL-38904 RHEL-31245]
  - smb: client: rename cifs_dfs_ref.c to namespace.c (Jay Shin) [RHEL-38904 RHEL-31245]
  - smb: client: ensure to try all targets when finding nested links (Jay Shin) [RHEL-38904 RHEL-31245]
  - smb: client: introduce DFS_CACHE_TGT_LIST() (Jay Shin) [RHEL-38904 RHEL-31245]
  - smb: client: remove redundant pointer 'server' (Jay Shin) [RHEL-38904 RHEL-28739]
  - smb: client: fix parsing of source mount option (Jay Shin) [RHEL-38904 RHEL-28739]
  - integrity: eliminate unnecessary "Problem loading X.509 certificate" msg (Coiby Xu) [RHEL-39933 RHEL-12346]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.23.1.el9_4]
changelog:
  - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-34050 RHEL-30492] {CVE-2023-52626}
  - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-38595 RHEL-36684]
  - net/sched: flower: Add lock protection when remove filter handle (Petr Oros) [RHEL-35672 RHEL-33379]
  - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-33913 RHEL-31828] {CVE-2024-26801}
  - net: hns3: do not allow call hns3_nic_net_open repeatedly (Jose Ignacio Tornos Martinez) [RHEL-38933 RHEL-37707] {CVE-2021-47400}
  - tmpfs: fix Documentation of noswap and huge mount options (Nico Pache) [RHEL-38252 RHEL-31975]
  - shmem: add support to ignore swap (Chris von Recklinghausen) [RHEL-38252 RHEL-31975]
  - shmem: update documentation (Chris von Recklinghausen) [RHEL-38252 RHEL-31975]
  - shmem: skip page split if we're not reclaiming (Chris von Recklinghausen) [RHEL-38252 RHEL-31975]
  - shmem: move reclaim check early on writepages() (Chris von Recklinghausen) [RHEL-38252 RHEL-31975]
  - shmem: set shmem_writepage() variables early (Chris von Recklinghausen) [RHEL-38252 RHEL-31975]
  - shmem: remove check for folio lock on writepage() (Chris von Recklinghausen) [RHEL-38252 RHEL-31975]
  - ice: Add automatic VF reset on Tx MDD events (Petr Oros) [RHEL-39083 RHEL-36317]
  - net/ipv6: SKB symmetric hash should incorporate transport ports (Ivan Vecera) [RHEL-37641 RHEL-36218]
  - ipv6: sr: fix memleak in seg6_hmac_init_algo (Hangbin Liu) [RHEL-37669 RHEL-37511]
  - ipv6: sr: fix missing sk_buff release in seg6_input_core (Hangbin Liu) [RHEL-37669 RHEL-37511]
  - ipv6: sr: fix invalid unregister error path (Hangbin Liu) [RHEL-37669 RHEL-37511]
  - ipv6: sr: fix incorrect unregister order (Hangbin Liu) [RHEL-37669 RHEL-37511]
  - ipv6: sr: add missing seg6_local_exit (Hangbin Liu) [RHEL-37669 RHEL-37511]
  - block: fix q->blkg_list corruption during disk rebind (Ming Lei) [RHEL-36687 RHEL-33577]
  - ice: fix uninitialized dplls mutex usage (Petr Oros) [RHEL-36716 RHEL-36283]
  - ice: fix pin phase adjust updates on PF reset (Petr Oros) [RHEL-36716 RHEL-36283]
  - ice: fix dpll periodic work data updates on PF reset (Petr Oros) [RHEL-36716 RHEL-36283]
  - ice: fix dpll and dpll_pin data access on PF reset (Petr Oros) [RHEL-36716 RHEL-36283]
  - ice: fix dpll input pin phase_adjust value updates (Petr Oros) [RHEL-36716 RHEL-36283]
  - ice: fix connection state of DPLL and out pin (Petr Oros) [RHEL-36716 RHEL-36283]
  - redhat: remove the merge subtrees script (Derek Barbosa)
  - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa)
  - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa)
  - net/mlx5: Properly link new fs rules into the tree (Kamal Heib) [RHEL-38954 RHEL-37422] {CVE-2024-35960}
  - smb: client: fix UAF in smb2_reconnect_server() (Jay Shin) [RHEL-28943 RHEL-40177 RHEL-37273 RHEL-7986] {CVE-2024-35870}
  - smb: client: remove extra @chan_count check in __cifs_put_smb_ses() (Jay Shin) [RHEL-28943 RHEL-31245]
  - RHEL: enable CONFIG_AMD_ATL (Aristeu Rozanski) [RHEL-36220 RHEL-26704]
  - EDAC/amd64: Use new AMD Address Translation Library (Aristeu Rozanski) [RHEL-36220 RHEL-26704]
  - RAS: Introduce AMD Address Translation Library (Aristeu Rozanski) [RHEL-36220 RHEL-26704]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.24.1.el9_4]
changelog:
  - net/bnx2x: Prevent access to a freed page in page_pool (Michal Schmidt) [RHEL-43272 RHEL-23117]
  - bnx2x: new flag for track HW resource allocation (Michal Schmidt) [RHEL-43272 RHEL-23117]
  - bnx2x: fix page fault following EEH recovery (Michal Schmidt) [RHEL-43272 RHEL-23117]
  - bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() (Michal Schmidt) [RHEL-43272 RHEL-23117]
  - bnx2x: fix potential memory leak in bnx2x_tpa_stop() (Michal Schmidt) [RHEL-43272 RHEL-23117]
  - xen-netfront: Add missing skb_mark_for_recycle (Vitaly Kuznetsov) [RHEL-37626 RHEL-36573] {CVE-2024-27393}
  - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-34953 RHEL-29239]
  - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-34953 RHEL-29239]
  - net/mlx5e: fix a potential double-free in fs_any_create_groups (Kamal Heib) [RHEL-38972 RHEL-37093] {CVE-2023-52667}
  - crypto: qat - Fix typo (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Vladis Dronov) [RHEL-38546 RHEL-35816] {CVE-2024-26974}
  - crypto: qat - specify firmware files for 402xx (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - validate slices count returned by FW (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - improve error logging to be consistent across features (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - improve error message in adf_get_arbiter_mapping() (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - implement dh fallback for primes > 4K (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - Fix spelling mistake "Invalide" -> "Invalid" (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - Avoid -Wflex-array-member-not-at-end warnings (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - implement interface for live migration (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add interface for live migration (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add bank save and restore flows (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - expand CSR operations for QAT GEN4 devices (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - rename get_sla_arr_of_type() (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - relocate CSR access code (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - move PFVF compat checker to a function (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - relocate and rename 4xxx PF2VM definitions (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - adf_get_etr_base() helper (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - redhat/configs: Add CONFIG_CRYPTO_DEV_QAT_420XX (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - make ring to service map common for QAT GEN4 (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - fix ring to service map for dcc in 420xx (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - fix ring to service map for dcc in 4xxx (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - fix comment structure (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - remove unnecessary description from comment (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - remove double initialization of value (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - avoid division by zero (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - removed unused macro in adf_cnv_dbgfs.c (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - remove unused macros in qat_comp_alg.c (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - uninitialized variable in adf_hb_error_inject_write() (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - Documentation: qat: fix auto_reset section (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - resolve race condition during AER recovery (Vladis Dronov) [RHEL-38546 RHEL-35816] {CVE-2024-26974}
  - crypto: qat - change SLAs cleanup flow at shutdown (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - improve aer error reset handling (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - limit heartbeat notifications (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add auto reset on error (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add fatal error notification (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - re-enable sriov after pf reset (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - update PFVF protocol for recovery (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - disable arbitration before reset (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add fatal error notify method (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add heartbeat error simulator (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - use kcalloc_node() instead of kzalloc_node() (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - avoid memcpy() overflow warning (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - fix arbiter mapping generation algorithm for QAT 402xx (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - generate dynamically arbiter mappings (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add support for ring pair level telemetry (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add support for device telemetry (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add admin msgs for telemetry (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - include pci.h for GET_DEV() (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - add support for 420xx devices (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - move fw config related structures (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - relocate portions of qat_4xxx code (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - change signature of uof_get_num_objs() (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - crypto: qat - relocate and rename get_service_enabled() (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - seq_file: add helper macro to define attribute for rw file (Vladis Dronov) [RHEL-38546 RHEL-35816]
  - minmax: Introduce {min,max}_array() (Vladis Dronov) [RHEL-38546 RHEL-35816]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.25.1.el9_4]
changelog:
  - nvme: fix reconnection fail due to reserved tag allocation (Maurizio Lombardi) [RHEL-42896 RHEL-36896] {CVE-2024-27435}
  - net: hns3: fix use-after-free bug in hclgevf_send_mbx_msg (cki-backport-bot) [RHEL-43625] {CVE-2021-47596}
  - scsi: sg: Avoid race in error handling & drop bogus warn (Ewan D. Milne) [RHEL-36106 RHEL-35659]
  - scsi: sg: Avoid sg device teardown race (Ewan D. Milne) [RHEL-36106 RHEL-35659]
  - netfilter: nf_tables: use timestamp to check for set element timeout (Florian Westphal) [RHEL-38032 RHEL-33985] {CVE-2024-27397}
  - netfilter: nft_set_rbtree: Remove unused variable nft_net (Florian Westphal) [RHEL-38032 RHEL-33985]
  - netfilter: nft_set_rbtree: prefer sync gc to async worker (Florian Westphal) [RHEL-38032 RHEL-33985]
  - netfilter: nft_set_rbtree: rename gc deactivate+erase function (Florian Westphal) [RHEL-38032 RHEL-33985]
  - netfilter: nf_tables: de-constify set commit ops function argument (Florian Westphal) [RHEL-38032 RHEL-33985]
  - octeontx2-af: avoid off-by-one read from userspace (Kamal Heib) [RHEL-40486 RHEL-39873] {CVE-2024-36957}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.26.1.el9_4]
changelog:
  - net: ena: Fix incorrect descriptor free behavior (Kamal Heib) [RHEL-39217 RHEL-37430] {CVE-2024-35958}
  - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Guillaume Nault) [RHEL-41749 RHEL-39837] {CVE-2024-36904}
  - mm/mglru: Revert "don't sync disk for each aging cycle" (Waiman Long) [RHEL-44418]
  - tipc: fix UAF in error path (Xin Long) [RHEL-34848 RHEL-34280] {CVE-2024-36886}
  - selftest/cgroup: Update test_cpuset_prs.sh to match changes (Waiman Long) [RHEL-45139]
  - cgroup/cpuset: Make cpuset.cpus.exclusive independent of cpuset.cpus (Waiman Long) [RHEL-45139]
  - cgroup/cpuset: Delay setting of CS_CPU_EXCLUSIVE until valid partition (Waiman Long) [RHEL-45139]
  - selftest/cgroup: Fix test_cpuset_prs.sh problems reported by test robot (Waiman Long) [RHEL-45139]
  - cgroup/cpuset: Fix remote root partition creation problem (Waiman Long) [RHEL-45139]
  - cgroup/cpuset: Optimize isolated partition only generate_sched_domains() calls (Waiman Long) [RHEL-45139]
  - cgroup/cpuset: Fix retval in update_cpumask() (Waiman Long) [RHEL-45139]
  - cgroup/cpuset: Fix a memory leak in update_exclusive_cpumask() (Waiman Long) [RHEL-45139]
  - ice: implement AQ download pkg retry (Petr Oros) [RHEL-38907 RHEL-17318]
  - redhat: include resolve_btfids in kernel-devel (Viktor Malik) [RHEL-43426 RHEL-40707]
  - blk-cgroup: fix list corruption from resetting io stat (cki-backport-bot) [RHEL-44977] {CVE-2024-38663}
  - misc: rtsx: do clear express reg every SD_INT (David Arcari) [RHEL-39985 RHEL-33706]
  - misc: rtsx: Fix rts5264 driver status incorrect when card removed (David Arcari) [RHEL-39985 RHEL-33706]
  - netfilter: tproxy: bail out if IP has been disabled on the device (cki-backport-bot) [RHEL-44371] {CVE-2024-36270}
  - lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure (cki-backport-bot) [RHEL-44263 RHEL-44261] {CVE-2024-38543}
  - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44039] {CVE-2024-38586}
  - net: micrel: Fix receiving the timestamp in the frame for lan8841 (cki-backport-bot) [RHEL-43996] {CVE-2024-38593}
  - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-43379 RHEL-27780] {CVE-2022-48627}
  - net/mlx5e: Use a memory barrier to enforce PTP WQ xmit submission tracking occurs after populating the metadata_map (Kamal Heib) [RHEL-42728 RHEL-34192] {CVE-2024-26858}
  - locking/atomic: Make test_and_*_bit() ordered on failure (Paolo Bonzini) [RHEL-45896]
  - mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index (Rafael Aquini) [RHEL-42659 RHEL-31840] {CVE-2024-26783}
  - can: j1939: prevent deadlock by changing j1939_socks_lock to rwlock (Jose Ignacio Tornos Martinez) [RHEL-42379 RHEL-31530] {CVE-2023-52638}
  - ethernet: hisilicon: hns: hns_dsaf_misc: fix a possible array overflow in hns_dsaf_ge_srst_by_port() (Ken Cox) [RHEL-42226 RHEL-38715] {CVE-2021-47548}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.27.1.el9_4]
changelog:
  - drm/ast: Fix soft lockup (CKI Backport Bot) [RHEL-45716]
  - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41838 RHEL-33217] {CVE-2024-26880}
  - KVM: arm64: Do not re-initialize the KVM lock (Sebastian Ott) [RHEL-37528 RHEL-36279]
  - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Sebastian Ott) [RHEL-37528 RHEL-36279]
  - KVM: arm64: Fix host-programmed guest events in nVHE (Sebastian Ott) [RHEL-37528 RHEL-36279]
  - KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler (Sebastian Ott) [RHEL-37528 RHEL-36279]
  - KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table() (Sebastian Ott) [RHEL-37528 RHEL-36279]
  - KVM: arm64: Fix double-free following kvm_pgtable_stage2_free_unlinked() (Sebastian Ott) [RHEL-37528 RHEL-36279]
  - octeontx2-af: Use separate handlers for interrupts (Kamal Heib) [RHEL-42846 RHEL-35170] {CVE-2024-27030}
  - Squashfs: check the inode number is not the invalid value of zero (Abhi Das) [RHEL-42811 RHEL-35098] {CVE-2024-26982}
  - net: fix sk_memory_allocated_{add|sub} vs softirqs (Paolo Abeni) [RHEL-36773 RHEL-34070]
  - tcp: sk_forced_mem_schedule() optimization (Paolo Abeni) [RHEL-36773 RHEL-34070]
  - net: make SK_MEMORY_PCPU_RESERV tunable (Paolo Abeni) [RHEL-36773 RHEL-34070]
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-42655 RHEL-31690] {CVE-2024-26773}
  - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-42528 RHEL-38200] {CVE-2023-52809}
  - KVM: x86/mmu: Retry fault before acquiring mmu_lock if mapping is changing (Maxim Levitsky) [RHEL-43388]
  - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-40398 RHEL-36047]
  - RAS: enable CONFIG_RAS_FMPM (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS: Avoid build errors when CONFIG_DEBUG_FS=n (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/FMPM: Safely handle saved records of various sizes (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/FMPM: Avoid NULL ptr deref in get_saved_records() (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - Merge tag 'edac_updates_for_v6.9' of git://git.kernel.org/pub/scm/linux/kernel/git/ras/ras (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/FMPM: Fix off by one when unwinding on error (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/FMPM: Add debugfs interface to print record entries (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/FMPM: Save SPA values (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS: Export helper to get ras_debugfs_dir (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/ATL: Fix bit overflow in denorm_addr_df4_np2() (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS: Introduce a FRU memory poison manager (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - x86/cpu/amd: Provide a separate accessor for Node ID (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/ATL: Add MI300 row retirement support (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - Documentation: Move RAS section to admin-guide (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/ATL: Add MI300 DRAM to normalized address translation support (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/ATL: Fix array overflow in get_logical_coh_st_fabric_id_mi300() (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - RAS/AMD/ATL: Add MI300 support (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - Documentation: RAS: Add index and address translation section (Aristeu Rozanski) [RHEL-36212 RHEL-17008]
  - cpu/SMT: Make SMT control more robust against enumeration failures (Aristeu Rozanski) [RHEL-36212 RHEL-17008]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.28.1.el9_4]
changelog:
  - mlxbf_gige: call request_irq() after NAPI initialized (Kamal Heib) [RHEL-43012 RHEL-37179] {CVE-2024-35907}
  - mlxbf_gige: stop PHY during open() error paths (Kamal Heib) [RHEL-43012 RHEL-37179] {CVE-2024-35907}
  - mlxbf_gige: stop interface during shutdown (Kamal Heib) [RHEL-41708 RHEL-37244] {CVE-2024-35885}
  - net: amd-xgbe: Fix skb data length underflow (Ken Cox) [RHEL-43796 RHEL-43794] {CVE-2022-48743}
  - nfp: flower: handle acti_netdevs allocation failure (Ken Cox) [RHEL-42852 RHEL-35158] {CVE-2024-27046}
  - block: add check that partition length needs to be aligned with block size (Ming Lei) [RHEL-45501 RHEL-26616] {CVE-2023-52458}
  - nfsd: hold a lighter-weight client reference over CB_RECALL_ANY (Benjamin Coddington) [RHEL-45517 RHEL-31513]
  - NFSD: CREATE_SESSION must never cache NFS4ERR_DELAY replies (Benjamin Coddington) [RHEL-45517 RHEL-31513]
  - NFSD: Document the phases of CREATE_SESSION (Benjamin Coddington) [RHEL-45517 RHEL-31513]
  - NFSD: Fix the NFSv4.1 CREATE_SESSION operation (Benjamin Coddington) [RHEL-45517 RHEL-31513]
  - icmp: prevent possible NULL dereferences from icmp_build_probe() (Antoine Tenart) [RHEL-42974 RHEL-37002] {CVE-2024-35857}
  - NFSv4.1: fix handling NFS4ERR_DELAY when testing for session trunking (Scott Mayhew) [RHEL-45360 RHEL-24133]
  - RAS/AMD/ATL: Use system settings for MI300 DRAM to normalized address translation (Aristeu Rozanski) [RHEL-46335 RHEL-38634]
  - RAS/AMD/ATL: Fix MI300 bank hash (Aristeu Rozanski) [RHEL-46335 RHEL-38634]
  - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-42689 RHEL-33271] {CVE-2024-26852}
  - epoll: be better about file lifetimes (Pavel Reichl) [RHEL-44091 RHEL-44083] {CVE-2024-38580}
  - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Dick Kennedy) [RHEL-40659 RHEL-40665 RHEL-24508 RHEL-39793] {CVE-2024-36924}
  - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Dick Kennedy) [RHEL-40659 RHEL-40669 RHEL-24508 RHEL-39887] {CVE-2024-36952}
  - bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel (Viktor Malik) [RHEL-42640 RHEL-31726] {CVE-2024-26737}
  - can: j1939: j1939_netdev_start(): fix UAF for rx_kref of j1939_priv (Ken Cox) [RHEL-41489 RHEL-38415] {CVE-2021-47459}
  - wifi: ath11k: restore country code during resume (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - wifi: ath11k: refactor setting country code logic (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - bus: mhi: host: Add mhi_power_down_keep_dev() API to support system suspend/hibernation (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - net: qrtr: support suspend/hibernation (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - wifi: ath11k: support hibernation (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - wifi: ath11k: thermal: don't try to register multiple times (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - wifi: ath11k: fix warning on DMA ring capabilities event (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - wifi: ath11k: do not dump SRNG statistics during resume (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - wifi: ath11k: remove MHI LOOPBACK channels (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]
  - wifi: ath11k: rearrange IRQ enable/disable in reset path (Jose Ignacio Tornos Martinez) [RHEL-46230 RHEL-12349]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.29.1.el9_4]
changelog:
  - net: Avoid address overwrite in kernel_connect (Davide Caratti) [RHEL-45728 RHEL-30875]
  - net: replace calls to sock->ops->connect() with kernel_connect() (Davide Caratti) [RHEL-45728 RHEL-33410]
  - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-41638 RHEL-39704] {CVE-2024-36020}
  - cifs: translate network errors on send to -ECONNABORTED (Jay Shin) [RHEL-47047 RHEL-31245]
  - wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-44132] {CVE-2024-38575}
  - wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-43208 RHEL-39803] {CVE-2024-36921}
  - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-42906 RHEL-36809] {CVE-2024-35789}
  - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-42886 RHEL-36900] {CVE-2024-27434}
  - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-42860 RHEL-35142] {CVE-2024-27052}
  - wifi: mt76: mt7925e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-42856 RHEL-35148] {CVE-2024-27049}
  - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-42743 RHEL-34187] {CVE-2024-26897}
  - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (Jose Ignacio Tornos Martinez) [RHEL-42383 RHEL-35199] {CVE-2023-52651}
  - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-41402 RHEL-39781] {CVE-2024-36929}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.30.1.el9_4]
changelog:
  - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35840] {CVE-2024-21823}
  - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35840] {CVE-2024-21823}
  - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35840] {CVE-2024-21823}
  - tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer (Mark Salter) [RHEL-49538 RHEL-39308]
  - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails (Jon Maloy) [RHEL-44467] {CVE-2024-37353}
  - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-36271 RHEL-26682] {CVE-2024-26600}
  - eeprom: at24: fix memory corruption race condition (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - eeprom: at24: Probe for DDR3 thermal sensor in the SPD case (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - eeprom: at24: Use dev_err_probe for nvmem register failure (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - eeprom: at24: Add support for 24c1025 EEPROM (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - eeprom: at24: remove struct at24_client (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - at24: Support probing while in non-zero ACPI D state (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44439] {CVE-2024-37356}
  - cxl/region: Fix cxlr_pmem leaks (cki-backport-bot) [RHEL-44486] {CVE-2024-38391}
  - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44480] {CVE-2024-36489}
  - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-42714 RHEL-33266] {CVE-2024-26853}
  - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44404 RHEL-44402] {CVE-2024-33621}
  - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-44404 RHEL-32205]
  - ipvlan: properly track tx_errors (Davide Caratti) [RHEL-44404 RHEL-32205]
  - wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-41698 RHEL-39754] {CVE-2024-36941}
  - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-41658 RHEL-37028] {CVE-2024-35845}
  - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-41556 RHEL-37018] {CVE-2024-35852}
  - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44215] {CVE-2024-38558}
  - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-41520 RHEL-39799] {CVE-2024-36922}
  - wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-38754 RHEL-37345] {CVE-2024-35937}
  - ice: fix memory corruption bug with suspend and rebuild (Petr Oros) [RHEL-49858 RHEL-17486] {CVE-2024-35911}
  - ipv6: prevent possible NULL deref in fib6_nh_init() (Hangbin Liu) [RHEL-48182 RHEL-45826] {CVE-2024-40961}
  - netns: Make get_net_ns() handle zero refcount net (Paolo Abeni) [RHEL-48117 RHEL-46610] {CVE-2024-40958}
  - net: do not leave a dangling sk pointer, when socket creation fails (Paolo Abeni) [RHEL-48072 RHEL-46610] {CVE-2024-40954}
  - net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (CKI Backport Bot) [RHEL-47902] {CVE-2024-40928}
  - net: netlink: af_netlink: Prevent empty skb by adding a check on len. (Ivan Vecera) [RHEL-43619 RHEL-30344] {CVE-2021-47606}
  - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46921] {CVE-2024-39487}
  - nfs: fix panic when nfs4_ff_layout_prepare_ds() fails (Benjamin Coddington) [RHEL-42732 RHEL-34875] {CVE-2024-26868}
  - efi: fix panic in kdump kernel (Steve Best) [RHEL-42920 RHEL-36998] {CVE-2024-35800}
  - ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() (Hangbin Liu) [RHEL-41735 RHEL-31050] {CVE-2024-27417}
  - netfilter: nf_tables: do not compare internal table flags on updates (Florian Westphal) [RHEL-41682 RHEL-33985] {CVE-2024-27065}
  - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-41466 RHEL-39786] {CVE-2024-36903}
  - netfilter: nf_tables: honor table dormant flag from netdev release event path (Florian Westphal) [RHEL-40056 RHEL-33985] {CVE-2024-36005}
  - cifs: fix underflow in parse_server_interfaces() (Paulo Alcantara) [RHEL-34636 RHEL-31245] {CVE-2024-26828}
  - drm/i915/audio: Fix audio time stamp programming for DP (CKI Backport Bot) [RHEL-45843]
  - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-42548 RHEL-38260] {CVE-2023-52864}
  - platform/x86: wmi: remove unnecessary initializations (David Arcari) [RHEL-42548 RHEL-38260] {CVE-2023-52864}
  - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (CKI Backport Bot) [RHEL-43170] {CVE-2024-36017}
  - netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (Florian Westphal) [RHEL-40062 RHEL-33985] {CVE-2024-26808}
  - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-39017 RHEL-32372] {CVE-2024-35969}
  - netfilter: nf_tables: flush pending destroy work before exit_net release (Florian Westphal) [RHEL-38765 RHEL-33985] {CVE-2024-35899}
  - vt: fix unicode buffer corruption when deleting characters (Andrew Halaney) [RHEL-42947 RHEL-24205] {CVE-2024-35823}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.31.1.el9_4]
changelog:
  - net: fix __dst_negative_advice() race (CKI Backport Bot) [RHEL-46798] {CVE-2024-36971}
  - net: annotate data-races around sk->sk_dst_pending_confirm (CKI Backport Bot) [RHEL-46798] {CVE-2024-36971}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.32.1.el9_4]
changelog:
  - REDHAT: Makefile, dont reset dist-git-tmp if set (Lucas Zampieri)
  - net/mlx5e: Fix netif state handling (Benjamin Poirier) [RHEL-43872 RHEL-43870] {CVE-2024-38608}
  - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Benjamin Poirier) [RHEL-43872 RHEL-43870] {CVE-2024-38608}
  - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50202 RHEL-50203] {CVE-2024-41091}
  - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50264 RHEL-50265] {CVE-2024-41090}
  - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-43421 RHEL-30023] {CVE-2024-26810}
  - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44299] {CVE-2024-38538}
  - KVM: arm64: Ensure target address is granule-aligned for range TLBI (Sebastian Ott) [RHEL-52248 RHEL-31215]
  - RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (cki-backport-bot) [RHEL-44250] {CVE-2024-38544}
  - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-52082] {CVE-2024-41076}
  - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46421 RHEL-35393] {CVE-2024-39476}
  - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50074]
  - cxl/port: Fix delete_endpoint() vs parent unregistration race (John W. Linville) [RHEL-39290 RHEL-23582] {CVE-2023-52771}
  - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (Petr Oros) [RHEL-49862 RHEL-17486] {CVE-2024-26855}
  - ice: fix LAG and VF lock dependency in ice_reset_vf() (Petr Oros) [RHEL-49820 RHEL-17486] {CVE-2024-36003}
  - net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (Jose Ignacio Tornos Martinez) [RHEL-47992 RHEL-9429] {CVE-2024-40939}
  - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47770] {CVE-2024-40911}
  - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47788] {CVE-2024-40912}
  - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47920] {CVE-2024-40929}
  - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48028] {CVE-2024-40941}
  - seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors (Hangbin Liu) [RHEL-48098 RHEL-45826] {CVE-2024-40957}
  - ipv6: fix possible race in __fib6_drop_pcpu_from() (Hangbin Liu) [RHEL-47572 RHEL-45826] {CVE-2024-40905}
  - redhat/configs: Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-39581 RHEL-28760]
  - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-39581 RHEL-28760]
  - drm/mgag200: Fix caching setup for remapped video memory (Scott Weaver) [RHEL-39581 RHEL-24102]
  - Revert "drm/mgag200: Flush the cache to improve latency" (Scott Weaver) [RHEL-39581 RHEL-28760]
  - net: psample: fix flag being set in wrong skb (Adrian Moreno) [RHEL-47275]
  - net: openvswitch: store sampling probability in cb. (Adrian Moreno) [RHEL-47275]
  - net: openvswitch: add psample action (Adrian Moreno) [RHEL-47275]
  - net: psample: allow using rate as probability (Adrian Moreno) [RHEL-47275]
  - net: psample: skip packet copy if no listeners (Adrian Moreno) [RHEL-47275]
  - net: psample: add user cookie (Adrian Moreno) [RHEL-47275]
  - i40e: fix: remove needless retries of NVM update (CKI Backport Bot) [RHEL-48169 RHEL-36692]
  - ice: Reject pin requests with unsupported flags (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: Don't process extts if PTP is disabled (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: Fix improper extts handling (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: stop destroying and reinitalizing Tx tracker during reset (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: factor out ice_ptp_rebuild_owner() (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: rename ice_ptp_tx_cfg_intr (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: don't check has_ready_bitmap in E810 functions (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: rename verify_cached to has_ready_bitmap (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: pass reset type to PTP reset functions (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: introduce PTP state machine (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: make RX HW timestamp reading code more reusable (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: Rename E822 to E82X (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: periodically kick Tx timestamp interrupt (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: Re-enable timestamping correctly after reset (Petr Oros) [RHEL-50388 RHEL-17486]
  - ptp: introduce helpers to adjust by scaled parts per million (Petr Oros) [RHEL-50388 RHEL-17486]
  - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (Andrew Halaney) [RHEL-42566 RHEL-24205] {CVE-2023-52880}
  - netfilter: complete validation of user input (Phil Sutter) [RHEL-47384 RHEL-37212] {CVE-2024-35962}
  - netfilter: validate user input for expected length (Phil Sutter) [RHEL-41668 RHEL-37212] {CVE-2024-35896}
  - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-40051 RHEL-39719] {CVE-2024-36025}
  - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-37615 RHEL-33260] {CVE-2024-26908}
  - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Prarit Bhargava) [RHEL-37615 RHEL-25415]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.33.1.el9_4]
changelog:
  - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44287] {CVE-2024-38540}
  - netfilter: flowtable: validate pppoe header (Florian Westphal) [RHEL-44430 RHEL-33469] {CVE-2024-27016}
  - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44116] {CVE-2024-38579}
  - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51035 RHEL-51033] {CVE-2024-41041}
  - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Florian Westphal) [RHEL-42832 RHEL-33985] {CVE-2024-27019}
  - netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEV (Florian Westphal) [RHEL-42832 RHEL-33985]
  - netfilter: nf_tables: NULL pointer dereference in nf_tables_updobj() (Florian Westphal) [RHEL-42832 RHEL-33985]
  - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Florian Westphal) [RHEL-41802 RHEL-33985] {CVE-2024-26925}
  - netfilter: nf_tables: discard table flag update with pending basechain deletion (Florian Westphal) [RHEL-40231 RHEL-33985] {CVE-2024-35897}
  - netfilter: nf_tables: reject table flag and netdev basechain updates (Florian Westphal) [RHEL-40231 RHEL-33985]
  - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-42966 RHEL-37040] {CVE-2024-35839}
  - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-42966 RHEL-37040] {CVE-2024-35839}
  - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-42966 RHEL-37040] {CVE-2024-35839}
  - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-42966 RHEL-37040] {CVE-2024-35839}
  - netfilter: nft_limit: reject configurations that cause integer overflow (Florian Westphal) [RHEL-40065 RHEL-33985] {CVE-2024-26668}
  - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48339] {CVE-2024-40978}
  - mm/huge_memory: don't unpoison huge_zero_folio (Aristeu Rozanski) [RHEL-47804] {CVE-2024-40914}
  - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48375 RHEL-6118] {CVE-2024-40983}
  - netfilter: nft_set_rbtree: skip end interval element from gc (Florian Westphal) [RHEL-41265] {CVE-2024-26581}
  - nvmet: fix a possible leak when destroy a ctrl during qp establishment (CKI Backport Bot) [RHEL-52021 RHEL-52019 RHEL-52020] {CVE-2024-42152}
  - net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (CKI Backport Bot) [RHEL-51756] {CVE-2024-42110}
  - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Florian Westphal) [RHEL-40265 RHEL-33985] {CVE-2024-35898}
  - netfilter: br_netfilter: remove WARN traps (CKI Backport Bot) [RHEL-42882] {CVE-2024-27415}
  - netfilter: br_netfilter: skip conntrack input hook for promisc packets (CKI Backport Bot) [RHEL-42882] {CVE-2024-27415}
  - netfilter: bridge: confirm multicast packets before passing them up the stack (CKI Backport Bot) [RHEL-42882] {CVE-2024-27415}
  - netfilter: nf_conntrack_bridge: initialize err to 0 (CKI Backport Bot) [RHEL-42882] {CVE-2024-27415}
  - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Florian Westphal) [RHEL-42842 RHEL-33985] {CVE-2024-27020}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.34.1.el9_4]
changelog:
  - mm: prevent derefencing NULL ptr in pfn_section_valid() (Jarod Wilson) [RHEL-51140 RHEL-51138] {CVE-2024-41055}
  - mm, kmsan: fix infinite recursion due to RCU critical section (Jarod Wilson) [RHEL-51140 RHEL-51138] {CVE-2024-41055}
  - ppp: reject claimed-as-LCP but actually malformed packets (CKI Backport Bot) [RHEL-51061 RHEL-51059] {CVE-2024-41044}
  - x86: stop playing stack games in profile_pc() (CKI Backport Bot) [RHEL-51651] {CVE-2024-42096}
  - PCI/MSI: Fix UAF in msi_capability_init (CKI Backport Bot) [RHEL-51438] {CVE-2024-41096}
  - iommufd: Fix missing update of domains_itree after splitting iopt_area (Jerry Snitselaar) [RHEL-42518 RHEL-28780] {CVE-2023-52801}
  - mm: cachestat: fix folio read-after-free in cache walk (Nico Pache) [RHEL-41739 RHEL-5619] {CVE-2024-26630}
  - regmap: maple: Fix cache corruption in regcache_maple_drop() (Jaroslav Kysela) [RHEL-43179 RHEL-39706] {CVE-2024-36019}
  - mm: cachestat: fix two shmem bugs (Nico Pache) [RHEL-36912] {CVE-2024-35797}
  - kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address (Steve Best) [RHEL-42778 RHEL-34985] {CVE-2024-26946}
  - mm/hugetlb: fix missing hugetlb_lock for resv uncharge (Rafael Aquini) [RHEL-43132 RHEL-37467] {CVE-2024-36000}
  - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52675 RHEL-50366]
  - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52675 RHEL-50366]
  - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52675 RHEL-50366]
  - gpio: tegra186: Fix tegra186_gpio_is_accessible() check (Charles Mirabile) [RHEL-49347 RHEL-32452]
  - net/sched: Fix UAF when resolving a clash (CKI Backport Bot) [RHEL-51022 RHEL-51020] {CVE-2024-41040}
  - KVM: SVM: Flush pages under kvm->lock to fix UAF in svm_register_enc_region() (Maxim Levitsky) [RHEL-41462 RHEL-32430] {CVE-2024-35791}
  - cxl/region: Fix memregion leaks in devm_cxl_add_region() (John W. Linville) [RHEL-47965 RHEL-23582] {CVE-2024-40936}
  - x86/coco: Require seeding RNG with RDRAND on CoCo systems (Lenny Szubowicz) [RHEL-42986 RHEL-37269] {CVE-2024-35875}
  - scsi: qedf: Ensure the copied buf is NUL terminated (cki-backport-bot) [RHEL-44203] {CVE-2024-38559}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.35.1.el9_4]
changelog:
  - usb-storage: alauda: Check whether the media is initialized (CKI Backport Bot) [RHEL-43716] {CVE-2024-38619}
  - ceph: force sending a cap update msg back to MDS for revoke op (Xiubo Li) [RHEL-55437]
  - ceph: periodically flush the cap releases (Xiubo Li) [RHEL-55437]
  - mm: avoid overflows in dirty throttling logic (Jay Shin) [RHEL-51848 RHEL-50004] {CVE-2024-42131}
  - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Jay Shin) [RHEL-51701 RHEL-50004] {CVE-2024-42102}
  - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Jay Shin) [RHEL-42628 RHEL-5619] {CVE-2024-26720}
  - net: fix out-of-bounds access in ops_init (Paolo Abeni) [RHEL-43188 RHEL-46610] {CVE-2024-36883}
  - nvme: avoid double free special payload (CKI Backport Bot) [RHEL-51311] {CVE-2024-41073}
  - kernfs: change kernfs_rename_lock into a read-write lock (Jay Shin) [RHEL-55253 RHEL-52956]
  - kernfs: Separate kernfs_pr_cont_buf and rename_lock (Jay Shin) [RHEL-55253 RHEL-52956]
  - kernfs: fix missing kernfs_iattr_rwsem locking (Jay Shin) [RHEL-55253 RHEL-52956]
  - kernfs: Use a per-fs rwsem to protect per-fs list of kernfs_super_info (Jay Shin) [RHEL-55253 RHEL-52956]
  - kernfs: Introduce separate rwsem to protect inode attributes (Jay Shin) [RHEL-55253 RHEL-52956]
  - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47894 RHEL-47892] {CVE-2024-40927}
  - Bluetooth: af_bluetooth: Fix deadlock (Bastien Nocera) [RHEL-34161] {CVE-2024-26886}
  - xdp: Remove WARN() from __xdp_reg_mem_model() (CKI Backport Bot) [RHEL-51586] {CVE-2024-42082}
  - nfsd: don't take fi_lock in nfsd_break_deleg_cb() (Benjamin Coddington) [RHEL-42578 RHEL-34875]
  - nfsd: fix RELEASE_LOCKOWNER (Benjamin Coddington) [RHEL-42578 RHEL-34875] {CVE-2024-26629}
  - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (CKI Backport Bot) [RHEL-43729 RHEL-43727]
  - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (CKI Backport Bot) [RHEL-43729 RHEL-43727]
  - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43729] {CVE-2024-36979}
  - efivarfs: force RO when remounting if SetVariable is not supported (Pavel Reichl) [RHEL-42343 RHEL-26588] {CVE-2023-52463}
  - ACPI: arm64: export acpi_arch_thermal_cpufreq_pctg() (Charles Mirabile) [RHEL-34234 RHEL-1697]
  - ACPI: processor: reduce CPUFREQ thermal reduction pctg for Tegra241 (Charles Mirabile) [RHEL-34234 RHEL-1697]
  - ACPI: thermal: Add Thermal fast Sampling Period (_TFP) support (Scott Weaver) [RHEL-34234 RHEL-1697]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.36.1.el9_4]
changelog:
  - scsi: qla2xxx: Fix double free of fcport (Nilesh Javali) [RHEL-39547 RHEL-40034 RHEL-25184 RHEL-35020] {CVE-2024-26929}
  - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Nilesh Javali) [RHEL-39547 RHEL-41325 RHEL-25184 RHEL-35016] {CVE-2024-26930}
  - scsi: qla2xxx: Fix command flush on cable pull (Nilesh Javali) [RHEL-39547 RHEL-40029 RHEL-25184 RHEL-35012] {CVE-2024-26931}
  - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (Benjamin Coddington) [RHEL-53708 RHEL-53004] {CVE-2024-42246}
  - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-56275 RHEL-56084]
  - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52368] {CVE-2024-42225}
  - cppc_cpufreq: Fix possible null pointer dereference (cki-backport-bot) [RHEL-44145] {CVE-2024-38573}
  - ring-buffer: Fix a race between readers and resize checks (cki-backport-bot) [RHEL-43920] {CVE-2024-38601}
  - fork: defer linking file vma until vma is fully initialized (Rafael Aquini) [RHEL-35617 RHEL-35022] {CVE-2024-27022}
  - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48393 RHEL-48391] {CVE-2024-40984}
  - KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes (Maxim Levitsky) [RHEL-41345 RHEL-32430] {CVE-2024-26991}
  - net/sched: act_mirred: don't override retval if we already lost the skb (Davide Caratti) [RHEL-42644 RHEL-31724] {CVE-2024-26739}
  - net/sched: act_mirred: Create function tcf_mirred_to_dev and improve readability (Davide Caratti) [RHEL-42644 RHEL-32137]
  - cpufreq: exit() callback is optional (cki-backport-bot) [RHEL-43848] {CVE-2024-38615}
  - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44157 RHEL-44155] {CVE-2024-38570}
  - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44157 RHEL-44155] {CVE-2024-38570}
  - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44157 RHEL-44155] {CVE-2024-38570}
  - wifi: nl80211: Avoid address calculations via out of bounds array indexing (Jose Ignacio Tornos Martinez) [RHEL-46505 RHEL-34696] {CVE-2024-38562}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.37.1.el9_4]
changelog:
  - ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses (CKI Backport Bot) [RHEL-42783] {CVE-2024-26947}
  - powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV (Mamatha Inamdar) [RHEL-45537 RHEL-25055]
  - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Steve Best) [RHEL-40517 RHEL-39354] {CVE-2024-36016}
  - smb: client: set correct id, uid and cruid for multiuser automounts (Jay Shin) [RHEL-47260 RHEL-31245]
  - printk: printk.c: Disable per_console_kthreads on !CONFIG_PREEMPT_RT (Derek Barbosa) [RHEL-39064]
  - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-41275 RHEL-26233] {CVE-2023-52439}
  - gpiolib: cdev: Fix use after free in lineinfo_changed_notify (Steve Best) [RHEL-43192 RHEL-39849] {CVE-2024-36899}
  - wifi: mac80211: Avoid address calculations via out of bounds array indexing (CKI Backport Bot) [RHEL-51287 RHEL-51285] {CVE-2024-41071}
  - Input: cyapa - add missing input core locking to suspend/resume functions (cki-backport-bot) [RHEL-44455] {CVE-2023-52884}
  - net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Limit number of driver warning messages (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Fix race condition in disconnect handling (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Fix race conditions in suspend/resume handling (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Fix partial packet errors on suspend/resume (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Fix exception on link speed change (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Add missing return code checks (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Remove unused pause frame queue (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Set flow control threshold to prevent packet loss (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Remove unused timer (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - lan78xx: Fix white space and style issues (Jamie Bainbridge) [RHEL-34928 RHEL-33332]
  - sctp: fix association labeling in the duplicate COOKIE-ECHO case (CKI Backport Bot) [RHEL-56745 RHEL-48647]
  - ice: xsk: fix txq interrupt mapping (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: add missing WRITE_ONCE when clearing ice_rx_ring::xdp_prog (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: improve updating ice_{t,r}x_ring::xsk_pool (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: toggle netif_carrier when setting up XSK pool (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: modify error handling when setting XSK pool in ndo_bpf (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: replace synchronize_rcu with synchronize_net (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: don't busy wait for Rx queue disable in ice_qp_dis() (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: respect netif readiness in AF_XDP ZC related ndo's (Petr Oros) [RHEL-52771 RHEL-15670]
  - ice: remove af_xdp_zc_qps bitmap (Petr Oros) [RHEL-52771 RHEL-17486]
  - ice: reorder disabling IRQ and NAPI in ice_qp_dis (Petr Oros) [RHEL-52771 RHEL-17486]
  - ice: make ice_vsi_cfg_txq() static (Petr Oros) [RHEL-52771 RHEL-17486]
  - ice: make ice_vsi_cfg_rxq() static (Petr Oros) [RHEL-52771 RHEL-17486]
  - ice: make use of DEFINE_FLEX() for struct ice_aqc_add_tx_qgrp (Petr Oros) [RHEL-52771 RHEL-17486]
  - xdp: reflect tail increase for MEM_TYPE_XSK_BUFF_POOL (Petr Oros) [RHEL-52771 RHEL-38863]
  - ice: update xdp_rxq_info::frag_size for ZC enabled Rx queue (Petr Oros) [RHEL-52771 RHEL-38863]
  - intel: xsk: initialize skb_frag_t::bv_offset in ZC drivers (Petr Oros) [RHEL-52771 RHEL-38863]
  - ice: remove redundant xdp_rxq_info registration (Petr Oros) [RHEL-52771 RHEL-38863]
  - ice: work on pre-XDP prog frag count (Petr Oros) [RHEL-52771 RHEL-38863]
  - xsk: fix usage of multi-buffer BPF helpers for ZC XDP (Petr Oros) [RHEL-52771 RHEL-38863]
  - xsk: make xsk_buff_pool responsible for clearing xdp_buff::flags (Petr Oros) [RHEL-52771 RHEL-38863]
  - xsk: recycle buffer in case Rx queue was full (Petr Oros) [RHEL-52771 RHEL-38863]
  - overflow: add DEFINE_FLEX() for on-stack allocs (Petr Oros) [RHEL-52771 RHEL-30138]
  - overflow: Add struct_size_t() helper (Petr Oros) [RHEL-52771 RHEL-30138]
  - bpf, sockmap: Prevent lock inversion deadlock in map delete elem (Felix Maurer) [RHEL-41479 RHEL-30107] {CVE-2024-35895}
  - xfs: allow SECURE namespace xattrs to use reserved block pool (CKI Backport Bot) [RHEL-54443 RHEL-49806]
  - platform/x86/intel-uncore-freq: Don't present root domain on error (David Arcari) [RHEL-43291 RHEL-38558]
  - platform/x86/intel-uncore-freq: Increase minor number support (David Arcari) [RHEL-43291 RHEL-38558]
  - platform/x86/intel-uncore-freq: Process read/write blocked feature status (David Arcari) [RHEL-43291 RHEL-38558]
  - platform/x86/intel/tpmi: Move TPMI ID definition (Steve Best) [RHEL-43291 RHEL-35956]
  - ice: fix VSI lists confusion when adding VLANs (CKI Backport Bot) [RHEL-57778 RHEL-20571]
  - ice: fix accounting for filters shared by multiple VSIs (CKI Backport Bot) [RHEL-57778 RHEL-20571]
  - ice: fix accounting if a VLAN already exists (CKI Backport Bot) [RHEL-57778 RHEL-17486]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.38.1.el9_4]
changelog:
  - module: avoid allocation if module is already present and ready (Donald Dutile) [RHEL-52417]
  - module: move early sanity checks into a helper (Donald Dutile) [RHEL-52417]
  - module: extract patient module check into helper (Donald Dutile) [RHEL-52417]
  - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-58636 RHEL-39662]
  - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-58636 RHEL-39662]
  - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (cki-backport-bot) [RHEL-43472] {CVE-2024-36978}
  - netfilter: nft_flow_offload: release dst in case direct xmit path is used (Florian Westphal) [RHEL-38520 RHEL-33469]
  - netfilter: nft_flow_offload: reset dst in route object after setting up flow (Florian Westphal) [RHEL-38520 RHEL-33469] {CVE-2024-27403}
  - netfilter: flowtable: simplify route logic (Florian Westphal) [RHEL-38520 RHEL-33469]
  - net: psample: fix uninitialized metadata. (Adrian Moreno) [RHEL-56909]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.39.1.el9_4]
changelog:
  - mptcp: ensure snd_nxt is properly initialized on connect (cki-backport-bot) [RHEL-52474 RHEL-39867] {CVE-2024-36889}
  - ping: fix address binding wrt vrf (Antoine Tenart) [RHEL-57563 RHEL-50920]
  - net/mlx5: Add a timeout to acquire the command queue semaphore (Benjamin Poirier) [RHEL-44227 RHEL-44225] {CVE-2024-38556}
  - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48142 RHEL-48140] {CVE-2024-40959}
  - ionic: fix use after netif_napi_del() (Michal Schmidt) [RHEL-47636 RHEL-47634] {CVE-2024-39502}
  - ionic: clean interrupt before enabling queue to avoid credit race (Michal Schmidt) [RHEL-47636 RHEL-36065]
  - Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (Benjamin Poirier) [RHEL-42391 RHEL-24466] {CVE-2023-52658}
  - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55075 RHEL-55074] {CVE-2024-42284}
  - x86: set FSRS automatically on AMD CPUs that have FSRM (Prarit Bhargava) [RHEL-56970 RHEL-25415]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.40.1.el9_4]
changelog:
  - gfs2: Fix NULL pointer dereference in gfs2_log_flush (CKI Backport Bot) [RHEL-51561 RHEL-51559] {CVE-2024-42079}
  - net: stmmac: Separate C22 and C45 transactions for xgmac (CKI Backport Bot) [RHEL-60274 RHEL-6297]
  - dmaengine: idxd: Check for driver name match before sva user feature (Jerry Snitselaar) [RHEL-47239 RHEL-44836 RHEL-46619]
  - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-57609 RHEL-26722]
  - KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked (CKI Backport Bot) [RHEL-46428] {CVE-2024-39483}
  - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-60567 RHEL-46609]
  - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-60567 RHEL-46609]
  - x86/bugs: Reverse instruction order of CLEAR_CPU_BUFFERS (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - Revert "x86/bugs: Use fixed addressing for VERW operand" (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - redhat/configs: Enable x86 CONFIG_MITIGATION_RFDS (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - x86/rfds: Mitigate Register File Data Sampling (RFDS) (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - Documentation/hw-vuln: Add documentation for RFDS (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - x86/bugs: Use fixed addressing for VERW operand (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - KVM/VMX: Move VERW closer to VMentry for MDS mitigation (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - KVM/VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - x86/bugs: Use ALTERNATIVE() instead of mds_user_clear static key (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - x86/entry_32: Add VERW just before userspace transition (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - x86/entry_64: Add VERW just before userspace transition (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - x86/entry: Harden return-to-user (Prarit Bhargava) [RHEL-48713 RHEL-25415]
  - x86/entry: Optimize common_interrupt_return() (Prarit Bhargava) [RHEL-48713 RHEL-25415]
  - x86/bugs: Add asm helpers for executing VERW (Waiman Long) [RHEL-48713 RHEL-31226] {CVE-2023-28746}
  - sched: act_ct: take care of padding in struct zones_ht_key (Xin Long) [RHEL-55112 RHEL-50682] {CVE-2024-42272}
  - sched: act_ct: add netns into the key of tcf_ct_flow_table (Xin Long) [RHEL-55112 RHEL-28816]
  - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (CKI Backport Bot) [RHEL-41361] {CVE-2024-35989}
  - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-42115 RHEL-37721] {CVE-2021-47385}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.41.1.el9_4]
changelog:
  - iommu/amd: Fix panic accessing amd_iommu_enable_faulting (Jerry Snitselaar) [RHEL-55507 RHEL-37320 RHEL-40344]
  - iommu/vt-d: Allocate DMAR fault interrupts locally (Jerry Snitselaar) [RHEL-55507 RHEL-28780]
  - netfilter: nft_inner: validate mandatory meta and payload (Phil Sutter) [RHEL-47488 RHEL-47486] {CVE-2024-39504}
  - netfilter: flowtable: initialise extack before use (CKI Backport Bot) [RHEL-58546 RHEL-58544] {CVE-2024-45018}
  - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48285 RHEL-48282] {CVE-2024-40972}
  - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48285 RHEL-48282] {CVE-2024-40972}
  - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48519 RHEL-48517] {CVE-2024-40998}
  - ext4: turn quotas off if mount failed after enabling quotas (Carlos Maiolino) [RHEL-48519 RHEL-48517] {CVE-2024-40998}
  - mptcp: fix data re-injection from stale subflow (Davide Caratti) [RHEL-59920 RHEL-32669] {CVE-2024-26826}
  - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50864 RHEL-50862] {CVE-2024-41014}
  - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). (Davide Caratti) [RHEL-42771 RHEL-33410]
  - af_unix: Fix garbage collector racing against connect() (Davide Caratti) [RHEL-42771 RHEL-33410] {CVE-2024-26923}
  - af_unix: fix lockdep positive in sk_diag_dump_icons() (Davide Caratti) [RHEL-42771 RHEL-33410]
  - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50887 RHEL-50885] {CVE-2024-41013}
  - ipv6: prevent possible NULL dereference in rt6_probe() (Hangbin Liu) [RHEL-48161 RHEL-45826] {CVE-2024-40960}
  - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-42795 RHEL-34969] {CVE-2024-26961}
  - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47945 RHEL-47943] {CVE-2024-40931}
  - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47560 RHEL-47558] {CVE-2024-40904}
  - nvme-multipath: fix io accounting on failover (John Meneghini) [RHEL-59646 RHEL-56635]
  - nvme: fix multipath batched completion accounting (John Meneghini) [RHEL-59646 RHEL-56635]
  - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46481 RHEL-46479] {CVE-2024-39472}
  - tcp: add sanity checks to rx zerocopy (Paolo Abeni) [RHEL-58403 RHEL-29496] {CVE-2024-26640}
  - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49373 RHEL-49371] {CVE-2024-41005}
  - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48321 RHEL-48319] {CVE-2024-40977}
  - smb: client: fix hang in wait_for_response() for negproto (Jay Shin) [RHEL-61606 RHEL-57983]
  - NFSv4.1/pnfs: fix NFS with TLS in pnfs (Benjamin Coddington) [RHEL-61467 RHEL-34576]
  - ceph: remove the incorrect Fw reference check when dirtying pages (Xiubo Li) [RHEL-61415 RHEL-60255]
  - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Davide Caratti) [RHEL-48483 RHEL-44375] {CVE-2024-40995}
  - net/sched: taprio: extend minimum interval restriction to entire cycle too (Davide Caratti) [RHEL-44377 RHEL-44375] {CVE-2024-36244}
  - net/sched: taprio: make q->picos_per_byte available to fill_sched_entry() (Davide Caratti) [RHEL-44377 RHEL-44375] {CVE-2024-36244}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.42.1.el9_4]
changelog:
  - redhat/configs: Add CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - KVM: x86: Add BHI_NO (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-45492 RHEL-28203] {CVE-2024-2201}
  - KVM: x86: Use a switch statement and macros in __feature_translate() (Maxim Levitsky) [RHEL-45492 RHEL-32430]
  - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Maxim Levitsky) [RHEL-45492 RHEL-32430]
  - x86/entry/32: Convert do_fast_syscall_32() to bool return type (Prarit Bhargava) [RHEL-45492 RHEL-25415]
  - x86/entry: Add do_SYSENTER_32() prototype (Prarit Bhargava) [RHEL-45492 RHEL-25415]
  - x86/bugs: Reset speculation control settings on init (Prarit Bhargava) [RHEL-45492 RHEL-25415]
  - mpls: Reduce skb re-allocations due to skb_cow() (Guillaume Nault) [RHEL-61696 RHEL-55145]
  - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-39539 RHEL-39601 RHEL-33543 RHEL-35000] {CVE-2024-26935}
  - tty: Fix out-of-bound vmalloc access in imageblit (Andrew Halaney) [RHEL-42095 RHEL-24205] {CVE-2021-47383}
  - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54769 RHEL-54768] {CVE-2024-43854}
  - block: cleanup bio_integrity_prep (Ming Lei) [RHEL-54769 RHEL-25988]
  - block: refactor to use helper (Ming Lei) [RHEL-54769 RHEL-25988]
  - ceph: fix cap ref leak via netfs init_request (Patrick Donnelly) [RHEL-62666 RHEL-61459]
  - redhat/configs: Enable CONFIG_OCTEON_EP_VF (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep_vf: add ethtool support (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep_vf: add Tx/Rx processing and interrupt support (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep_vf: add support for ndo ops (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep_vf: add Tx/Rx ring resource setup and cleanup (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep_vf: add VF-PF mailbox communication. (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep_vf: add hardware configuration APIs (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep_vf: Add driver framework and device initialization (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep: support firmware notifications for VFs (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep: control net framework to support VF offloads (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep: PF-VF mailbox version support (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - octeon_ep: add PF-VF mailbox communication (CKI Backport Bot) [RHEL-61744 RHEL-25860]
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Chris von Recklinghausen) [RHEL-62209 RHEL-26268]
  - netfilter: nfnetlink_queue: un-break NF_REPEAT (Phil Sutter) [RHEL-62299]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.3.1.el9_5]
changelog:
  - perf: Fix event leak upon exec and file release (Michael Petlan) [RHEL-55606] {CVE-2024-43869}
  - perf: Fix event leak upon exit (Michael Petlan) [RHEL-55603] {CVE-2024-43870}
  - task_work: Introduce task_work_cancel() again (Michael Petlan) [RHEL-55603]
  - task_work: s/task_work_cancel()/task_work_cancel_func()/ (Michael Petlan) [RHEL-55603]
  - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44213] {CVE-2024-38558}
  - net: drop bad gso csum_start and offset in virtio_net_hdr (Laurent Vivier) [RHEL-54891] {CVE-2024-43817}
  - net: change maximum number of UDP segments to 128 (Laurent Vivier) [RHEL-54891] {CVE-2024-43817}
  - net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation (Laurent Vivier) [RHEL-54891] {CVE-2024-43817}
  - net: missing check virtio (Laurent Vivier) [RHEL-54891] {CVE-2024-43817}
  - fuse: Initialize beyond-EOF page contents before setting uptodate (CKI Backport Bot) [RHEL-56932] {CVE-2024-44947}
  - wifi: mac80211: Avoid address calculations via out of bounds array indexing (CKI Backport Bot) [RHEL-51285] {CVE-2024-41071}
  - nvme-pci: add missing condition check for existence of mapped data (Maurizio Lombardi) [RHEL-55099] {CVE-2024-42276}


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.4.1.el9_5]
changelog:
  - ice: fix VSI lists confusion when adding VLANs (Michal Schmidt) [RHEL-20571]
  - ice: fix accounting for filters shared by multiple VSIs (Michal Schmidt) [RHEL-20571]
  - nvme-multipath: fix io accounting on failover (John Meneghini) [RHEL-56635]
  - nvme: fix multipath batched completion accounting (John Meneghini) [RHEL-56635]
  - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44369] {CVE-2024-36270}
  - mm: list_lru: fix UAF for memory cgroup (Rafael Aquini) [RHEL-56160] {CVE-2024-43888}
  - platform/x86: dell-smbios-wmi: Avoid false-positive memcpy() warning (David Arcari) [RHEL-56614]
  - arm64: properly install vmlinuz.efi (Lenny Szubowicz) [RHEL-46772]
  - buildtar: fix tarballs with EFI_ZBOOT enabled (Lenny Szubowicz) [RHEL-46772]
  - wifi: iwlwifi: mvm: fix a crash on 7265 (Jose Ignacio Tornos Martinez) [RHEL-57681]
  - wifi: iwlwifi: mvm: support iwl_dev_tx_power_cmd_v8 (Jose Ignacio Tornos Martinez) [RHEL-57681]


author: Lucas Zampieri <lzampier@redhat.com> [5.14.0-503.5.1.el9_5]
changelog:
  - kabi: enable check-kabi (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol zlib_inflate_workspacesize to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol zlib_inflateInit2 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol zlib_inflateEnd to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol zlib_inflate to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol zgid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol zap_vma_ptes to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol yield to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xz_dec_run to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xz_dec_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xz_dec_end to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xsk_uses_need_wakeup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xsk_tx_release to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xsk_tx_peek_desc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xsk_tx_completed to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xsk_set_tx_need_wakeup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xsk_set_rx_need_wakeup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xsk_get_pool_from_qid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xsk_clear_rx_need_wakeup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xp_set_rxq_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xp_raw_get_dma to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xp_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xp_dma_unmap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xp_dma_sync_for_device_slow to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xp_dma_sync_for_cpu_slow to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xp_dma_map to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xp_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_warn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_set_features_flag to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_rxq_info_unreg_mem_model to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_rxq_info_unreg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_rxq_info_reg_mem_model to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __xdp_rxq_info_reg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_rxq_info_is_reg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_return_frame_rx_napi to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_return_frame to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_master_redirect to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_features_set_redirect_target to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_features_clear_redirect_target to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_do_redirect to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_do_flush to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xdp_convert_zc_to_xdp_frame to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xattr_full_name to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xa_store to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xas_find to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xa_set_mark to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xa_load to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __xa_insert to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xa_get_mark to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xa_find_after to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xa_find to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xa_erase to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xa_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol xa_clear_mark to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __xa_alloc_cyclic to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __xa_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol x86_spec_ctrl_base to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_return_thunk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_rsi to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_rdx to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_rdi to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_rcx to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_rbx to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_rbp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_rax to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_r9 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_r8 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_r15 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_r14 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_r13 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_r12 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_r11 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __x86_indirect_thunk_r10 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol x86_cpu_to_apicid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __write_overflow_field to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol write_inode_now to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __warn_printk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol wake_up_process to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __wake_up to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __wait_on_buffer to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol wait_for_completion_timeout to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol wait_for_completion_interruptible to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol wait_for_completion to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vzalloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vsprintf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vsnprintf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vscnprintf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vprintk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vm_zone_stat to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vm_munmap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vm_mmap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vm_event_states to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vmemmap_base to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vmalloc_to_page to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vmalloc_node to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vmalloc_base to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vmalloc_32 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vmalloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __vmalloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vlan_dev_vlan_proto to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vlan_dev_vlan_id to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vlan_dev_real_dev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __virt_addr_valid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_unlink to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_symlink to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_statfs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __vfs_setxattr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_rmdir to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_rename to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __vfs_removexattr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_readlink to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_mknod to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_mkdir to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_llseek to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_link to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_iter_write to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_iter_read to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __vfs_getxattr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_get_link to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_getattr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_fsync_range to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_fsync to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfs_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol vfree to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __var_waitqueue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_undefined to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_teardown_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_setup_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_possible_blades to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __uv_hub_info_list to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_get_hubless_system to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __uv_cpu_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_bios_obj_count to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_bios_install_heap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_bios_get_pci_topology to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_bios_get_master_nasid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_bios_get_heapsize to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_bios_get_geoinfo to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_bios_enum_ports to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol uv_bios_enum_objs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol usleep_range_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol up_write to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol up_read to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol up to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_sysctl_table to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_switchdev_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_switchdev_blocking_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_shrinker to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_reboot_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_nmi_handler to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_netevent_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_netdevice_notifier_net to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_netdevice_notifier_dev_net to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_netdevice_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_netdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_kprobe to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_inetaddr_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_inet6addr_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_filesystem to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_fib_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_chrdev_region to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __unregister_chrdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_blkdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unregister_binfmt to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unmap_mapping_range to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol unlock_page to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol udp_tunnel_nic_ops to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol udp4_hwcsum to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __udelay to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_unregister_driver to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_termios_encode_baud_rate to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_std_termios to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_register_driver to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_port_link_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_port_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_port_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __tty_insert_flip_string_flags to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_flip_buffer_push to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_driver_kref_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tty_buffer_request_room to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __tty_alloc_driver to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tsc_khz to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol try_wait_for_completion to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol try_module_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol truncate_pagecache to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol truncate_inode_pages_range to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol truncate_inode_pages_final to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol truncate_inode_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_seq_putc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_seq_printf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_raw_output_prep to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_print_flags_seq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __tracepoint_xdp_exception to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __tracepoint_mmap_lock_start_locking to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __tracepoint_mmap_lock_released to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __tracepoint_mmap_lock_acquire_returned to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_handle_return to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_event_reg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_event_raw_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_event_printf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_event_ignore_this_pid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_event_buffer_reserve to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol trace_event_buffer_commit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol touch_softlockup_watchdog to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _totalram_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tls_validate_xmit_skb to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tls_get_record to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol timer_delete_sync to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol timer_delete to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol timecounter_read to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol timecounter_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol timecounter_cyc2time to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol time64_to_tm to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol this_cpu_off to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol thaw_bdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tcp_hashinfo to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __task_pid_nr_ns to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tasklet_unlock_wait to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tasklet_setup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __tasklet_schedule to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tasklet_kill to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol tasklet_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __tasklet_hi_schedule to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sys_tz to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol system_wq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol system_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sysfs_streq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sysfs_remove_group to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sysfs_remove_file_ns to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sysfs_remove_bin_file to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __sysfs_match_string to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sysfs_emit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sysfs_create_group to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sysfs_create_file_ns to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sysfs_create_bin_file to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sysfs_add_file_to_group to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sync_mapping_buffers to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol synchronize_rcu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol synchronize_net to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol synchronize_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sync_blockdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __symbol_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __symbol_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __sw_hweight64 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __sw_hweight32 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol submit_bio_noacct to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol submit_bio to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strstr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strsep to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strrchr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strnlen_user to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strnlen to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strncpy_from_user to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strncpy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strncmp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strncasecmp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strlen to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strlcpy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strlcat to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strim to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strcspn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strcpy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strcmp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strchr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol strcat to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol static_key_slow_inc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol static_key_slow_dec to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol static_key_count to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __stack_chk_fail to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sscanf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sprintf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sort to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol softnet_data to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sock_setsockopt to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sock_sendmsg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sock_release to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sock_recvmsg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sock_gen_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sock_create_kern to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sock_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sock_alloc_file to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sn_region_size to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol snprintf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sn_partition_id to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol smp_call_function_single_async to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol smp_call_function_single to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol smp_call_function_many to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sme_me_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sk_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_vlan_pop to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_tstamp_tx to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __skb_recv_udp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_realloc_headroom to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_queue_tail to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_push to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_pull to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __skb_pad to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __skb_flow_dissect to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_ext_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_dequeue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_copy_bits to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_copy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_clone_tx_timestamp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_clone to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_checksum_help to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_checksum to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol skb_add_rx_frag to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sk_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sized_strscpy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol single_release to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol single_open_size to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol single_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol simple_write_to_buffer to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol simple_strtoull to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol simple_strtoul to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol simple_strtol to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol simple_statfs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol simple_read_from_buffer to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol simple_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol simple_attr_release to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol simple_attr_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol si_meminfo to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sigprocmask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol shrink_dcache_sb to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol shrink_dcache_parent to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __sg_page_iter_start to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __sg_page_iter_dma_next to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sg_next to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sget to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sg_copy_to_buffer to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sg_copy_from_buffer to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_user_nice to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_page_writeback to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __set_page_dirty_nobuffers to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_page_dirty_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_page_dirty to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_normalized_timespec64 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_nlink to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_freezable to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_disk_ro to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_current_groups to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_cpus_allowed_ptr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_capacity to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol set_blocksize to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol setattr_prepare to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol seq_write to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol seq_release to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol seq_read to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol seq_puts to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol seq_putc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol seq_printf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol seq_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol seq_lseek to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol send_sig_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol send_sig to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol security_sb_set_mnt_opts to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol security_sb_eat_lsm_opts to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol security_inode_init_security to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol security_free_mnt_opts to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol security_d_instantiate to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sdev_prefix_printk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __SCT__tp_func_xdp_exception to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __SCT__preempt_schedule_notrace to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __SCT__preempt_schedule to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __SCT__might_resched to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __SCT__cond_resched to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_vpd_lun_id to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_remove_host to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_remove_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_register_driver to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsilun_to_int to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_is_sdev_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_is_fc_rport to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_host_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_host_lookup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_host_busy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_host_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_done to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_device_type to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_device_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_device_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_command_size_tbl to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_change_queue_depth to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsicam_bios_param to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_bus_type to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_alloc_request to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_add_host_with_dma to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scsi_add_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol scnprintf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __SCK__tp_func_xdp_exception to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol schedule_timeout to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol schedule to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sched_numa_hop_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sched_clock_cpu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol sched_clock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rtnl_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rtnl_trylock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rtnl_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rtnl_is_locked to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rps_may_expire_flow to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol round_jiffies to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol root_device_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __root_device_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rht_bucket_nested_insert to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rht_bucket_nested to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __rht_bucket_nested to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rhltable_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rhashtable_insert_slow to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rhashtable_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rhashtable_free_and_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rhashtable_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol revert_creds to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol request_threaded_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __request_region to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __request_module to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol request_firmware_direct to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol request_firmware to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol remove_wait_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol remove_proc_entry to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol remap_pfn_range to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol release_sock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __release_region to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol release_firmware to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_sysctl_table to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_switchdev_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_switchdev_blocking_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_shrinker to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_reboot_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __register_nmi_handler to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_netevent_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_netdevice_notifier_net to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_netdevice_notifier_dev_net to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_netdevice_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_netdevice to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_netdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_kprobe to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_inetaddr_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_inet6addr_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_filesystem to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_fib_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol register_chrdev_region to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __register_chrdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __register_blkdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __register_binfmt to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __refrigerator to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol refcount_warn_saturate to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol refcount_dec_if_one to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol refcount_dec_and_mutex_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol recalc_sigpending to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __read_overflow2_field to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_user_mmap_io to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_user_mmap_entry_remove to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_user_mmap_entry_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_user_mmap_entry_insert to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_user_mmap_entry_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_resolve_route to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_resolve_addr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_reject to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_read_gid_l2_fields to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_query_gid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_listen to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_disconnect to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_destroy_qp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_destroy_id to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_create_qp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __rdma_create_kernel_id to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_connect to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_bind_addr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_alloc_hw_stats_struct to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rdma_accept to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rcuref_get_slowpath to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rcu_read_unlock_strict to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __rcu_read_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __rcu_read_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rcu_barrier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rb_next to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rb_insert_color to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rb_first to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol rb_erase to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_write_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_write_unlock_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_write_unlock_bh to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_write_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_write_trylock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_write_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_write_lock_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_write_lock_bh to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_write_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_unlock_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_unlock_bh to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_trylock_bh to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_trylock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_lock_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_lock_bh to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_spin_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_read_unlock_irqrestore to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_read_unlock_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_read_unlock_bh to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_read_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_read_lock_irqsave to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_read_lock_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_read_lock_bh to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _raw_read_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ___ratelimit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol radix_tree_tag_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol radix_tree_next_chunk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol radix_tree_lookup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol radix_tree_insert to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol radix_tree_delete to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol queue_work_on to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol queue_delayed_work_on to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol qed_put_iscsi_ops to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol qed_put_eth_ops to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol qdisc_reset to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pv_ops to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __put_user_8 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __put_user_4 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __put_user_2 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol put_unused_fd to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol put_disk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __put_devmap_managed_page_refs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol put_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __put_cred to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ptrs_per_p4d to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ptp_schedule_worker to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ptp_parse_header to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ptp_find_pin to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ptp_clock_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ptp_clock_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ptp_clock_index to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ptp_clock_event to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ptp_classify_raw to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ___pskb_trim to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __pskb_pull_tail to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pskb_expand_head to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol psample_sample_packet to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol proc_remove to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol proc_mkdir_mode to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol proc_mkdir to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol proc_dostring to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol proc_dointvec_minmax to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol proc_dointvec to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol proc_create_data to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol proc_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol priv_to_devlink to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __printk_ratelimit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _printk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol print_hex_dump to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol prepare_to_wait_exclusive to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol prepare_to_wait_event to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol prepare_to_wait to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol prepare_creds to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol posix_test_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol posix_lock_file to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol posix_acl_valid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol posix_acl_to_xattr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol posix_acl_from_xattr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol posix_acl_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol poll_initwait to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol poll_freewait to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pm_schedule_suspend to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __pm_runtime_resume to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pldmfw_op_pci_match_record to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pldmfw_flash_image to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pipe_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pipe_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pid_task to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol physical_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol phys_base to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pgprot_writecombine to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pgdir_shift to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol perf_trace_run_bpf_submit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol perf_trace_buf_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol percpu_ref_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol percpu_ref_exit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __per_cpu_offset to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pcpu_hot to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_write_config_word to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_write_config_dword to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_wake_from_d3 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_wait_for_pending_transaction to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_vfs_assigned to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_unregister_driver to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_sriov_set_totalvfs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_sriov_get_totalvfs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_set_power_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_set_master to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_select_bars to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_save_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_restore_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_restore_msi_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_request_selected_regions to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_request_regions to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_release_selected_regions to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_release_regions to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __pci_register_driver to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_read_config_word to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_read_config_dword to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_read_config_byte to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_prepare_to_sleep to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_num_vf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_msix_free_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_msix_can_alloc_dyn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_msix_alloc_irq_at to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_irq_vector to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_iov_virtfn_devfn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_iov_vf_id to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_iov_get_pf_drvdata to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_iounmap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_ioremap_bar to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_iomap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_get_dsn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_get_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_free_irq_vectors to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_find_ext_capability to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_find_capability to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pcie_relaxed_ordering_enabled to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pcie_ptm_enabled to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pcie_print_link_status to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_enable_wake to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_enable_sriov to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_enable_ptm to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_enable_msix_range to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_enable_msi to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_enable_device_mem to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_enable_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_enable_atomic_ops_to_root to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pcie_flr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pcie_capability_read_word to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pcie_capability_read_dword to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pcie_bandwidth_available to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_disable_sriov to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_disable_msix to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_disable_msi to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_disable_link_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_disable_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_dev_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_device_is_present to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_dev_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_dev_driver to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_clear_master to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_cfg_access_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_cfg_access_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_bus_type to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_alloc_irq_vectors to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pci_aer_clear_nonfatal_status to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol path_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_set_int to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_set_bool to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_ushort to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_ulong to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_uint to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_string to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_short to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_long to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_int to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_charp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_byte to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_ops_bool to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_get_int to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol param_array_ops to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol panic_notifier_list to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol panic to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __pagevec_release to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pagevec_lookup_range_tag to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol page_pool_update_nid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol page_pool_get_stats to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol page_pool_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol page_pool_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol page_pool_alloc_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol page_offset_base to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol page_frag_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __page_frag_cache_drain to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol pagecache_get_page to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol override_creds to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol on_each_cpu_cond_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __num_online_cpus to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol numa_node to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ns_to_timespec64 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol nr_cpu_ids to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol notify_change to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol noop_llseek to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol node_to_cpumask_map to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol node_states to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __node_distance to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol node_data to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol nla_find to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol new_inode to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol net_ratelimit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_tx_wake_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_tx_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_tx_stop_all_queues to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_tx_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_set_xps_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_set_tso_max_size to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_set_real_num_tx_queues to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_set_real_num_rx_queues to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_schedule_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_rx to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __netif_napi_del to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_napi_add_weight to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_device_detach to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_device_attach to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_carrier_on to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_carrier_off to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netif_carrier_event to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol net_dim to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_warn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_update_features to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_unbind_sb_channel to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_state_change to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_set_tc_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_set_sb_channel to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_set_num_tc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_rx_handler_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_rx_handler_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_rss_key_fill to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_reset_tc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_refcnt_read to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_printk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_port_same_parent_id to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_pick_tx to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_notice to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_master_upper_dev_get_rcu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_master_upper_dev_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_lower_get_next to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_features_change to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_err to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_crit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol netdev_bind_sb_channel_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __netdev_alloc_skb to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol neigh_lookup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __neigh_event_send to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol neigh_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ndo_dflt_fdb_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ndo_dflt_bridge_getlink to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __ndelay to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol napi_schedule_prep to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __napi_schedule_irqoff to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __napi_schedule to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol napi_gro_receive to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol napi_enable to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol napi_disable to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol napi_consume_skb to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol napi_complete_done to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol napi_busy_loop to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol napi_build_skb to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol napi_alloc_skb to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol names_cachep to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mutex_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mutex_trylock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mutex_lock_interruptible to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mutex_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mutex_is_locked to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __mutex_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol msleep_interruptible to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol msleep to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __msecs_to_jiffies to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mpage_writepages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mpage_readahead to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mount_nodev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mount_bdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol module_refcount to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol module_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol module_layout to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __module_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mod_timer to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mod_delayed_work_on to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mntput to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mntget to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mmu_notifier_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mmu_notifier_get_locked to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mmput to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __mmap_lock_do_trace_start_locking to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __mmap_lock_do_trace_released to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __mmap_lock_do_trace_acquire_returned to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mlxfw_firmware_flash to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol misc_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol misc_deregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol metadata_dst_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol metadata_dst_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol memset to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mem_section to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mempool_free_slab to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mempool_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mempool_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mempool_create_node to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mempool_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mempool_alloc_slab to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mempool_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol memparse to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol memory_read_from_buffer to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol memmove to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol memdup_user to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol memcpy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol memcmp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol memchr_inv to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mds_idle_clear to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mark_page_accessed to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __mark_inode_dirty to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol mark_buffer_dirty to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol loops_per_jiffy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol lookup_one_len to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol lookup_bdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol lock_sock_nested to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol locks_lock_inode_wait to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol locks_delete_block to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol lockref_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __local_bh_enable_ip to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol llist_add_batch to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __list_del_entry_valid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __list_add_valid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kvmalloc_node to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kvfree_call_rcu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kvfree to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ktime_get_with_offset to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ktime_get_ts64 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ktime_get_snapshot to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ktime_get_real_ts64 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ktime_get_real_seconds to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ktime_get_coarse_real_ts64 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ktime_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_use_mm to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_unuse_mm to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_stop to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_should_stop to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_queue_work to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_queue_delayed_work to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_destroy_worker to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_delayed_work_timer_fn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_create_worker to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_create_on_node to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_complete_and_exit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_cancel_work_sync to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_cancel_delayed_work_sync to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kthread_bind to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kstrtoull to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kstrtouint to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kstrtou8 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kstrtou16 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kstrtos16 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kstrtoll to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kstrtoint to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kstrtobool to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kstrdup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol krealloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kobject_uevent_env to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kobject_uevent to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kobject_set_name to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kobject_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kobject_init_and_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kobject_get_unless_zero to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kobject_create_and_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmemdup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmem_cache_shrink to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmem_cache_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmem_cache_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmem_cache_create_usercopy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmem_cache_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmem_cache_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmalloc_trace to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmalloc_node_trace to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __kmalloc_node to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmalloc_large to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kmalloc_caches to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __kmalloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kill_pid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kill_pgrp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kill_fasync to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kill_block_super to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kill_anon_super to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kfree to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kexec_crash_loaded to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kern_path_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kern_path to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kernel_write to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kernel_sigaction to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kernel_sendmsg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kernel_recvmsg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kernel_read to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kernel_fpu_end to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kernel_fpu_begin_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kblockd_schedule_work to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol kasprintf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol jiffies_to_usecs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol jiffies_to_msecs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol jiffies_64 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol jiffies to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iter_file_splice_write to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iterate_dir to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol is_vmalloc_addr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol is_uv_system to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iscsi_boot_create_host_kset to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol irq_set_affinity_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol irq_poll_enable to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol irq_poll_disable to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol irq_get_irq_data to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol irq_cpu_rmap_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __irq_apply_affinity_hint to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ipv6_stub to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ipv6_skip_exthdr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ipv6_find_hdr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ipv6_chk_addr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __ipv6_addr_type to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iput to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ip_tos2prio to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ip_send_check to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ip_route_output_flow to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ip_queue_xmit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __ip_dev_find to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ip6_route_output_flags to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ip6_dst_hoplimit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iowrite32be to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iov_iter_kvec to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iov_iter_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iov_iter_advance to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iounmap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ioremap_wc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ioremap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ioread8 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ioread32be to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ioread16be to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol iomem_resource to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol invalidate_mapping_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol invalidate_inode_pages2_range to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol invalidate_bdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol int_to_scsilun to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol int_pow to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __insert_inode_hash to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol inode_permission to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol inode_init_always to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol init_wait_var_entry to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __init_waitqueue_head to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol init_wait_entry to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol init_uts_ns to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol init_user_ns to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol init_timer_key to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol init_task to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __init_swait_queue_head to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol init_special_inode to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __init_rwsem to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol init_net to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol in_group_p to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol inet_del_protocol to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol inet_add_protocol to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol in_dev_finish_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol in_aton to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol in6_pton to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol in4_pton to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol import_iovec to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ilookup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol igrab to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol idr_remove to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol idr_preload to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol idr_get_next_ul to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol idr_find to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol idr_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol idr_alloc_u32 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol idr_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ida_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ida_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ida_alloc_range to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_unregister_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_umem_release to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_umem_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_umem_find_best_pgsz to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_umem_dmabuf_get_pinned to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_sg_to_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_set_device_ops to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_resize_cq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_register_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_query_port to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_modify_qp_is_ok to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_get_eth_speed to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_dispatch_event to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ibdev_warn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ibdev_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_device_set_netdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_device_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_device_get_by_netdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ibdev_err to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol I_BDEV to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_destroy_cq_user to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_dereg_mr_user to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_dealloc_pd_user to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ib_dealloc_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __ib_create_cq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __ib_alloc_pd to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _ib_alloc_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hyperv_write_cfg_blk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hyperv_reg_block_invalidate to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hyperv_read_cfg_blk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hwmon_device_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hwmon_device_register_with_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hwmon_device_register_with_groups to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __hw_addr_unsync_dev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __hw_addr_sync_dev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __hw_addr_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hugetlb_optimize_vmemmap_key to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hrtimer_start_range_ns to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hrtimer_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hrtimer_forward to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hrtimer_cancel to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol hex_dump_to_buffer to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol groups_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol groups_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol gnss_register_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol gnss_put_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol gnss_insert_raw to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol gnss_deregister_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol gnss_allocate_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol get_zeroed_page to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol get_user_pages_remote to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol get_user_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __get_user_nocheck_1 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __get_user_2 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __get_user_1 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol get_unused_fd_flags to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol get_random_bytes to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol get_fs_type to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __get_free_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol get_device_system_crosststamp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol get_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_write_end to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_write_checks to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_shutdown_super to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_setlease to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_read_dir to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_pipe_buf_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_permission to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_fillattr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_file_write_iter to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __generic_file_write_iter to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_file_splice_read to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_file_read_iter to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_file_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_file_llseek to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_error_remove_page to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol generic_delete_inode to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol gcd to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol fs_bio_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol freezing_slow_path to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol freeze_bdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol free_percpu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol free_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __free_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol free_netdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol free_irq_cpu_rmap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol free_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol free_fib_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol free_cpumask_var to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol fput to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol fortify_panic to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol forget_all_cached_acls to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol follow_up to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol folio_wait_bit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __folio_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __folio_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __folio_cancel_dirty to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __flush_workqueue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flush_work to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flush_signals to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_vlan to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_pppoe to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_ports to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_ipv6_addrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_ipv4_addrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_ip to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_eth_addrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_enc_ports to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_enc_keyid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_enc_ipv6_addrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_enc_ipv4_addrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_enc_ip to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_enc_control to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_cvlan to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_control to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_rule_match_basic to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_keys_dissector to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_indr_dev_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_indr_dev_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_indr_block_cb_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_block_cb_setup_simple to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_block_cb_lookup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_block_cb_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol flow_block_cb_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol firmware_request_nowarn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol finish_wait to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol finish_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol finish_no_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol find_vma to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol find_pid_ns to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _find_next_zero_bit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _find_next_bit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _find_next_andnot_bit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _find_next_and_bit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _find_last_bit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol find_get_pid to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol find_get_pages_range_tag to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _find_first_zero_bit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _find_first_bit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol filp_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol filp_close to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol file_write_and_wait_range to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol file_ns_capable to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol filemap_write_and_wait_range to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol filemap_fault to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol file_bdev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol fget to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __fentry__ to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol fd_install to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol event_triggers_call to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol eth_validate_addr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol eth_type_trans to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ethtool_sprintf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ethtool_op_get_ts_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ethtool_op_get_link to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ethtool_intersect_link_masks to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ethtool_convert_link_mode_to_legacy_u32 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ethtool_convert_legacy_u32_to_link_mode to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol eth_platform_get_mac_address to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol eth_get_headlen to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol ether_setup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol end_page_writeback to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol enable_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol empty_zero_page to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol emergency_restart to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol elfcorehdr_addr to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol efi to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __dynamic_pr_debug to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __dynamic_netdev_dbg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __dynamic_ibdev_dbg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __dynamic_dev_dbg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dump_stack to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dst_release to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_set_d_op to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol drop_super to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol driver_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol driver_remove_file to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol driver_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol driver_for_each_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol driver_create_file to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_rehash to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dql_reset to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dql_completed to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dput to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_prune_aliases to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_pin_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_pin_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_pin_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_pin_on_pin_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_pin_on_pin_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_pin_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_pin_change_ntf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_netdev_pin_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_netdev_pin_clear to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_device_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_device_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_device_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_device_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dpll_device_change_ntf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_path to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol down_write_trylock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol down_write to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol down_trylock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol down_read_trylock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol down_read to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol down_interruptible to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol downgrade_write to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol down to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol do_trace_netlink_extack to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol done_path_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_obtain_alias to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_move to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dmi_get_system_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dmi_find_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_unmap_page_attrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_set_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_set_coherent_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_pool_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_pool_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_pool_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_pool_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dmam_free_coherent to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_map_page_attrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dmam_alloc_attrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_make_root to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_free_attrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dma_alloc_attrs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol disable_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_invalidate to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_instantiate to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_hash_and_lookup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dget_parent to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_find_alias to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _dev_warn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_uc_del to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_uc_add_excl to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_uc_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_set_promiscuity to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_set_name to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_set_mtu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_set_mac_address to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_remove_pack to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __dev_queue_xmit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_printk_emit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devm_request_threaded_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devm_kmemdup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devm_kmalloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devm_kfree to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devm_kasprintf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devm_hwmon_device_register_with_groups to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devm_free_irq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_mc_del_global to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_mc_del to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_mc_add_global to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_mc_add_excl to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_mc_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devmap_managed_key to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __devm_add_action to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_unlock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_traps_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_traps_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_trap_groups_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_trap_groups_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_resources_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_resource_size_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_resource_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_rate_nodes_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_rate_node_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_rate_leaf_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_rate_leaf_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_port_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_port_health_reporter_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_params_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_params_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_param_driverinit_value_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_param_driverinit_value_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_trap_report to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_to_dev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_resources_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_resource_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_resource_occ_get_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_resource_occ_get_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_remote_reload_actions_performed to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_region_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_region_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_priv to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_port_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_port_type_clear to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_port_register_with_ops to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_port_health_reporter_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_port_attrs_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_port_attrs_pci_vf_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_port_attrs_pci_sf_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_port_attrs_pci_pf_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_params_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_params_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_net to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_info_version_stored_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_info_version_running_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_info_version_fixed_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_info_serial_number_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_health_reporter_state_update to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_health_reporter_priv to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_health_reporter_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_health_reporter_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_health_report to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_u8_pair_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_u64_pair_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_u32_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_u32_pair_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_string_pair_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_pair_nest_start to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_pair_nest_end to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_obj_nest_start to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_obj_nest_end to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_bool_pair_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_binary_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_binary_pair_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_binary_pair_nest_start to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_binary_pair_nest_end to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_arr_pair_nest_start to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_fmsg_arr_pair_nest_end to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_flash_update_timeout_notify to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_flash_update_status_notify to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devlink_alloc_ns to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_health_reporter_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_health_reporter_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol devl_assert_locked to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_kfree_skb_irq_reason to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_kfree_skb_any_reason to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _dev_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol device_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol device_set_wakeup_enable to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol device_remove_file to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol device_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol device_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol device_del to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol device_create_file to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol device_create to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol device_add_disk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_get_stats to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_get_iflink to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_get_by_name to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_get_by_index_rcu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_get_by_index to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _dev_err to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_driver_string to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _dev_crit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_close to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_change_flags to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_base_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_addr_del to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_addr_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dev_add_pack to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol destroy_workqueue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __destroy_inode to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dentry_open to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol del_gendisk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol delayed_work_timer_fn to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __delay to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol default_wake_function to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol default_llseek to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dec_zone_page_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_remove to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_lookup_and_remove to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_lookup to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_x32 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_u8 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_u64 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_u32 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_size_t to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_file_unsafe to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_file to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_dir to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_blob to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_create_atomic_t to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_attr_write to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol debugfs_attr_read to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol deactivate_super to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_drop to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __d_drop to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dcb_setapp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dcbnl_ieee_notify to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dcb_ieee_setapp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dcb_ieee_delapp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dcb_getapp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dca_unregister_notify to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dca_remove_requester to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dca_register_notify to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dca_add_requester to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol dca3_get_tag to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_alloc_anon to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol d_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol current_umask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol current_time to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _ctype to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol csum_partial to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol csum_ipv6_magic to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol crypto_shash_update to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol crypto_shash_final to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol crypto_destroy_tfm to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol crypto_alloc_shash to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol create_empty_buffers to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol crc32_le to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cpu_sibling_map to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __cpu_present_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __cpu_possible_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __cpu_online_mask to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cpu_number to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cpumask_local_spread to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cpu_khz to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cpu_info to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __cpuhp_setup_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __cpuhp_remove_state to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cpufreq_quick_get to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cpu_bit_bitmap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol copy_user_generic_unrolled to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol copy_user_generic_string to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol copy_user_enhanced_fast_string to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _copy_to_user to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _copy_to_iter to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __copy_overflow to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _copy_from_user to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _copy_from_iter to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol convert_art_ns_to_tsc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol consume_skb to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __const_udelay to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol config_group_init_type_name to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol config_group_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol configfs_unregister_subsystem to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol configfs_register_subsystem to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __cond_resched to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol complete_all to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol complete to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol commit_creds to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol clock_t_to_jiffies to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol clear_page_dirty_for_io to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol clear_nlink to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol clear_inode to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol class_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol class_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol class_destroy to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __check_object_size to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cdev_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cdev_del to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cdev_alloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cdev_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cc_mkdec to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol capable to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cancel_work_sync to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cancel_work to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cancel_delayed_work_sync to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cancel_delayed_work to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol call_usermodehelper to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol call_switchdev_notifiers to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol call_srcu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol call_rcu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol call_netdevice_notifiers to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol cachemode2protval to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bus_unregister_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bus_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bus_register_notifier to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bus_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bus_for_each_dev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bus_find_device to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol build_skb to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __break_lease to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_warn_invalid_xdp_action to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_trace_run7 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_trace_run5 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_trace_run4 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_trace_run3 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_trace_run2 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_trace_run1 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_stats_enabled_key to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_prog_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_prog_inc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_prog_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_master_redirect_enabled_key to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bpf_dispatcher_xdp_func to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol boot_cpu_data to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol block_write_full_page to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol block_write_begin to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blocking_notifier_chain_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blocking_notifier_chain_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blocking_notifier_call_chain to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blockdev_superblock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_status_to_errno to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_start_plug to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_stack_limits to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_set_queue_depth to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_rq_map_user_iov to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_rq_map_user to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __blk_rq_map_sg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_rq_map_kern to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_segment_boundary to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_physical_block_size to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_max_segments to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_max_hw_sectors to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_max_discard_sectors to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_logical_block_size to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_io_opt to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_io_min to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_flag_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_flag_clear to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_dma_alignment to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_queue_bounce_limit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_put_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_unfreeze_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_stop_hw_queues to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_start_request to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_run_hw_queues to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_run_hw_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_map_queues to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_init_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_init_allocated_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_freeze_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_free_tag_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_free_request to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_end_request to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __blk_mq_end_request to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_destroy_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_complete_request to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_alloc_tag_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_mq_alloc_request to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_integrity_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_finish_plug to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blk_execute_rq to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol blkdev_issue_flush to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __blk_alloc_disk to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bitmap_zalloc_node to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bitmap_zalloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_xor to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_weight to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_subset to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_set to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bitmap_release_region to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bitmap_print_to_pagebuf to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bitmap_parselist to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_or to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_intersects to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bitmap_from_arr32 to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bitmap_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bitmap_find_next_zero_area_off to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bitmap_find_free_region to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_equal to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_clear to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_andnot to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __bitmap_and to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bioset_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bioset_exit to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_put to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_kmalloc to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_integrity_prep to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_endio to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_clone_blkg_association to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_associate_blkg to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_alloc_clone to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_alloc_bioset to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bio_add_page to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bin2hex to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bdev_file_open_by_path to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol bdev_file_open_by_dev to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol balance_dirty_pages_ratelimited to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol avenrun to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol auxiliary_driver_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __auxiliary_driver_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol auxiliary_device_init to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __auxiliary_device_add to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol autoremove_wake_function to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol atomic_notifier_chain_unregister to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol atomic_notifier_chain_register to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol atomic_notifier_call_chain to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol _atomic_dec_and_lock to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol async_synchronize_full_domain to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol async_synchronize_full to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol async_schedule_node to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol arp_tbl to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol argv_split to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol argv_free to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol arch_touch_nmi_watchdog to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol alloc_workqueue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __alloc_skb to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __alloc_percpu_gfp to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __alloc_percpu to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol alloc_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol __alloc_pages to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol alloc_netdev_mqs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol alloc_etherdev_mqs to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol alloc_cpu_rmap to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol alloc_chrdev_region to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol add_wait_queue_exclusive to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol add_wait_queue to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol add_timer to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol acpi_get_table to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol acpi_disabled to stablelist (Čestmír Kalina) [RHEL-56065]
  - kabi: add symbol abort_creds to stablelist (Čestmír Kalina) [RHEL-56065]


